$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa File: 3838a5d3-147b-300b-82be-16f0366fc707.roa (raw, json) Hash identifier: BC+nd1l0TD5RVJ9keiUv78vzaqcAhinH4QJZmsff1xw= Subject key identifier: 83:A0:50:B2:96:91:67:B7:E9:F4:78:1F:FF:31:99:46:3F:19:46:04 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E736A3B40D95B586A3344E560 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 3855 IP address blocks: 199.172.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:3b:40:d9:5b:58:6a:33:44:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=6d366c61-c28e-4d0f-a6fe-35aa80312fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:1d:e0:90:5d:b1:76:fb:66:54:24:ba:07: f0:1b:15:f1:b8:71:26:44:30:62:a2:0d:29:c9:f0: 88:ae:86:08:dd:43:7a:74:dd:ee:0a:bc:06:2d:55: 15:93:c1:7e:7c:f3:06:88:91:4a:fd:1f:88:e6:24: 66:bf:a2:99:91:3d:ed:25:9d:80:f7:6d:0f:32:e4: 7a:2a:e2:0f:03:c2:42:f8:04:02:13:c2:28:15:d5: 24:cc:f2:10:ef:56:23:60:6b:1a:a2:d3:e4:22:32: 95:27:4c:2a:c6:11:2e:3c:dd:20:03:ab:31:46:73: 0f:32:42:69:99:cf:93:83:6c:27:6e:52:96:01:91: 07:f7:b7:5b:6b:df:3c:46:3f:73:29:95:5a:6b:7a: 4c:04:05:37:1a:14:9a:17:ca:be:0b:d4:2c:96:4c: 80:82:4c:ff:68:63:9e:12:62:ca:14:b9:ec:72:a1: b6:9e:aa:ad:ac:0d:61:6a:76:31:b6:28:3d:78:fa: 06:b4:75:48:5e:f1:68:ba:a4:c3:e6:e9:19:f4:ed: c1:07:6c:49:9e:ea:45:0e:31:f6:c0:fe:2c:c9:8f: ce:d3:97:a6:6a:1d:1b:9c:36:82:8d:03:09:16:44: 08:fa:d4:b0:88:4f:26:51:24:a1:ae:d6:30:0e:21: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A0:50:B2:96:91:67:B7:E9:F4:78:1F:FF:31:99:46:3F:19:46:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f8:77:24:7e:15:0e:7e:ca:08:a7:14:72:fb:2a:a7:2d:a9: 41:b3:21:87:c7:d8:99:4e:9d:ab:db:c8:d0:da:c3:aa:e6:46: 90:dc:8e:3b:d2:96:60:0b:01:c7:53:30:b8:c4:dd:f7:f2:e9: 6d:21:d0:66:77:db:f9:7d:31:72:44:42:ec:5f:67:0a:0a:40: eb:ee:1d:c3:10:5a:af:3b:14:1a:05:45:65:4c:7e:6b:fa:20: 7c:e0:91:ac:ec:d2:58:aa:06:3c:38:24:b0:93:03:69:a0:4d: d9:04:35:ac:47:91:00:22:86:02:3d:0a:e2:cb:77:8c:9c:a4: c5:b9:b5:b3:84:10:76:96:1d:49:bc:3c:e9:dc:cc:67:83:d6: c3:5a:11:9b:9c:13:fd:c0:4d:40:8f:26:4d:2a:a3:55:80:c5: 0c:b3:02:c9:27:ba:2a:3c:35:bd:74:af:06:9f:25:4a:1b:95: 73:1c:cd:9a:9a:37:9c:b0:cc:d3:37:d7:c5:35:89:3d:47:16: 2e:32:10:02:78:0c:4f:1e:68:84:51:d2:6b:4c:f8:0f:38:2d: cc:45:de:ed:29:90:64:01:ae:0b:b0:18:80:a5:08:02:ca:51: 22:68:8c:86:41:44:8f:a5:0a:2b:52:b2:b1:a3:b5:f5:09:d9: a6:6c:77:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajtA2VtYajNE5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NmQzNjZjNjEtYzI4ZS00ZDBmLWE2ZmUtMzVhYTgwMzEyZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBUd4JBdsXb7ZlQkugfwGxXxuHEmRDBiog0p yfCIroYI3UN6dN3uCrwGLVUVk8F+fPMGiJFK/R+I5iRmv6KZkT3tJZ2A920PMuR6 KuIPA8JC+AQCE8IoFdUkzPIQ71YjYGsaotPkIjKVJ0wqxhEuPN0gA6sxRnMPMkJp mc+Tg2wnblKWAZEH97dba988Rj9zKZVaa3pMBAU3GhSaF8q+C9QslkyAgkz/aGOe EmLKFLnscqG2nqqtrA1hanYxtig9ePoGtHVIXvFouqTD5ukZ9O3BB2xJnupFDjH2 wP4syY/O05emah0bnDaCjQMJFkQI+tSwiE8mUSShrtYwDiGQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOgULKWkWe36fR4H/8xmUY/GUYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzgzOGE1ZDMtMTQ3Yi0z MDBiLTgyYmUtMTZmMDM2NmZjNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj4dyR+FQ5+yginFHL7KqctqUGzIYfH2JlOnavbyNDaw6rmRpDcjjvS lmALAcdTMLjE3ffy6W0h0GZ32/l9MXJEQuxfZwoKQOvuHcMQWq87FBoFRWVMfmv6 IHzgkazs0liqBjw4JLCTA2mgTdkENaxHkQAihgI9CuLLd4ycpMW5tbOEEHaWHUm8 POnczGeD1sNaEZucE/3ATUCPJk0qo1WAxQyzAsknuio8Nb10rwafJUoblXMczZqa N5ywzNM318U1iT1HFi4yEAJ4DE8eaIRR0mtM+A84LcxF3u0pkGQBrguwGIClCALK USJojIZBRI+lCitSsrGjtfUJ2aZsd0Y= -----END CERTIFICATE-----Generated at Mon Jul 13 12:57:03 2026 by rpki-client