$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d83e5f-7809-397a-a640-fbf538b5f4a7.roa File: a8d83e5f-7809-397a-a640-fbf538b5f4a7.roa (raw, json) Hash identifier: KsoK3Rve/c9bsPhe8K/4STedKU3sLyXOsgC6e5xNBlI= Subject key identifier: D1:32:E9:8E:B8:76:0D:E2:1E:79:6D:D0:A9:FF:E7:8D:02:88:62:30 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ECA6C77BAEBD255423C9DC780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d83e5f-7809-397a-a640-fbf538b5f4a7.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.252.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:77:ba:eb:d2:55:42:3c:9d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=5a305ca3-93b4-4f66-8ae3-2081811db087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:76:ae:a7:45:1b:b8:83:cf:65:d5:bb:54: 18:b4:05:b3:be:d2:66:6c:53:21:c1:51:8d:a0:c6: 95:80:17:55:a1:ef:19:b6:c1:e1:5e:4e:9b:f0:7a: e4:32:eb:9d:30:fa:fe:ee:06:9f:d1:4d:85:33:eb: 94:f3:02:27:a1:21:d3:5c:ce:0a:22:23:3f:ee:44: 27:c6:6c:6d:36:6c:85:38:23:65:48:c2:0e:34:c4: 3f:5c:23:41:eb:52:b8:3a:79:e6:e5:65:9c:26:22: 70:45:d1:7b:82:f0:c2:b3:ad:82:58:d0:53:5b:10: ad:6f:19:bb:0e:04:b6:68:74:1b:e0:b4:53:70:58: 8d:80:96:78:db:a2:26:24:69:79:55:c6:4c:4a:b2: 63:c5:9d:8f:b1:e3:be:40:f4:de:de:3e:fc:9f:ce: b1:a5:0c:4e:10:71:94:a2:b6:ec:52:d9:d3:74:e3: 17:71:50:4b:1e:fe:1a:16:e5:cd:24:4b:3e:f8:8f: dd:e6:4a:ad:15:0f:07:a0:0f:7d:63:b6:78:c4:78: a8:4a:93:29:50:23:b1:24:7e:a0:e2:e4:87:0b:86: c2:be:3b:24:c8:c2:a2:15:93:65:b4:d4:52:01:81: 2d:b1:c3:c7:45:59:8b:e2:fb:ad:28:7b:5c:73:0a: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:E9:8E:B8:76:0D:E2:1E:79:6D:D0:A9:FF:E7:8D:02:88:62:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d83e5f-7809-397a-a640-fbf538b5f4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.252.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:06:a7:d0:1e:f3:7a:b8:6b:f5:0e:21:c0:1d:a7:a1:0f:e1: 82:32:c4:57:0f:5a:9a:b4:70:93:b2:d8:a1:f7:8f:8e:29:81: 90:93:b5:96:a2:94:6c:a6:3b:60:f1:a7:e0:45:8b:d6:15:74: 7a:77:a1:29:4d:e4:14:33:92:46:65:5d:76:ee:09:cd:ef:63: 48:1d:30:a0:96:a1:65:34:a6:cc:45:41:47:03:f1:e0:bf:35: cb:be:22:21:13:e7:95:9c:cb:29:b9:03:2f:3b:4b:3a:3d:53: 26:83:8a:6b:e5:5e:ad:25:30:fa:4e:11:8d:88:31:25:9f:43: b8:92:c2:0d:6c:04:c9:a1:4d:67:95:f2:28:ce:e7:69:fc:9b: 73:9f:04:dd:3e:8c:6e:53:2f:20:8c:0b:5f:00:7d:79:df:b2: 07:7d:c0:5e:49:00:71:86:15:86:19:5c:93:80:5d:35:9f:e0: 7e:c5:48:f6:5e:3a:fa:a0:5c:05:dc:d6:4c:24:33:a6:51:2a: a1:5f:ce:10:a0:64:82:33:be:73:59:9a:0b:97:25:ea:f6:e1: 22:4f:82:22:56:4e:fa:f5:5b:a6:0d:65:ab:f5:e0:d9:f7:18: 5f:42:de:be:be:4a:42:35:bf:43:03:5b:b6:55:1b:ea:83:68: 01:3f:b5:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHe669JVQjydx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk NWEzMDVjYTMtOTNiNC00ZjY2LThhZTMtMjA4MTgxMWRiMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggd2rqdFG7iDz2XVu1QYtAWzvtJmbFMhwVGN oMaVgBdVoe8ZtsHhXk6b8HrkMuudMPr+7gaf0U2FM+uU8wInoSHTXM4KIiM/7kQn xmxtNmyFOCNlSMIONMQ/XCNB61K4Onnm5WWcJiJwRdF7gvDCs62CWNBTWxCtbxm7 DgS2aHQb4LRTcFiNgJZ426ImJGl5VcZMSrJjxZ2PseO+QPTe3j78n86xpQxOEHGU orbsUtnTdOMXcVBLHv4aFuXNJEs++I/d5kqtFQ8HoA99Y7Z4xHioSpMpUCOxJH6g 4uSHC4bCvjskyMKiFZNltNRSAYEtscPHRVmL4vutKHtccwrH1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEy6Y64dg3iHnlt0Kn/540CiGIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYThkODNlNWYtNzgwOS0z OTdhLWE2NDAtZmJmNTM4YjVmNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAGp9Ae83q4a/UOIcAdp6EP4YIyxFcPWpq0cJOy2KH3j44pgZCTtZai lGymO2Dxp+BFi9YVdHp3oSlN5BQzkkZlXXbuCc3vY0gdMKCWoWU0psxFQUcD8eC/ Ncu+IiET55Wcyym5Ay87Szo9UyaDimvlXq0lMPpOEY2IMSWfQ7iSwg1sBMmhTWeV 8ijO52n8m3OfBN0+jG5TLyCMC18AfXnfsgd9wF5JAHGGFYYZXJOAXTWf4H7FSPZe OvqgXAXc1kwkM6ZRKqFfzhCgZIIzvnNZmguXJer24SJPgiJWTvr1W6YNZav14Nn3 GF9C3r6+SkI1v0MDW7ZVG+qDaAE/tYs= -----END CERTIFICATE-----Generated at Thu Aug 27 22:51:43 2026 by rpki-client