$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa File: 28347c3e-bfce-3db1-967c-22fbb4496455.roa (raw, json) Hash identifier: tGMfbzyIX/VlqNKkYhca/r3ojTni3AH4h4UazdVxnP4= Subject key identifier: 8C:D0:20:20:AD:77:03:14:71:17:E6:4A:94:BA:D9:86:EC:46:8B:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD3F6C10FBDDBB85B5ECC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14717 IP address blocks: 63.89.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3f:6c:10:fb:dd:bb:85:b5:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=229c9858-9f76-41fa-80c4-240712c9bb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:97:1e:f4:0d:66:d2:51:f7:91:c7:60:29: 0d:bd:08:9d:eb:7c:11:25:c5:af:fc:e0:f0:bd:4b: 8c:4c:c2:8c:e1:ec:7b:33:1d:26:0f:34:ce:a7:5f: 61:80:02:61:5b:00:46:17:f1:23:50:11:a9:2a:c1: ca:9b:af:6c:b9:cf:f0:ba:2f:46:16:96:25:9c:bb: 8a:58:25:e8:ad:11:67:2f:96:9c:54:cc:54:dd:a5: a5:76:6e:14:2e:e9:f3:bc:7d:45:32:b9:af:06:86: 19:03:79:42:3a:d6:f8:82:c0:29:b4:4a:f7:4b:0e: 96:c7:ae:50:ce:5a:05:f3:da:ed:ea:c0:b8:d6:07: 8e:8e:d5:25:85:a1:4c:66:8c:28:83:2a:ec:5c:da: d6:b4:d1:33:17:75:c1:32:79:86:6d:4f:a0:43:f0: e8:99:89:c7:9f:27:d6:cd:aa:05:f6:26:c7:ad:94: a7:fa:32:f1:b7:9d:d1:77:4f:f4:36:7c:a5:0a:0d: 90:46:b0:ae:a7:e0:02:c5:a5:0d:d1:56:bf:86:1f: 1e:ca:76:16:cc:5c:40:81:00:e8:49:07:47:e4:27: e5:56:b5:81:77:d0:e6:c3:53:a1:bb:f8:ab:9d:de: c8:a8:25:28:3f:06:d4:df:78:55:25:fb:ce:9d:82: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D0:20:20:AD:77:03:14:71:17:E6:4A:94:BA:D9:86:EC:46:8B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 63.89.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:14:69:7e:8a:f2:46:c5:c9:52:07:1e:c1:6b:14:c7:45:27: 08:15:94:cc:74:7b:c8:02:34:49:64:5e:fa:d2:28:bd:49:ab: 6c:c9:54:d9:23:95:86:4c:fc:cd:1f:70:c7:4b:bf:40:87:8a: 4a:43:fd:9c:7d:66:b4:75:b1:4f:c1:eb:f3:38:b7:8d:44:27: 56:15:02:2f:d7:18:66:e1:6c:38:fc:58:10:29:cb:f8:d0:fd: fe:01:b4:fe:39:38:56:43:a8:11:2a:8e:89:44:17:60:18:58: b9:96:32:72:80:96:41:aa:80:ef:0f:03:16:e1:e7:3b:38:d2: 88:a6:c0:fe:04:75:76:e2:75:e7:e1:77:1e:18:2c:e5:77:a1: 85:29:b0:34:b0:61:36:f3:6c:e4:5c:55:d5:5b:a1:96:cd:b0: 3f:82:64:05:9e:a3:3b:86:06:2a:92:09:a1:68:0b:08:52:0d: dd:f8:55:d3:0c:ee:9b:e4:72:37:89:60:e3:ff:2a:e4:43:6a: dc:d3:f7:6e:21:81:7c:3b:b6:9a:40:e8:ad:ab:05:60:7d:f2: 03:f6:e7:d7:e9:f1:9d:11:d0:8f:e1:5b:11:e2:a8:0d:58:c9: 4c:f8:14:0d:6d:d7:91:1d:a2:4f:7e:65:fc:85:de:31:a3:bd: d9:f3:d6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rT9sEPvdu4W17MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjI5Yzk4NTgtOWY3Ni00MWZhLTgwYzQtMjQwNzEyYzliYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9iXHvQNZtJR95HHYCkNvQid63wRJcWv/ODw vUuMTMKM4ex7Mx0mDzTOp19hgAJhWwBGF/EjUBGpKsHKm69suc/wui9GFpYlnLuK WCXorRFnL5acVMxU3aWldm4ULunzvH1FMrmvBoYZA3lCOtb4gsAptEr3Sw6Wx65Q zloF89rt6sC41geOjtUlhaFMZowogyrsXNrWtNEzF3XBMnmGbU+gQ/DomYnHnyfW zaoF9ibHrZSn+jLxt53Rd0/0NnylCg2QRrCup+ACxaUN0Va/hh8eynYWzFxAgQDo SQdH5CflVrWBd9Dmw1Ohu/irnd7IqCUoPwbU33hVJfvOnYJM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzQICCtdwMUcRfmSpS62YbsRoviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjgzNDdjM2UtYmZjZS0z ZGIxLTk2N2MtMjJmYmI0NDk2NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP1niMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsUaX6K8kbFyVIHHsFrFMdFJwgVlMx0e8gCNElkXvrSKL1Jq2zJVNkj lYZM/M0fcMdLv0CHikpD/Zx9ZrR1sU/B6/M4t41EJ1YVAi/XGGbhbDj8WBApy/jQ /f4BtP45OFZDqBEqjolEF2AYWLmWMnKAlkGqgO8PAxbh5zs40oimwP4EdXbidefh dx4YLOV3oYUpsDSwYTbzbORcVdVboZbNsD+CZAWeozuGBiqSCaFoCwhSDd34VdMM 7pvkcjeJYOP/KuRDatzT924hgXw7tppA6K2rBWB98gP259fp8Z0R0I/hWxHiqA1Y yUz4FA1t15Edok9+ZfyF3jGjvdnz1pE= -----END CERTIFICATE-----Generated at Tue Sep 22 10:16:57 2026 by rpki-client