$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa File: d900549d-1572-3a85-9a79-ae6f32119e40.roa (raw, json) Hash identifier: QPmdNcWHJRBvv14ppyP52JeKi4ANB+VR2gUlVIU05LA= Subject key identifier: 9D:0B:3E:85:BE:C2:47:31:59:11:98:50:63:71:86:CB:62:1D:1F:E5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD4A6E014B688C8842F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.99.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d4:a6:e0:14:b6:88:c8:84:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=f4c2fd38-2c96-4b0e-9f64-706ee12f761a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:74:35:95:36:fc:a6:b3:ec:c4:6e:b1:b7: 1a:91:b0:84:14:3b:4d:35:bc:95:44:27:10:bc:02: 93:18:3f:09:fe:8b:f8:24:19:f0:86:18:73:93:eb: 29:31:29:d9:5d:39:e4:f6:ce:f0:bb:d2:d6:27:bf: 9f:d8:2c:8b:57:b9:e0:86:d2:28:de:48:83:3a:b6: 9a:31:c7:6d:b8:14:89:d0:a8:19:e0:73:bd:75:13: 08:81:cf:dc:a1:bf:e6:fc:a9:14:60:d1:85:80:93: 1d:6b:c4:14:9e:aa:20:31:50:fc:69:4d:fa:37:51: 25:22:e4:ff:3b:05:81:05:ed:2b:45:14:11:99:aa: f4:96:5e:d3:07:91:54:58:89:9d:f5:f6:51:dd:8c: 41:55:9d:c6:91:76:80:ec:63:0f:40:ab:80:71:46: 1b:4f:73:bd:15:b1:e5:94:ab:be:61:89:6c:79:29: 6a:3a:7c:de:43:a0:a8:11:2f:ba:4d:6e:3f:08:84: 15:56:91:97:ee:e6:ab:ed:2e:39:73:5a:b0:49:fa: 68:08:86:db:6f:5c:59:7d:96:4a:eb:d2:47:1e:8b: 0d:b1:70:e1:8a:23:af:9f:5e:6d:e1:aa:8a:41:c8: e3:03:84:d6:be:da:31:30:d1:f6:dc:e0:78:f1:39: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0B:3E:85:BE:C2:47:31:59:11:98:50:63:71:86:CB:62:1D:1F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d900549d-1572-3a85-9a79-ae6f32119e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.99.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8a:57:f3:f5:03:88:77:53:2c:d0:70:21:3e:e5:d2:76:17: db:79:a0:6c:6f:a8:84:a0:2b:4d:9e:ce:3a:c3:d2:9d:08:e3: 82:d7:a2:97:3d:56:a8:78:2a:c9:5d:e6:f0:6a:9f:6f:f3:88: 91:a0:a7:23:4f:28:be:34:16:1c:bc:66:06:cb:23:6c:82:a1: 63:97:8d:6d:31:08:15:34:b5:0e:b4:6f:75:27:45:65:35:73: a4:6a:66:9d:a0:ae:1e:ea:7c:d2:a1:f3:9c:43:a3:3c:d2:e5: 9e:3f:03:40:bd:2e:2f:03:9c:fc:54:43:85:46:12:a5:9b:a4: 0b:f3:92:68:7e:2f:f5:c8:af:36:63:79:bf:ce:cc:91:e4:65: 77:48:3f:5d:07:87:f8:45:a1:de:db:fd:83:f1:b9:c8:8e:fc: 50:c7:6c:88:7a:af:df:ab:1e:0b:d6:ee:74:fe:a2:e9:26:cc: d4:fc:c0:a4:82:0d:0b:ff:c0:f6:11:bb:fa:34:5a:7c:92:24: c2:3d:b3:45:6a:17:a0:28:fb:7a:5c:e1:18:e5:e8:a5:99:44: be:25:14:76:16:fd:80:98:9c:b7:1d:2d:ff:4e:ff:86:a1:9f: 4d:8f:80:11:74:c9:df:1d:c7:43:65:dd:5f:57:d3:57:e3:36: 63:05:8c:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNSm4BS2iMiEL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjRjMmZkMzgtMmM5Ni00YjBlLTlmNjQtNzA2ZWUxMmY3NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyR0NZU2/Kaz7MRusbcakbCEFDtNNbyVRCcQ vAKTGD8J/ov4JBnwhhhzk+spMSnZXTnk9s7wu9LWJ7+f2CyLV7nghtIo3kiDOraa McdtuBSJ0KgZ4HO9dRMIgc/cob/m/KkUYNGFgJMda8QUnqogMVD8aU36N1ElIuT/ OwWBBe0rRRQRmar0ll7TB5FUWImd9fZR3YxBVZ3GkXaA7GMPQKuAcUYbT3O9FbHl lKu+YYlseSlqOnzeQ6CoES+6TW4/CIQVVpGX7uar7S45c1qwSfpoCIbbb1xZfZZK 69JHHosNsXDhiiOvn15t4aqKQcjjA4TWvtoxMNH23OB48TlRfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0LPoW+wkcxWRGYUGNxhstiHR/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDkwMDU0OWQtMTU3Mi0z YTg1LTlhNzktYWU2ZjMyMTE5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrGMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmKV/P1A4h3UyzQcCE+5dJ2F9t5oGxvqISgK02ezjrD0p0I44LXopc9 Vqh4Ksld5vBqn2/ziJGgpyNPKL40Fhy8ZgbLI2yCoWOXjW0xCBU0tQ60b3UnRWU1 c6RqZp2grh7qfNKh85xDozzS5Z4/A0C9Li8DnPxUQ4VGEqWbpAvzkmh+L/XIrzZj eb/OzJHkZXdIP10Hh/hFod7b/YPxuciO/FDHbIh6r9+rHgvW7nT+oukmzNT8wKSC DQv/wPYRu/o0WnySJMI9s0VqF6Ao+3pc4Rjl6KWZRL4lFHYW/YCYnLcdLf9O/4ah n02PgBF0yd8dx0Nl3V9X01fjNmMFjGE= -----END CERTIFICATE-----Generated at Thu Oct 8 15:27:21 2026 by rpki-client