$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json) Hash identifier: +G+ZyVM8esJftTjsnCGo/BIqYVQ9FhOhMabJvnVfpMg= Subject key identifier: 17:64:1A:23:5F:C6:03:68:78:3B:67:A0:AB:87:BE:C7:6D:E5:D4:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ED001FE8DA64D662B47A67A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fe:8d:a6:4d:66:2b:47:a6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=5088d2e9-0bc9-4b47-8ae8-36a713f120f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:b2:ec:a5:15:4a:ab:5a:22:a8:20:85:2b: 83:ab:e3:77:24:69:3f:e5:9c:7b:41:30:d6:ea:8f: f1:82:d8:bd:78:57:0a:29:9e:ce:68:3b:30:0c:1e: ff:25:52:1b:0b:63:91:3e:b8:5e:1c:8d:e6:c0:70: 19:07:fe:84:7d:44:81:2c:e1:0b:44:b3:f9:6d:91: de:3d:c0:cc:84:22:9b:e0:4f:25:fb:dd:dd:55:fe: 2d:ec:16:e0:12:b9:e6:63:78:1e:b4:92:cd:fb:b8: c0:b2:bf:fc:08:72:54:4d:18:b2:71:9f:94:6b:dd: b9:8e:5c:36:19:b7:01:76:f3:ea:44:ca:ab:77:dc: 19:a2:77:5d:59:3e:a0:4d:17:cc:0f:73:95:5e:34: 04:5c:91:b6:5d:ce:f7:50:aa:cb:15:bd:8e:cf:07: fc:e9:33:de:34:15:60:e5:4a:ab:a8:6f:71:43:16: 27:a4:fb:5b:53:cf:66:66:9d:4e:4a:07:18:c9:1e: 72:03:0e:94:d7:c4:b1:e9:96:e9:4c:ea:77:7e:43: 3d:41:d6:78:24:fd:3c:bf:79:91:79:ee:84:55:cb: 8d:50:05:32:33:dd:22:03:fc:e0:87:c8:8c:e9:dd: ce:dd:4b:93:56:5a:8a:11:08:cd:f9:d1:cf:1d:c8: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:64:1A:23:5F:C6:03:68:78:3B:67:A0:AB:87:BE:C7:6D:E5:D4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a8:d9:1f:8d:e3:1a:62:92:e2:74:06:14:81:34:5a:12:3f: 96:bc:79:d9:de:f2:24:f4:c0:82:c7:4f:6e:6d:54:b7:87:5b: e4:34:40:5f:9c:89:21:bb:45:10:3c:6c:5b:3e:56:9b:d0:7d: e4:33:df:ce:c4:54:b1:bc:f3:39:dd:41:29:9b:ba:bc:3a:0a: 3a:39:5e:4d:62:e4:60:da:7b:2b:e1:1d:ae:1f:6f:d9:a1:7c: d6:13:6d:36:7e:81:67:68:17:c7:29:20:e0:c4:84:d4:e9:08: 43:d4:a9:10:45:da:34:92:20:dc:55:ad:8a:25:09:67:5c:bf: 6e:66:fd:e7:b8:1e:9d:02:24:e4:39:2d:da:8b:6f:d9:04:5f: 7e:ab:aa:62:b3:ad:00:35:aa:ef:f0:bb:aa:74:29:f3:75:fb: 66:34:52:46:cc:79:69:94:17:b4:9d:b9:dd:33:fe:83:0b:c1: ff:a8:ea:eb:ed:b5:87:ca:b6:9c:e7:c7:42:f9:ad:15:4e:81: da:e1:bb:14:87:24:cc:8f:cf:26:04:53:52:35:b8:a1:5b:c6: f7:08:e8:88:9c:0e:e9:3a:15:2e:00:0d:2a:d1:0f:c8:08:bc: 7b:a9:e9:1e:26:bc:23:72:83:c1:05:42:f0:31:bb:5d:6d:75: 26:39:3e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAf6Npk1mK0emeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTA4OGQyZTktMGJjOS00YjQ3LThhZTgtMzZhNzEzZjEyMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN2y7KUVSqtaIqgghSuDq+N3JGk/5Zx7QTDW 6o/xgti9eFcKKZ7OaDswDB7/JVIbC2ORPrheHI3mwHAZB/6EfUSBLOELRLP5bZHe PcDMhCKb4E8l+93dVf4t7BbgErnmY3getJLN+7jAsr/8CHJUTRiycZ+Ua925jlw2 GbcBdvPqRMqrd9wZonddWT6gTRfMD3OVXjQEXJG2Xc73UKrLFb2Ozwf86TPeNBVg 5UqrqG9xQxYnpPtbU89mZp1OSgcYyR5yAw6U18Sx6ZbpTOp3fkM9QdZ4JP08v3mR ee6EVcuNUAUyM90iA/zgh8iM6d3O3UuTVlqKEQjN+dHPHcj5GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdkGiNfxgNoeDtnoKuHvsdt5dQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE0YTIyOTktZjNlMC0z YTY4LWI2OTItNzY4OTk3MGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCo2R+N4xpikuJ0BhSBNFoSP5a8edne8iT0wILHT25tVLeHW+Q0QF+c iSG7RRA8bFs+VpvQfeQz387EVLG88zndQSmburw6Cjo5Xk1i5GDaeyvhHa4fb9mh fNYTbTZ+gWdoF8cpIODEhNTpCEPUqRBF2jSSINxVrYolCWdcv25m/ee4Hp0CJOQ5 LdqLb9kEX36rqmKzrQA1qu/wu6p0KfN1+2Y0UkbMeWmUF7Sdud0z/oMLwf+o6uvt tYfKtpznx0L5rRVOgdrhuxSHJMyPzyYEU1I1uKFbxvcI6IicDuk6FS4ADSrRD8gI vHup6R4mvCNyg8EFQvAxu11tdSY5PmA= -----END CERTIFICATE-----Generated at Thu Aug 27 22:54:24 2026 by rpki-client