$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa File: aaf41670-9101-34ad-ac92-f5d05de80639.roa (raw, json) Hash identifier: P/uS0aAu3RdgPGp2gU9vBteIHctfsHoGKdyRGtS2p8M= Subject key identifier: BF:37:D2:C9:74:94:2D:8F:BE:D8:5D:51:48:0C:54:AB:A4:E4:AC:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A783D2C0501E7415A1E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 199.222.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:78:3d:2c:05:01:e7:41:5a:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7f737c3c-0c30-4c4a-a696-6c2e84b1ceae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:b1:a5:e4:3d:0a:74:6e:a7:a1:86:bc:a4: 7b:a8:f5:83:a0:69:b3:57:08:4d:1e:cf:c0:ee:fb: 18:ea:9a:15:01:7e:df:01:05:fd:f4:09:ae:21:92: 01:33:e2:f1:10:d1:69:4f:01:72:ea:c1:6e:f2:5c: 2f:5c:d6:77:38:64:07:a2:c2:09:ae:62:76:cc:a4: 55:82:7a:78:d4:f8:38:ed:f2:a1:c3:17:26:a3:3d: f5:40:aa:c8:cc:24:a2:79:cf:eb:5e:84:29:8e:b4: 8d:91:11:b8:06:4d:ab:31:f2:26:09:be:88:ed:5d: b6:99:59:f2:08:7a:00:ca:e8:f4:5d:46:62:6d:9b: 32:26:19:b0:2b:c5:f4:fd:56:1e:8c:f3:11:7d:f2: b1:a7:ae:58:24:3b:83:93:49:f3:e1:eb:7f:dc:3d: 1a:d8:32:dc:1d:39:c9:86:81:8e:41:95:11:0e:37: 14:a7:6e:95:91:d3:fa:3b:84:92:71:8a:e4:11:32: db:7d:6a:2e:e5:38:e8:05:24:af:d8:70:48:75:81: a4:43:70:b3:d2:fd:41:3d:30:4b:66:24:b7:f7:18: f7:19:c9:e9:0f:b0:3d:a2:61:e7:4b:1d:85:b5:15: ec:62:9f:dc:45:94:05:40:ea:bd:e9:9f:39:41:93: ea:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:D2:C9:74:94:2D:8F:BE:D8:5D:51:48:0C:54:AB:A4:E4:AC:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.222.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:97:ef:b2:de:66:c0:2b:9a:41:4c:0e:31:d2:fa:6a:f0:32: e6:ea:82:92:44:ac:c5:1d:b8:ec:22:51:36:fd:27:21:af:b6: c5:4c:61:5f:10:91:63:47:9a:25:f2:10:36:0a:1f:f0:57:90: 98:9e:4b:be:21:1a:dc:fc:6a:96:ee:c4:a2:c6:4b:f7:a2:f6: 81:70:07:00:2a:24:43:ec:67:0d:82:e7:21:0d:64:24:a8:b0: a2:35:eb:a4:f9:78:ea:30:db:94:77:a1:d0:b1:42:aa:5f:12: 39:2a:02:8f:b8:45:42:a3:ba:b3:03:cc:e1:db:d2:92:03:14: ec:b1:89:81:51:64:7e:05:76:1a:44:24:e2:2b:44:b3:71:33: 7d:ed:78:ff:d1:b8:f8:18:c0:53:a8:b0:40:b0:f8:87:d6:e9: 6b:d0:42:ab:0a:52:3a:0c:8a:9d:67:f3:27:b8:98:cc:a1:b3: d9:35:1a:d9:ef:48:c8:b9:8d:2a:0b:86:68:6e:be:95:fd:ed: e6:55:bb:7d:5b:dc:d7:16:fa:1c:cd:12:78:66:83:b3:8a:3b: ff:75:e5:83:50:cd:25:dc:0b:90:e3:2d:57:1d:cd:49:57:5f: b8:d3:6d:7d:d9:11:bb:27:33:36:4a:e8:92:3c:10:bd:70:fc: 3d:c0:25:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGng9LAUB50FaHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2Y3MzdjM2MtMGMzMC00YzRhLWE2OTYtNmMyZTg0YjFjZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7GxpeQ9CnRup6GGvKR7qPWDoGmzVwhNHs/A 7vsY6poVAX7fAQX99AmuIZIBM+LxENFpTwFy6sFu8lwvXNZ3OGQHosIJrmJ2zKRV gnp41Pg47fKhwxcmoz31QKrIzCSiec/rXoQpjrSNkRG4Bk2rMfImCb6I7V22mVny CHoAyuj0XUZibZsyJhmwK8X0/VYejPMRffKxp65YJDuDk0nz4et/3D0a2DLcHTnJ hoGOQZURDjcUp26VkdP6O4SScYrkETLbfWou5TjoBSSv2HBIdYGkQ3Cz0v1BPTBL ZiS39xj3GcnpD7A9omHnSx2FtRXsYp/cRZQFQOq96Z85QZPq0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL830sl0lC2PvthdUUgMVKuk5KzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFmNDE2NzAtOTEwMS0z NGFkLWFjOTItZjVkMDVkZTgwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKX77LeZsArmkFMDjHS+mrwMubqgpJErMUduOwiUTb9JyGvtsVMYV8Q kWNHmiXyEDYKH/BXkJieS74hGtz8apbuxKLGS/ei9oFwBwAqJEPsZw2C5yENZCSo sKI166T5eOow25R3odCxQqpfEjkqAo+4RUKjurMDzOHb0pIDFOyxiYFRZH4FdhpE JOIrRLNxM33teP/RuPgYwFOosECw+IfW6WvQQqsKUjoMip1n8ye4mMyhs9k1Gtnv SMi5jSoLhmhuvpX97eZVu31b3NcW+hzNEnhmg7OKO/915YNQzSXcC5DjLVcdzUlX X7jTbX3ZEbsnMzZK6JI8EL1w/D3AJZ0= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:04 2026 by rpki-client