$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa File: 5d60047d-0af6-35dc-8295-da5eac8d1d49.roa (raw, json) Hash identifier: I2nzqPiHC8GeUCGrl5+tRksoq5MVmMSsh/9lKk70Mpk= Subject key identifier: 9B:DF:C2:52:BD:95:8A:2B:BF:43:EC:11:2A:75:07:6D:C0:7D:73:B9 Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Certificate serial: 010D0C9F4328584F3E47E677574105B8C8017BD0 Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7992 IP address blocks: 192.171.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e6:77:57:41:05:b8:c8:01:7b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b5ef8e47-9624-47af-9b45-065fee351117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:1d:27:7c:e2:98:55:f5:83:74:bf:7a:c9: 4b:a0:8a:2a:d0:9f:55:83:2d:b8:6d:89:a4:f7:1d: d6:19:b8:f5:e5:50:63:e0:79:fd:32:8a:a7:a5:e6: 7d:8a:13:07:89:bc:86:22:64:b5:a3:c5:d0:74:ad: ef:f2:74:f7:db:d2:dc:de:f2:17:31:c9:76:eb:f4: 74:51:ed:8b:b5:d4:e1:e1:3c:28:4f:c4:ca:f8:79: cd:c6:2c:5d:60:70:29:67:d2:ea:33:22:c8:05:4e: 01:19:bd:24:cf:3c:77:43:c8:32:46:0d:16:26:f2: f7:77:72:97:5b:0f:1b:95:05:cc:fd:7c:ce:7c:45: 21:0a:e9:af:fe:6f:88:0a:61:26:5f:6c:2e:97:cc: cc:cb:dd:6b:e9:a1:34:2e:5f:f8:30:9c:d6:58:9e: 77:22:a3:fb:be:5d:c1:9c:96:24:33:99:71:e9:de: bd:00:ec:25:96:ac:8c:26:ac:ec:45:d4:08:1d:2d: 18:96:f1:2c:88:ef:53:d9:52:43:e6:7e:f4:9d:a4: e0:fb:eb:0c:b1:6e:09:22:31:19:ac:1a:d8:8c:eb: 38:e5:67:73:81:3f:22:38:0a:12:82:c9:7b:b6:ef: b7:03:56:0f:f0:74:06:8d:3b:16:a5:6a:5d:bc:0e: a5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:C2:52:BD:95:8A:2B:BF:43:EC:11:2A:75:07:6D:C0:7D:73:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5d60047d-0af6-35dc-8295-da5eac8d1d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl X509v3 Authority Key Identifier: keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer sbgp-ipAddrBlock: critical IPv4: 192.171.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c5:38:9a:30:5c:bd:b6:91:9a:8e:c7:65:18:d6:14:73:f5: 4f:53:5f:f8:1e:66:cf:37:29:7b:ff:5a:5e:05:d6:e1:fd:c4: 21:ae:7e:98:0a:1d:a0:23:3f:7d:98:1f:7e:63:84:e3:ff:88: 81:17:0f:4b:1f:f0:1c:c1:e0:5e:49:90:fc:8b:83:d1:90:d6: 78:2c:cc:e2:6f:bf:27:c3:64:3d:b9:5b:33:a0:e2:14:76:8d: 5d:67:ae:41:7c:ad:8a:f8:db:4b:b7:07:4f:3e:bc:39:54:62: e1:5c:7e:2b:86:ca:14:47:a1:8f:9b:f7:81:17:22:75:e7:02: a3:b7:a1:16:18:53:b9:0a:f0:bf:95:d8:05:cc:3c:75:ef:85: 64:88:bd:70:04:fb:d9:be:d0:39:8e:88:f1:79:7f:98:cc:39: c0:6a:2a:60:a4:15:26:41:14:67:94:df:80:5a:56:7b:a7:3f: 98:65:c9:d1:7d:5e:e2:ea:53:60:0d:d0:d9:ea:a9:bb:e8:7f: 50:88:2b:c9:6c:f4:ef:53:11:40:dc:17:03:de:25:79:3a:bc: f0:0c:a6:95:63:cb:68:80:52:ce:19:5e:99:a5:08:85:80:1c: c7:d6:90:d8:ac:c7:70:46:43:23:cf:cd:f2:9e:1d:cc:7d:3e: 72:36:f6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+Z3V0EFuMgBe9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm Zjk4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YjVlZjhlNDctOTYyNC00N2FmLTliNDUtMDY1ZmVlMzUxMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBkdJ3zimFX1g3S/eslLoIoq0J9Vgy24bYmk 9x3WGbj15VBj4Hn9MoqnpeZ9ihMHibyGImS1o8XQdK3v8nT329Lc3vIXMcl26/R0 Ue2LtdTh4TwoT8TK+HnNxixdYHApZ9LqMyLIBU4BGb0kzzx3Q8gyRg0WJvL3d3KX Ww8blQXM/XzOfEUhCumv/m+ICmEmX2wul8zMy91r6aE0Ll/4MJzWWJ53IqP7vl3B nJYkM5lx6d69AOwllqyMJqzsRdQIHS0YlvEsiO9T2VJD5n70naTg++sMsW4JIjEZ rBrYjOs45WdzgT8iOAoSgsl7tu+3A1YP8HQGjTsWpWpdvA6lQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvfwlK9lYorv0PsESp1B23AfXO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvNWQ2MDA0N2QtMGFmNi0z NWRjLTgyOTUtZGE1ZWFjOGQxZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1 ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3 ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5 OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwKtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLFOJowXL22kZqOx2UY1hRz9U9TX/geZs83KXv/Wl4F1uH9xCGufpgK HaAjP32YH35jhOP/iIEXD0sf8BzB4F5JkPyLg9GQ1ngszOJvvyfDZD25WzOg4hR2 jV1nrkF8rYr420u3B08+vDlUYuFcfiuGyhRHoY+b94EXInXnAqO3oRYYU7kK8L+V 2AXMPHXvhWSIvXAE+9m+0DmOiPF5f5jMOcBqKmCkFSZBFGeU34BaVnunP5hlydF9 XuLqU2AN0Nnqqbvof1CIK8ls9O9TEUDcFwPeJXk6vPAMppVjy2iAUs4ZXpmlCIWA HMfWkNisx3BGQyPPzfKeHcx9PnI29hM= -----END CERTIFICATE-----Generated at Tue Sep 22 12:56:11 2026 by rpki-client