$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa File: 3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa (raw, json) Hash identifier: V1TH/pGFyJHG+tYqokg7u0cg3kUwMSOJkjcMMqXyr2k= Subject key identifier: DA:51:EC:5B:04:2A:9A:92:58:88:EC:D3:94:C2:14:96:95:43:A7:EC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E736A39C4549CC732C7E32800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 3855 IP address blocks: 199.172.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:39:c4:54:9c:c7:32:c7:e3:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=1c67fbe4-9d23-4362-968a-68588842df87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:3d:c3:db:30:f4:d1:8b:6b:7d:ef:be:bc: 14:49:ff:b7:7e:8f:15:98:0b:9b:da:fa:65:0b:b5: e1:98:d1:be:bd:f9:2e:85:60:96:23:58:71:10:75: dc:84:a1:ab:7b:c6:c2:5a:e1:e9:91:21:18:00:c9: 2f:5a:8d:86:46:d5:3d:76:ee:3a:0b:83:53:4d:41: 60:53:f6:fc:61:e7:bb:ee:cc:5e:ef:cc:3d:f8:cd: d9:e0:fa:de:d0:53:7e:6b:53:26:01:97:aa:36:72: 9b:be:92:27:33:b8:21:c4:86:66:1f:0b:d0:c6:c6: 2f:13:36:cf:18:50:b4:f3:15:32:0a:e5:9b:9f:e5: 88:6d:40:6d:6f:b2:c1:49:3e:f8:17:bb:94:75:41: 5a:3d:b3:1d:d4:bf:12:9a:39:e3:57:61:d0:41:ca: b2:b6:c6:0f:0a:9a:7b:4e:77:bf:f6:49:db:f3:30: 6e:65:2d:48:d4:8e:f4:b5:f3:e6:35:9a:a0:3c:21: 75:ab:4b:cd:65:e9:0e:91:6c:74:38:1e:b1:2f:45: ac:e6:bd:83:88:52:1c:f0:ff:5b:88:19:2f:18:f6: b6:3e:e6:8b:a0:a4:fd:7e:7c:4a:ce:2f:a1:e8:90: e1:8f:26:27:2b:69:9e:3a:e5:de:99:c0:01:60:56: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:51:EC:5B:04:2A:9A:92:58:88:EC:D3:94:C2:14:96:95:43:A7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3a:f2:be:b1:c1:4b:37:9b:d1:25:87:ca:97:0f:e3:f6:60: 5b:7d:9f:f6:07:e8:f5:10:38:a3:7f:5e:36:1b:5c:55:0e:67: 37:29:03:bf:db:70:42:f0:7a:3f:fc:14:69:8f:f0:9e:b1:b9: 22:6d:83:de:dd:b9:9d:fb:6f:56:b7:0b:b2:70:aa:26:a4:d8: b6:9e:b6:b8:2e:27:6f:fb:ab:e0:ae:a1:fe:04:60:f9:6c:08: 20:d7:70:ff:97:5a:73:8a:0e:f0:f7:1d:18:a1:f6:96:04:a9: 8c:84:08:2d:f3:b3:97:65:cc:3a:a2:0c:f0:41:cf:1e:17:78: 67:a6:f1:9d:12:be:5f:43:ef:09:95:cc:ca:c3:26:ed:9d:35: e2:de:bf:49:c8:55:39:8f:35:5f:eb:c4:0b:a7:4a:8d:69:83: f6:bd:11:59:bf:83:da:53:bc:85:85:6d:3c:f6:66:8e:c8:9a: b3:11:9e:02:c2:1f:e1:89:e1:b2:f6:39:1c:55:a3:60:e5:23: d8:3f:ef:62:f2:14:98:ea:0f:dc:7e:3f:ae:4b:a0:f9:57:be: cb:e8:23:67:d6:b5:69:7d:8c:2c:d1:b1:3f:7e:e1:cc:3d:dd: 7f:52:d0:89:6d:0e:69:00:bf:a6:6d:78:64:be:3b:03:f7:ef: 4d:07:e5:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajnEVJzHMsfjKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MWM2N2ZiZTQtOWQyMy00MzYyLTk2OGEtNjg1ODg4NDJkZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkQ9w9sw9NGLa33vvrwUSf+3fo8VmAub2vpl C7XhmNG+vfkuhWCWI1hxEHXchKGre8bCWuHpkSEYAMkvWo2GRtU9du46C4NTTUFg U/b8Yee77sxe78w9+M3Z4Pre0FN+a1MmAZeqNnKbvpInM7ghxIZmHwvQxsYvEzbP GFC08xUyCuWbn+WIbUBtb7LBST74F7uUdUFaPbMd1L8SmjnjV2HQQcqytsYPCpp7 Tne/9knb8zBuZS1I1I70tfPmNZqgPCF1q0vNZekOkWx0OB6xL0Ws5r2DiFIc8P9b iBkvGPa2PuaLoKT9fnxKzi+h6JDhjyYnK2meOuXemcABYFbjIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpR7FsEKpqSWIjs05TCFJaVQ6fsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzc5NGYyZGEtMzE0Ny0z ZTY5LTliY2YtZGY5YjU3OTBhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE468r6xwUs3m9Elh8qXD+P2YFt9n/YH6PUQOKN/XjYbXFUOZzcpA7/b cELwej/8FGmP8J6xuSJtg97duZ37b1a3C7Jwqiak2LaetrguJ2/7q+Cuof4EYPls CCDXcP+XWnOKDvD3HRih9pYEqYyECC3zs5dlzDqiDPBBzx4XeGem8Z0Svl9D7wmV zMrDJu2dNeLev0nIVTmPNV/rxAunSo1pg/a9EVm/g9pTvIWFbTz2Zo7ImrMRngLC H+GJ4bL2ORxVo2DlI9g/72LyFJjqD9x+P65LoPlXvsvoI2fWtWl9jCzRsT9+4cw9 3X9S0IltDmkAv6ZteGS+OwP3700H5dA= -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:52 2026 by rpki-client