$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89c1a3ce-b01f-356c-af1a-482032f1756e.roa File: 89c1a3ce-b01f-356c-af1a-482032f1756e.roa (raw, json) Hash identifier: A9lwDU3xeKTAnGCvzBY+Z/C3C4sq2jauiRFpQFE4BJQ= Subject key identifier: 8A:5F:02:A6:84:98:74:FF:9D:1F:9D:D9:9F:22:46:8A:8B:3B:0B:B3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD41253BD4D2A2D073E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89c1a3ce-b01f-356c-af1a-482032f1756e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 47.136.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d4:12:53:bd:4d:2a:2d:07:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=f6823691-34b9-4ce5-814d-f1f04afe70fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:ad:05:13:dd:7b:45:4b:e7:51:b5:a1:c0: 44:2a:0f:54:f0:02:44:cb:b9:2d:4a:4b:2b:9c:6a: 09:8e:5a:1d:3b:3f:f2:64:65:81:05:f0:9d:47:ea: 67:c7:01:14:f7:7b:b1:22:96:73:e6:49:1d:9b:82: e0:5e:2c:30:2e:8f:05:3b:82:0e:38:6b:50:5c:95: 69:2f:03:c4:b4:25:a2:d0:5f:f7:72:7f:67:34:95: f2:77:00:8d:06:d3:1f:e7:d4:09:4f:d4:c1:92:4f: e1:c4:88:b2:ad:13:49:2e:24:23:80:8d:b1:04:5d: 71:4f:63:96:b3:8f:cb:50:a8:d9:1b:7c:67:2f:0f: 20:f5:25:ee:12:49:f9:f8:8b:66:1b:ae:6d:55:02: 65:90:ae:33:39:2e:05:56:06:9d:25:03:25:67:32: a4:44:2f:76:13:1b:a8:dd:0d:70:cb:2f:7e:48:3a: 86:83:f7:48:94:3b:9e:97:d9:45:41:93:1f:1a:cb: 4f:d2:27:e8:c3:2a:5d:9b:26:84:56:79:7c:c7:7d: 59:ee:d2:1f:dd:91:b2:8f:89:0d:af:65:33:1c:b1: 0d:85:53:6b:47:ab:bb:05:b1:41:1c:c3:8f:ea:0e: c7:e1:bd:82:b3:83:30:8b:49:1e:06:5d:4a:5e:31: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:02:A6:84:98:74:FF:9D:1F:9D:D9:9F:22:46:8A:8B:3B:0B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89c1a3ce-b01f-356c-af1a-482032f1756e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.136.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:94:2f:8a:c0:c8:50:ab:9b:e6:1e:22:f1:86:84:c2:0f:10: f0:b0:5d:65:7a:0f:a9:11:d3:8e:e9:5c:1c:b7:c7:b7:0f:be: 8a:97:fb:f1:e2:d7:e1:86:62:27:ea:33:1f:3c:5f:9d:e1:d9: b2:c1:3d:6a:b5:b2:ee:1d:e1:bd:86:6a:2f:44:21:71:49:d8: 20:eb:14:e2:33:2d:08:2e:4b:7f:36:1c:af:6a:10:fc:d6:73: aa:7d:e2:de:12:95:10:55:1b:1f:6f:3f:8d:be:15:66:42:b3: e7:4c:15:c9:06:cc:68:eb:a9:96:cc:22:a9:db:9f:01:61:98: 06:d5:5c:ed:aa:f4:b5:21:48:16:06:63:a5:01:51:41:ae:04: 7e:25:87:ef:bb:d6:37:a1:fc:f3:c5:5f:ca:6b:f6:fe:dd:72: 2b:5a:e6:84:8b:5b:b3:5d:bb:f1:f6:65:ed:07:75:dd:33:48: a2:c4:93:ea:cd:4f:0c:f6:39:4c:a6:07:c9:d3:97:0b:35:d7: 7a:0c:0d:3d:16:1d:a7:18:5e:69:c3:0e:4f:d4:d2:4b:68:5c: 85:21:0f:99:ab:43:6e:fc:d1:4a:30:0a:39:14:75:bc:66:bb: 6f:08:43:33:d1:1f:14:37:bf:cd:7e:69:14:6a:23:b0:41:03: 0b:93:b7:63 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7nvNQSU71NKi0HPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjY4MjM2OTEtMzRiOS00Y2U1LTgxNGQtZjFmMDRhZmU3MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiOtBRPde0VL51G1ocBEKg9U8AJEy7ktSksr nGoJjlodOz/yZGWBBfCdR+pnxwEU93uxIpZz5kkdm4LgXiwwLo8FO4IOOGtQXJVp LwPEtCWi0F/3cn9nNJXydwCNBtMf59QJT9TBkk/hxIiyrRNJLiQjgI2xBF1xT2OW s4/LUKjZG3xnLw8g9SXuEkn5+ItmG65tVQJlkK4zOS4FVgadJQMlZzKkRC92Exuo 3Q1wyy9+SDqGg/dIlDuel9lFQZMfGstP0ifowypdmyaEVnl8x31Z7tIf3ZGyj4kN r2UzHLENhVNrR6u7BbFBHMOP6g7H4b2Cs4Mwi0keBl1KXjE1dwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIpfAqaEmHT/nR+d2Z8iRoqLOwuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODljMWEzY2UtYjAxZi0z NTZjLWFmMWEtNDgyMDMyZjE3NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDL4gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALpQvisDIUKub5h4i8YaEwg8Q8LBdZXoPqRHTjulcHLfHtw++ipf78eLX 4YZiJ+ozHzxfneHZssE9arWy7h3hvYZqL0QhcUnYIOsU4jMtCC5LfzYcr2oQ/NZz qn3i3hKVEFUbH28/jb4VZkKz50wVyQbMaOuplswiqdufAWGYBtVc7ar0tSFIFgZj pQFRQa4EfiWH77vWN6H888Vfymv2/t1yK1rmhItbs1278fZl7Qd13TNIosST6s1P DPY5TKYHydOXCzXXegwNPRYdpxheacMOT9TSS2hchSEPmatDbvzRSjAKORR1vGa7 bwhDM9EfFDe/zX5pFGojsEEDC5O3Yw== -----END CERTIFICATE-----Generated at Thu Aug 27 21:48:16 2026 by rpki-client