$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa File: d900549d-1572-3a85-9a79-ae6f32119e40.roa (raw, json) Hash identifier: zpKOAgsAlWCtkCSGVGRx2SyUxhbCz1S7TU0UVgCBiK8= Subject key identifier: DD:8B:EF:88:74:B3:38:09:20:39:DF:75:85:42:9D:54:FF:28:7F:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A86FCEA78B3CF960A70440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 5650 IP address blocks: 172.99.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:6f:ce:a7:8b:3c:f9:60:a7:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=10051f4f-8055-4ca8-8cfb-ab605dfed0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:f4:ba:ee:31:d2:09:7e:94:50:15:1b:8f: 76:83:90:47:74:ed:a7:6b:30:2e:2f:f9:8d:3e:c2: a2:35:60:ef:37:1a:e9:05:6b:57:56:c0:5b:25:2f: ee:4c:00:2a:eb:f3:c8:bd:fa:09:54:f5:7f:05:71: 55:3f:3a:35:fe:8e:c3:e9:52:30:c7:09:cc:cb:32: 36:b2:cc:41:b5:3a:e8:d9:8b:58:3a:c2:3d:8a:49: 58:d6:87:f4:db:f3:76:07:b5:e9:1d:fe:03:dd:bd: 35:4c:a8:0d:cf:10:ff:cf:a1:25:ce:5e:76:e1:0b: ec:d7:90:02:de:6c:b6:2d:0a:15:99:76:d6:ad:67: 2a:07:89:c2:3c:cb:32:17:64:d7:9b:3a:31:c8:da: 9c:9a:06:90:57:23:c9:47:b9:19:6b:bd:30:d4:db: 57:15:98:de:a9:f8:25:42:84:43:05:43:ee:36:b0: 16:69:a7:ff:6f:af:5a:26:af:56:47:47:e9:b7:dd: c2:1b:7e:03:af:8c:8a:ae:ec:b0:43:51:52:2f:e7: 99:88:4d:94:0d:b2:f2:08:3b:6c:7a:0d:b2:e9:f8: f9:54:b8:1c:e4:e6:9e:8d:8e:52:5f:f9:b4:21:5d: b1:5d:d8:37:e5:2e:ee:bc:9d:68:a6:05:13:c3:51: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:EF:88:74:B3:38:09:20:39:DF:75:85:42:9D:54:FF:28:7F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.99.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e3:f2:ee:e7:f6:6b:81:b9:a6:75:42:9b:13:94:5f:8e:9f: 93:e5:ba:ea:fb:24:42:73:16:91:97:9f:97:4e:9b:31:6b:12: ee:74:e2:aa:be:e9:b9:aa:8b:e9:1e:5d:29:76:63:55:d4:cc: 18:37:58:f0:21:5b:08:fd:c7:34:0f:64:a9:23:34:8d:21:a7: 6a:59:24:6f:ab:ad:75:ae:54:be:6e:96:be:69:0c:66:17:88: 21:40:e1:86:f4:96:11:5c:51:fe:3a:f6:53:ed:94:a5:ab:1b: fd:fb:e4:67:b0:b7:a7:9f:d9:9e:81:d2:d5:e6:a5:10:95:d6: d8:ef:b1:11:9f:2b:ca:06:c5:99:16:d2:33:1e:13:e4:d9:55: 89:9d:93:60:69:0d:2e:81:cf:75:b9:9c:b2:54:06:09:5f:11: b6:5f:2c:80:13:3e:14:22:61:06:b1:4c:ca:91:9e:bb:3d:09: 16:4f:20:8b:4e:cc:13:47:b4:a7:b7:1b:99:d9:3d:f5:47:2a: d4:15:50:b8:df:16:cf:0a:99:67:3c:e5:67:82:2f:99:32:7e: 34:aa:8f:d1:57:52:80:c3:e3:04:64:40:0a:bc:af:f5:c7:0f: c9:53:d0:7c:be:0e:95:85:e3:00:d6:88:4d:40:92:92:01:d4: e0:94:ff:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqG/Op4s8+WCnBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MTAwNTFmNGYtODA1NS00Y2E4LThjZmItYWI2MDVkZmVkMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1f0uu4x0gl+lFAVG492g5BHdO2nazAuL/mN PsKiNWDvNxrpBWtXVsBbJS/uTAAq6/PIvfoJVPV/BXFVPzo1/o7D6VIwxwnMyzI2 ssxBtTro2YtYOsI9iklY1of02/N2B7XpHf4D3b01TKgNzxD/z6Elzl524Qvs15AC 3my2LQoVmXbWrWcqB4nCPMsyF2TXmzoxyNqcmgaQVyPJR7kZa70w1NtXFZjeqfgl QoRDBUPuNrAWaaf/b69aJq9WR0fpt93CG34Dr4yKruywQ1FSL+eZiE2UDbLyCDts eg2y6fj5VLgc5OaejY5SX/m0IV2xXdg35S7uvJ1opgUTw1EBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2L74h0szgJIDnfdYVCnVT/KH/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDkwMDU0OWQtMTU3Mi0z YTg1LTlhNzktYWU2ZjMyMTE5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrGMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLj8u7n9muBuaZ1QpsTlF+On5Pluur7JEJzFpGXn5dOmzFrEu504qq+ 6bmqi+keXSl2Y1XUzBg3WPAhWwj9xzQPZKkjNI0hp2pZJG+rrXWuVL5ulr5pDGYX iCFA4Yb0lhFcUf469lPtlKWrG/375Gewt6ef2Z6B0tXmpRCV1tjvsRGfK8oGxZkW 0jMeE+TZVYmdk2BpDS6Bz3W5nLJUBglfEbZfLIATPhQiYQaxTMqRnrs9CRZPIItO zBNHtKe3G5nZPfVHKtQVULjfFs8KmWc85WeCL5kyfjSqj9FXUoDD4wRkQAq8r/XH D8lT0Hy+DpWF4wDWiE1AkpIB1OCU/wk= -----END CERTIFICATE-----Generated at Mon Oct 19 20:59:39 2026 by rpki-client