$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa File: 3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa (raw, json) Hash identifier: /UpwUtl2mHFCObiPmhBRZve2D1gdS1XmA+6gLTaLuUM= Subject key identifier: 8F:D8:4E:45:0D:92:5F:78:43:D2:B6:0A:DA:F6:26:82:F0:1C:54:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2874E1BCC743C74F0650480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:4e:1b:cc:74:3c:74:f0:65:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=3f5fb8b4-0f5a-4883-a100-27aee33df56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:72:75:5f:b4:df:a7:2b:11:e3:ce:67:51: 17:46:01:0b:dc:57:3b:61:e1:8c:87:75:ed:ae:2f: 92:73:fb:e4:ec:7a:9c:3b:fe:70:2c:80:59:38:11: d2:97:c6:db:7e:17:c2:19:0f:8f:22:84:a0:47:d9: 0a:ed:08:bd:b1:a3:11:57:db:13:40:c2:c7:01:ca: 54:ac:34:7c:9e:f0:05:5f:86:e2:13:fd:ef:db:66: aa:7c:20:12:e5:7e:b9:51:6f:2e:a7:78:4e:62:52: 0d:79:ad:f7:b4:35:fb:b1:12:f4:aa:c0:cf:b5:2f: f9:76:77:0f:68:d2:be:0d:5a:34:bd:b6:8f:3f:ed: 7c:d1:b9:0a:0b:6c:ce:39:ea:b5:5b:b9:34:79:bb: 1d:9d:36:5e:25:3f:54:9d:75:6d:d2:b4:83:0a:73: 72:ba:b5:ab:70:59:07:e6:13:ae:78:3c:f8:09:58: fd:d0:1e:22:f8:4d:34:97:44:6c:ff:52:7b:34:79: a9:b6:dc:eb:0a:55:92:d2:17:38:8a:95:9d:fa:73: 13:d4:7f:af:b0:59:91:d1:bd:f6:2a:b9:6c:1d:ce: 3f:90:fe:11:aa:3d:2d:6c:ab:be:a4:e6:c3:e1:fd: 6b:ad:a5:2e:63:65:10:91:a0:35:3e:d0:b0:77:a0: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:4E:45:0D:92:5F:78:43:D2:B6:0A:DA:F6:26:82:F0:1C:54:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0c:b3:6c:2a:d6:aa:a7:97:18:99:69:d1:cf:18:63:c9:3c: 23:71:64:c7:25:19:bf:57:5f:b0:b0:b0:5f:33:10:b4:16:c9: 8d:39:57:3c:24:2e:c9:95:da:77:4d:da:7c:f7:45:d6:c4:96: 9f:1f:c7:4d:1f:ec:07:f1:1e:b3:8d:80:94:79:e6:a2:ab:09: 3f:13:c3:fb:78:c4:93:50:0e:0b:f1:be:55:2e:f7:72:33:b2: 6c:30:19:90:da:7b:41:74:b8:be:01:b3:fa:ee:d9:82:30:66: 5f:f6:9b:cd:b0:2e:3b:d6:34:39:4c:fa:5f:5f:4b:97:e9:dd: 3a:37:6d:58:ed:fd:84:84:6a:1b:c4:36:6e:cc:df:39:eb:e1: a9:59:57:e3:f6:65:79:1e:57:39:73:f6:c4:57:a0:27:ee:d0: c1:50:e5:c7:2d:88:c6:4a:82:cf:cb:4a:a3:ab:54:cc:46:9a: b3:a7:0d:f6:6c:c7:d0:b0:61:89:86:75:aa:18:b4:fe:3a:7b: ab:fb:d0:3e:aa:41:c3:0e:0a:f8:c9:b2:42:08:6e:11:ce:0f: 41:94:f0:37:14:46:c8:14:e1:0b:53:02:37:69:27:4b:43:48: cd:75:02:be:61:46:ce:2c:1c:fb:2a:a0:42:b1:8a:bf:b3:64: a1:ab:5f:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh04bzHQ8dPBlBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk M2Y1ZmI4YjQtMGY1YS00ODgzLWExMDAtMjdhZWUzM2RmNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+NydV+036crEePOZ1EXRgEL3Fc7YeGMh3Xt ri+Sc/vk7HqcO/5wLIBZOBHSl8bbfhfCGQ+PIoSgR9kK7Qi9saMRV9sTQMLHAcpU rDR8nvAFX4biE/3v22aqfCAS5X65UW8up3hOYlINea33tDX7sRL0qsDPtS/5dncP aNK+DVo0vbaPP+180bkKC2zOOeq1W7k0ebsdnTZeJT9UnXVt0rSDCnNyurWrcFkH 5hOueDz4CVj90B4i+E00l0Rs/1J7NHmpttzrClWS0hc4ipWd+nMT1H+vsFmR0b32 KrlsHc4/kP4Rqj0tbKu+pObD4f1rraUuY2UQkaA1PtCwd6DhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/YTkUNkl94Q9K2Ctr2JoLwHFSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzc5NGYyZGEtMzE0Ny0z ZTY5LTliY2YtZGY5YjU3OTBhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIMs2wq1qqnlxiZadHPGGPJPCNxZMclGb9XX7CwsF8zELQWyY05Vzwk LsmV2ndN2nz3RdbElp8fx00f7AfxHrONgJR55qKrCT8Tw/t4xJNQDgvxvlUu93Iz smwwGZDae0F0uL4Bs/ru2YIwZl/2m82wLjvWNDlM+l9fS5fp3To3bVjt/YSEahvE Nm7M3znr4alZV+P2ZXkeVzlz9sRXoCfu0MFQ5cctiMZKgs/LSqOrVMxGmrOnDfZs x9CwYYmGdaoYtP46e6v70D6qQcMOCvjJskIIbhHOD0GU8DcURsgU4QtTAjdpJ0tD SM11Ar5hRs4sHPsqoEKxir+zZKGrXwU= -----END CERTIFICATE-----Generated at Thu Feb 26 12:20:30 2026 by rpki-client