$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/801b7438-7ef6-3f1c-adc8-5eb274bc7d8e.roa File: 801b7438-7ef6-3f1c-adc8-5eb274bc7d8e.roa (raw, json) Hash identifier: YG3XU7m6I/bXmE8aq22ZPWZ4dfMXl7Iyb8oydbYrkWY= Subject key identifier: D5:95:BA:5B:59:FE:21:7C:BD:3A:F9:B8:3F:CF:FF:2A:D8:71:83:2B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD3FA7AE237650FB7E780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/801b7438-7ef6-3f1c-adc8-5eb274bc7d8e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 63264 IP address blocks: 172.109.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:fa:7a:e2:37:65:0f:b7:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=d2332194-2e1d-438e-9325-67c9ffcfec52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:c3:e1:17:a5:d5:cf:e7:a6:c9:78:a3:0f: b0:34:f9:e9:2d:dc:db:da:2c:c7:34:54:7e:68:5f: cd:09:59:46:c4:27:64:58:9b:61:2f:d3:66:8b:98: 03:88:09:ba:55:d4:b1:60:16:a4:70:d0:bb:51:4f: 05:10:9c:b8:2c:28:e1:b6:d6:16:d5:6c:02:20:a2: 57:6e:70:f6:88:d8:55:ce:ef:72:c9:f6:63:0b:e9: 09:a5:2f:6f:2e:c8:73:8b:0a:b6:2e:ae:b9:29:95: f9:84:4c:7f:34:c5:9c:ef:a2:7c:c0:d3:9a:7e:23: bb:cb:a4:ed:44:0a:a1:9f:cc:0d:c1:75:6c:7f:df: da:0e:86:ec:46:5d:b6:4f:08:50:a8:8f:f0:ad:42: 03:72:43:3c:32:87:66:b8:c4:38:00:60:9a:cc:4e: da:67:89:f5:fb:55:23:ff:e4:66:11:2f:d9:2f:6b: 01:58:43:cd:85:10:e7:22:8d:e9:cd:f0:57:b1:9d: 18:ac:d9:89:53:c4:4f:38:21:5d:e0:88:c3:42:1a: c5:a6:98:22:80:a3:e9:eb:72:2d:ac:6e:3f:0e:d1: 87:54:29:75:a3:c8:41:52:f0:5b:c4:2b:e3:9e:7c: d8:4c:94:e7:56:63:62:fa:31:ac:2d:43:96:27:51: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:BA:5B:59:FE:21:7C:BD:3A:F9:B8:3F:CF:FF:2A:D8:71:83:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/801b7438-7ef6-3f1c-adc8-5eb274bc7d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.109.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2c:f9:7c:72:f7:ee:c9:53:d2:32:16:ae:bc:dd:77:81:ca: 50:87:1c:3e:2b:bb:23:e6:73:7a:36:f1:af:c3:93:30:f6:f9: cc:96:84:da:a8:8e:f7:8f:f0:1a:aa:f4:bd:32:64:d6:69:4e: 15:ac:d5:28:bb:ce:91:8c:c8:41:b8:a9:71:4a:d0:be:28:26: d1:82:37:64:47:15:97:e8:ec:83:2c:c3:b7:be:fe:d2:87:56: 37:f3:66:8d:87:4f:57:ad:30:07:01:2b:17:c5:e6:2b:89:a1: ad:e5:89:ab:05:d7:52:bc:85:d8:09:99:ea:33:ad:8d:52:ba: a4:7f:c5:e0:31:b4:2a:86:f8:47:0e:29:f4:fe:c5:68:b4:86: 0f:fe:1d:65:9c:99:f0:c3:d5:f9:bb:45:b0:a3:b0:c0:2e:ae: 13:8e:14:8c:15:18:10:c6:29:f6:2e:93:3a:d1:d9:83:56:13: b1:63:24:77:65:ab:ee:36:80:1f:6e:62:e4:af:4e:19:0d:30: 01:40:8e:f6:b8:de:1b:23:6d:5f:7f:a5:1e:a4:9f:2e:fd:76: e5:0a:85:bf:7d:8b:b8:dd:14:37:b7:46:ba:80:9d:4a:f9:50: 5c:35:03:6f:63:a0:02:5c:d7:85:15:da:66:a7:4e:82:cd:79: 21:56:4f:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNP6euI3ZQ+354AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZDIzMzIxOTQtMmUxZC00MzhlLTkzMjUtNjdjOWZmY2ZlYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitLD4Rel1c/npsl4ow+wNPnpLdzb2izHNFR+ aF/NCVlGxCdkWJthL9Nmi5gDiAm6VdSxYBakcNC7UU8FEJy4LCjhttYW1WwCIKJX bnD2iNhVzu9yyfZjC+kJpS9vLshziwq2Lq65KZX5hEx/NMWc76J8wNOafiO7y6Tt RAqhn8wNwXVsf9/aDobsRl22TwhQqI/wrUIDckM8ModmuMQ4AGCazE7aZ4n1+1Uj /+RmES/ZL2sBWEPNhRDnIo3pzfBXsZ0YrNmJU8RPOCFd4IjDQhrFppgigKPp63It rG4/DtGHVCl1o8hBUvBbxCvjnnzYTJTnVmNi+jGsLUOWJ1FfmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWVultZ/iF8vTr5uD/P/yrYcYMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODAxYjc0MzgtN2VmNi0z ZjFjLWFkYzgtNWViMjc0YmM3ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQs+Xxy9+7JU9IyFq683XeBylCHHD4ruyPmc3o28a/DkzD2+cyWhNqo jveP8Bqq9L0yZNZpThWs1Si7zpGMyEG4qXFK0L4oJtGCN2RHFZfo7IMsw7e+/tKH VjfzZo2HT1etMAcBKxfF5iuJoa3liasF11K8hdgJmeozrY1SuqR/xeAxtCqG+EcO KfT+xWi0hg/+HWWcmfDD1fm7RbCjsMAurhOOFIwVGBDGKfYukzrR2YNWE7FjJHdl q+42gB9uYuSvThkNMAFAjva43hsjbV9/pR6kny79duUKhb99i7jdFDe3RrqAnUr5 UFw1A29joAJc14UV2manToLNeSFWT5M= -----END CERTIFICATE-----Generated at Thu Aug 27 22:47:50 2026 by rpki-client