$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa File: 3838a5d3-147b-300b-82be-16f0366fc707.roa (raw, json) Hash identifier: GyR8mA0+5CXJMWL33sNHFGXJRJmx3inwKDEvyryclhw= Subject key identifier: 65:AD:F8:81:C9:26:39:39:E6:7E:58:AE:B8:B8:26:EF:D4:9D:6E:75 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2874EF7E4F1EF32186DE480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:4e:f7:e4:f1:ef:32:18:6d:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=00b11ba2-8082-408a-92e3-38dd6086d259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:92:02:86:3b:d2:b7:88:97:f5:a5:d8:c9: 12:86:90:a1:2d:f1:5b:b0:17:f3:54:f7:69:03:29: bb:12:a7:cf:54:f3:2b:ad:b3:a6:95:82:ef:b7:be: 83:f5:d7:96:bb:1e:9f:c4:2b:87:72:72:09:8d:09: 80:0d:ea:1d:96:30:46:54:0b:b8:c8:b5:94:d9:9c: 1c:6a:20:90:6f:87:c0:e0:a8:85:ea:56:91:d6:15: 5d:d8:23:32:7a:78:61:ee:62:6d:a5:4e:60:4c:70: 57:0a:02:c1:a7:a6:77:82:15:1d:a6:a8:77:5c:7b: d9:37:f1:41:e3:f4:c3:c7:c4:72:7a:07:2b:fa:5d: 4d:42:13:2b:7d:6a:61:a1:14:9a:e5:3c:39:78:26: f1:fb:95:50:74:c8:51:2b:b0:ac:4f:dc:70:43:1d: 3b:68:50:d0:b1:b6:82:5c:e6:d0:13:67:48:a5:5f: 45:e7:66:9f:11:02:77:ce:d7:b6:c8:3e:c7:09:4c: 05:e2:4d:7d:97:4a:6c:bc:33:02:9e:19:b5:ac:5c: 31:89:ff:02:22:76:e5:ae:7e:b3:19:bb:73:03:bf: ad:40:3d:24:cf:08:07:f8:fe:4a:cd:bd:c7:6e:3e: 17:62:2d:6e:fe:2f:58:1f:63:dc:77:d2:1e:7b:80: 5f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AD:F8:81:C9:26:39:39:E6:7E:58:AE:B8:B8:26:EF:D4:9D:6E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:62:77:9f:84:b6:55:cc:39:e4:86:75:47:25:87:74:b2:e7: cd:e9:33:cb:fa:07:d5:3f:16:32:5d:6d:d0:6e:b5:87:e2:db: f3:d3:ae:78:ca:be:d7:af:b2:4f:b9:9b:a1:77:98:38:8b:98: 54:b0:61:80:d4:e0:75:2a:bc:40:50:19:6a:a3:00:d7:ce:8e: 98:6e:b7:1d:6d:7f:c9:75:99:f6:34:98:f2:2f:15:81:50:79: fe:44:a3:19:b6:35:27:80:6d:f9:97:45:3d:08:b5:5f:9c:a7: 46:5e:09:b5:a1:7f:41:25:89:26:2d:77:91:8f:d6:a1:3e:69: 96:71:e1:d4:13:af:a2:a0:7b:62:33:e8:f2:ce:d5:a6:26:0b: 0a:9e:a7:5d:b2:0a:f8:04:a8:6e:ab:8d:28:fa:52:9b:18:46: c9:4f:f6:7c:96:e3:5d:43:00:7a:74:44:9b:fc:83:56:f3:f0: 2b:65:4f:b2:47:fe:b1:8e:88:c6:45:04:f5:35:de:53:c5:fd: dc:53:6f:d1:a9:50:92:d1:46:d1:80:20:9b:f3:f5:b0:2d:86: c4:34:a5:4a:d9:2e:9d:fd:42:4a:f0:6d:b2:bc:36:e8:21:0d: 58:1a:a9:f0:21:4a:1d:55:5f:d2:ac:03:40:fd:42:66:97:0b: 2e:d4:32:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0735PHvMhht5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MDBiMTFiYTItODA4Mi00MDhhLTkyZTMtMzhkZDYwODZkMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8uSAoY70reIl/Wl2MkShpChLfFbsBfzVPdp Aym7EqfPVPMrrbOmlYLvt76D9deWux6fxCuHcnIJjQmADeodljBGVAu4yLWU2Zwc aiCQb4fA4KiF6laR1hVd2CMyenhh7mJtpU5gTHBXCgLBp6Z3ghUdpqh3XHvZN/FB 4/TDx8Ryegcr+l1NQhMrfWphoRSa5Tw5eCbx+5VQdMhRK7CsT9xwQx07aFDQsbaC XObQE2dIpV9F52afEQJ3zte2yD7HCUwF4k19l0psvDMCnhm1rFwxif8CInblrn6z GbtzA7+tQD0kzwgH+P5Kzb3Hbj4XYi1u/i9YH2Pcd9Iee4BfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWt+IHJJjk55n5Yrri4Ju/UnW51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzgzOGE1ZDMtMTQ3Yi0z MDBiLTgyYmUtMTZmMDM2NmZjNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhid5+EtlXMOeSGdUclh3Sy583pM8v6B9U/FjJdbdButYfi2/PTrnjK vtevsk+5m6F3mDiLmFSwYYDU4HUqvEBQGWqjANfOjphutx1tf8l1mfY0mPIvFYFQ ef5Eoxm2NSeAbfmXRT0ItV+cp0ZeCbWhf0EliSYtd5GP1qE+aZZx4dQTr6Kge2Iz 6PLO1aYmCwqep12yCvgEqG6rjSj6UpsYRslP9nyW411DAHp0RJv8g1bz8CtlT7JH /rGOiMZFBPU13lPF/dxTb9GpUJLRRtGAIJvz9bAthsQ0pUrZLp39QkrwbbK8Nugh DVgaqfAhSh1VX9KsA0D9QmaXCy7UMoI= -----END CERTIFICATE-----Generated at Thu Feb 26 12:22:05 2026 by rpki-client