$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028820e3-1511-31b5-b5e9-bb13d5d52e88.roa File: 028820e3-1511-31b5-b5e9-bb13d5d52e88.roa (raw, json) Hash identifier: 1V2KhvkvWTWRoRCWtx+a+5lJMUc+B0w6kkYP9RoWEHU= Subject key identifier: 32:30:37:B9:ED:A5:B4:57:B7:E2:78:1E:E3:38:2E:F2:BD:17:EE:30 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E3E5F4E3347D66C05AE088100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028820e3-1511-31b5-b5e9-bb13d5d52e88.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 22394 IP address blocks: 198.226.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:4e:33:47:d6:6c:05:ae:08:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=5dd80002-1f21-4a8d-909b-bb8853596d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:89:5c:d2:f1:1f:5e:f7:cf:fe:47:19:38: 9e:02:27:9e:0f:6a:85:18:88:74:77:1b:cd:67:d2: fc:30:78:17:bf:f3:c4:d8:0b:c1:9e:2d:c9:a1:be: db:a9:b1:aa:04:37:61:a6:ed:92:63:72:b8:e1:aa: 96:98:cc:71:d4:c8:ed:a9:3b:1b:c2:be:c3:97:70: a9:ee:26:c3:05:48:f3:6a:6d:b1:a8:59:01:18:99: 5f:58:e3:00:5b:b3:c0:63:16:81:1d:cc:ec:0b:b2: a2:bd:41:ba:33:be:ac:8b:13:62:a9:0c:a2:f2:b6: b1:a0:b2:68:27:b5:a4:fb:36:d1:f3:3f:22:e4:f5: 11:07:66:47:d9:fa:61:4d:57:ec:39:f9:25:20:13: 7c:b6:5d:54:e5:00:38:5c:c4:80:a8:e5:03:78:63: dd:33:91:24:32:6e:aa:f2:82:93:04:f3:50:92:fc: 5f:b1:aa:70:8c:35:2f:cc:42:2f:2a:ed:61:28:b4: 40:86:00:31:4f:53:52:51:7e:08:1a:3c:f9:ae:74: d5:05:ef:3f:75:ae:42:4a:dc:e1:35:02:5b:5c:ad: 6b:87:eb:ce:49:32:d9:7b:9d:2e:77:e4:f0:d8:69: 73:9e:f1:a0:2c:4c:b1:14:66:62:e0:ff:c4:b1:5f: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:30:37:B9:ED:A5:B4:57:B7:E2:78:1E:E3:38:2E:F2:BD:17:EE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/028820e3-1511-31b5-b5e9-bb13d5d52e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.226.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3a:17:20:be:a6:1b:5d:5f:62:86:60:32:c7:50:73:bb:6e: a0:f9:80:80:7e:cd:9c:99:ad:1f:29:1c:55:e0:c9:c9:a3:32: e1:79:8e:72:8d:c4:d7:10:41:8f:11:36:c1:4f:6b:c0:42:b7: fe:63:e1:09:3d:ab:ff:64:f4:fa:65:0f:a5:1c:bf:e4:f9:a4: d2:f9:3d:a8:8f:2a:82:f4:1b:62:8a:15:e0:f4:79:77:e7:87: 30:ef:1f:8e:84:a0:99:e0:2f:99:ab:80:f0:05:6d:9e:74:75: 2f:4c:c4:81:6a:4c:a8:fc:ef:6c:7b:cd:a7:20:38:9f:59:67: e3:03:d4:47:33:40:5c:51:96:a0:f4:ff:64:af:cd:3e:d2:49: 37:28:9c:a2:33:9f:63:f7:2c:65:12:16:bd:31:eb:c6:24:c8: 2f:bc:19:a5:ff:43:29:6f:cc:78:d8:91:16:b1:35:f4:80:22: 3f:8e:fa:91:a2:1e:d6:d9:8c:c3:af:d0:db:b7:5e:25:c6:8e: 4b:61:39:6f:76:3d:44:22:fc:32:79:aa:69:4d:63:67:5b:53: 78:d2:ba:28:9a:40:a0:55:74:15:d4:a9:ac:1e:52:1f:f2:86: 87:99:98:a1:9c:4c:59:fd:20:c2:b6:98:4b:02:cd:2f:51:9a: 82:cc:bb:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X04zR9ZsBa4IgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NWRkODAwMDItMWYyMS00YThkLTkwOWItYmI4ODUzNTk2ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZeJXNLxH173z/5HGTieAieeD2qFGIh0dxvN Z9L8MHgXv/PE2AvBni3Job7bqbGqBDdhpu2SY3K44aqWmMxx1MjtqTsbwr7Dl3Cp 7ibDBUjzam2xqFkBGJlfWOMAW7PAYxaBHczsC7KivUG6M76sixNiqQyi8raxoLJo J7Wk+zbR8z8i5PURB2ZH2fphTVfsOfklIBN8tl1U5QA4XMSAqOUDeGPdM5EkMm6q 8oKTBPNQkvxfsapwjDUvzEIvKu1hKLRAhgAxT1NSUX4IGjz5rnTVBe8/da5CStzh NQJbXK1rh+vOSTLZe50ud+Tw2GlznvGgLEyxFGZi4P/EsV+iiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIwN7ntpbRXt+J4HuM4LvK9F+4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI4ODIwZTMtMTUxMS0z MWI1LWI1ZTktYmIxM2Q1ZDUyZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxuJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH46FyC+phtdX2KGYDLHUHO7bqD5gIB+zZyZrR8pHFXgycmjMuF5jnKN xNcQQY8RNsFPa8BCt/5j4Qk9q/9k9PplD6Ucv+T5pNL5PaiPKoL0G2KKFeD0eXfn hzDvH46EoJngL5mrgPAFbZ50dS9MxIFqTKj872x7zacgOJ9ZZ+MD1EczQFxRlqD0 /2SvzT7SSTconKIzn2P3LGUSFr0x68YkyC+8GaX/QylvzHjYkRaxNfSAIj+O+pGi HtbZjMOv0Nu3XiXGjkthOW92PUQi/DJ5qmlNY2dbU3jSuiiaQKBVdBXUqaweUh/y hoeZmKGcTFn9IMK2mEsCzS9RmoLMu00= -----END CERTIFICATE-----Generated at Mon Jul 13 11:45:58 2026 by rpki-client