$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa File: 98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa (raw, json) Hash identifier: DnmoV40Pp/tTWp5XhVRAEocVVe92jFSkJ8g4FB7cqBg= Subject key identifier: E3:89:AF:DD:05:3B:98:71:5B:82:71:21:9F:A8:89:CD:14:39:45:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ECA6C7EF520552088BF0C8B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.239.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:7e:f5:20:55:20:88:bf:0c:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=bdaf4400-55cb-4de3-b399-2d9184c4aaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:d6:2a:16:e1:47:a9:2b:1f:ca:d2:84:ac: ab:d4:11:88:25:6a:70:d0:b5:fb:dd:e8:05:4d:b6: 6a:68:f9:5e:94:50:76:3d:4f:a8:dd:89:4a:54:2a: 67:e9:c3:1d:7f:ec:ad:68:c3:28:4c:48:d6:c6:e0: 9a:6e:30:ea:a2:f4:61:5f:d3:34:74:1a:9d:09:9e: ad:62:85:5b:af:99:eb:32:53:b7:f1:59:96:57:f4: 51:23:5c:68:c7:74:dd:7c:49:84:7e:01:ba:2d:8b: 76:3f:bb:f0:c3:38:ed:8f:7e:7d:75:f6:98:4c:66: 19:f7:c4:18:f4:fe:95:df:8d:46:e0:2c:fe:f3:0a: cc:a8:d6:86:96:f2:2b:30:19:9f:c5:bc:37:0a:87: 10:54:0e:89:83:31:bf:52:a4:ed:b2:8e:ef:38:f5: 66:88:93:fa:e7:17:95:59:f8:45:48:23:98:a4:2d: cf:1d:f4:8c:0a:c1:29:54:5e:e2:5f:d8:79:20:7f: 50:80:61:0f:0a:56:79:9b:41:42:6b:2d:d4:dc:e3: 25:35:f9:b1:42:e0:0d:45:34:dd:00:a4:96:69:a5: 5a:5f:0e:5c:1c:de:89:c3:7f:41:d7:33:77:43:1f: 95:17:5f:9c:31:b7:90:7b:f1:4a:4c:0b:07:e9:a4: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:AF:DD:05:3B:98:71:5B:82:71:21:9F:A8:89:CD:14:39:45:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7d:6c:10:c2:bd:48:2f:11:c9:1d:2d:1d:54:0c:d9:e7:be: f5:bf:e3:af:5e:69:43:8a:b5:04:b8:be:80:f7:5f:96:ef:87: bf:ea:2b:fb:fe:6c:11:8a:4b:ca:a3:57:46:da:f9:2d:90:4a: 49:b6:e7:82:80:cd:c0:82:68:7f:7c:cb:2e:c0:19:df:9b:ab: a9:d5:8a:b9:50:8f:ad:08:c1:ad:55:8d:a3:8d:5d:e3:ae:66: 78:b9:eb:9f:00:6e:15:1f:b1:78:de:59:bf:3d:a2:9b:ec:70: 89:26:12:2e:8d:1f:ad:44:89:a1:9d:fd:18:18:a5:83:d6:84: dc:b9:61:a9:4b:6c:46:37:cd:cf:e1:7c:e0:fc:2d:ea:0a:49: 02:af:e5:61:63:d8:69:3c:ca:cb:b7:e8:8d:c1:41:97:46:8e: f7:a2:8b:69:a9:de:e7:ac:57:f7:66:f1:a8:c3:7d:e3:93:ef: 41:a6:0e:77:de:66:49:b5:0a:55:14:cc:13:28:cd:b0:c3:99: 64:9b:7f:91:ec:04:17:f2:ea:a4:33:8d:ff:b4:1f:5c:ba:07: ff:2b:fe:42:b7:51:c9:16:4f:81:20:5b:fa:15:32:4d:d6:5c: dd:e3:ea:fd:c9:2f:98:96:56:83:30:00:01:b5:c3:0f:a0:94: e2:93:a0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbH71IFUgiL8Mi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk YmRhZjQ0MDAtNTVjYi00ZGUzLWIzOTktMmQ5MTg0YzRhYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpXWKhbhR6krH8rShKyr1BGIJWpw0LX73egF TbZqaPlelFB2PU+o3YlKVCpn6cMdf+ytaMMoTEjWxuCabjDqovRhX9M0dBqdCZ6t YoVbr5nrMlO38VmWV/RRI1xox3TdfEmEfgG6LYt2P7vwwzjtj359dfaYTGYZ98QY 9P6V341G4Cz+8wrMqNaGlvIrMBmfxbw3CocQVA6JgzG/UqTtso7vOPVmiJP65xeV WfhFSCOYpC3PHfSMCsEpVF7iX9h5IH9QgGEPClZ5m0FCay3U3OMlNfmxQuANRTTd AKSWaaVaXw5cHN6Jw39B1zN3Qx+VF1+cMbeQe/FKTAsH6aS26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOJr90FO5hxW4JxIZ+oic0UOUVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThkNWU2YTQtYTYyZS0z M2JlLWI2YjItZjNmMjJiMGM2NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx9bBDCvUgvEckdLR1UDNnnvvW/469eaUOKtQS4voD3X5bvh7/qK/v+ bBGKS8qjV0ba+S2QSkm254KAzcCCaH98yy7AGd+bq6nVirlQj60Iwa1VjaONXeOu Zni5658AbhUfsXjeWb89opvscIkmEi6NH61EiaGd/RgYpYPWhNy5YalLbEY3zc/h fOD8LeoKSQKv5WFj2Gk8ysu36I3BQZdGjveii2mp3uesV/dm8ajDfeOT70GmDnfe Zkm1ClUUzBMozbDDmWSbf5HsBBfy6qQzjf+0H1y6B/8r/kK3UckWT4EgW/oVMk3W XN3j6v3JL5iWVoMwAAG1ww+glOKToGM= -----END CERTIFICATE-----Generated at Thu Aug 27 23:53:14 2026 by rpki-client