$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa File: 3a528171-0fe3-3518-9fb2-5933dc9a5965.roa (raw, json) Hash identifier: pZ2pPnkFLRGoehcgAW+pOtkCK/EpgwcDy/44Jag7Va0= Subject key identifier: D6:25:29:E7:6C:51:91:4B:23:8A:F2:17:80:C8:FD:DE:12:49:4F:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2871FA3EB9BB47090225700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:1f:a3:eb:9b:b4:70:90:22:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=7bd2dd7b-651e-44ef-a4ec-e9363aa3520c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:3e:69:63:f4:3b:90:8c:b3:0a:3a:f2:0f: 40:87:d1:40:52:13:08:9a:62:c7:0e:89:d4:8c:7a: bc:31:e2:1d:ef:9d:81:69:a3:fa:04:80:2c:99:c1: a6:35:a5:3a:78:36:33:26:5b:1e:90:16:16:af:47: a9:cd:0d:1f:37:05:f8:2a:2c:8d:43:8c:7d:e7:34: c9:5c:e0:b4:5a:ce:ee:ef:12:f2:90:54:4a:27:fd: 7e:78:6d:7e:84:47:be:79:5c:b2:61:6e:53:68:4c: 86:47:8b:b7:ce:a2:79:f8:8a:54:77:22:87:66:ac: b4:34:29:89:3f:aa:02:67:69:f4:28:0b:b3:b8:0f: 5a:66:ab:cc:35:1b:d6:35:78:bf:4f:18:1a:52:7c: b4:54:81:ff:e7:18:6f:b5:2e:9a:d3:6e:24:b8:03: 49:f9:27:87:87:8b:75:33:3a:c1:78:78:07:5c:9e: f9:c6:1c:af:a1:cd:ce:66:68:46:46:80:8a:c3:cb: dc:ee:68:7c:e4:c0:80:dd:f7:f6:a9:72:b5:2c:69: e2:7c:fc:50:97:1b:df:e7:6e:cf:8f:0c:43:91:68: b4:92:e9:67:6c:e4:fd:7c:27:d2:3b:2b:9f:40:19: b4:f9:39:a9:8d:c3:43:66:87:41:2d:dc:d4:f6:4f: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:29:E7:6C:51:91:4B:23:8A:F2:17:80:C8:FD:DE:12:49:4F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:72:46:a8:1f:78:a8:1b:67:2f:19:c4:a9:dd:86:3d:bf:cf: f0:af:f5:a5:da:a7:0b:15:ee:68:60:bf:7c:a7:73:17:a0:55: 87:2d:29:d6:be:93:cd:e4:8b:99:67:16:9d:f7:d3:f9:2e:ea: 68:49:e1:8c:21:ac:c5:3e:58:2c:60:d0:5d:9d:b5:36:24:0e: 3f:16:0a:5f:93:9c:66:28:7d:fe:e0:1b:59:79:23:47:4c:b7: c0:69:b1:0d:61:44:81:71:dd:cd:de:3a:44:a8:9a:e1:3a:cb: 42:39:d6:8c:51:e9:c0:63:5f:95:46:2b:1b:1c:e0:b7:dc:1e: ad:65:66:7c:33:02:41:31:89:dc:ea:33:e6:ec:00:d2:a6:88: 5a:e7:1f:d8:4e:37:72:a8:9b:05:7c:89:f2:88:dc:b3:39:45: a5:00:45:00:f8:c7:22:d5:0b:59:60:55:60:2e:13:7a:7f:4b: c2:16:46:ad:20:ee:4a:1c:82:27:aa:0b:a7:1f:96:a7:04:ad: 8c:4d:43:d9:73:b2:78:9b:39:73:86:c1:1d:9e:f2:f0:97:80: 74:6a:e5:69:95:98:e6:1b:9a:bf:70:1f:ee:ff:9e:42:4e:d1: b6:58:b2:3a:f6:54:a2:45:3c:d1:5a:68:3e:f7:45:d7:95:99: 3d:82:85:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhx+j65u0cJAiVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk N2JkMmRkN2ItNjUxZS00NGVmLWE0ZWMtZTkzNjNhYTM1MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGE+aWP0O5CMswo68g9Ah9FAUhMImmLHDonU jHq8MeId752BaaP6BIAsmcGmNaU6eDYzJlsekBYWr0epzQ0fNwX4KiyNQ4x95zTJ XOC0Ws7u7xLykFRKJ/1+eG1+hEe+eVyyYW5TaEyGR4u3zqJ5+IpUdyKHZqy0NCmJ P6oCZ2n0KAuzuA9aZqvMNRvWNXi/TxgaUny0VIH/5xhvtS6a024kuANJ+SeHh4t1 MzrBeHgHXJ75xhyvoc3OZmhGRoCKw8vc7mh85MCA3ff2qXK1LGnifPxQlxvf527P jwxDkWi0kulnbOT9fCfSOyufQBm0+TmpjcNDZodBLdzU9k981QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYlKedsUZFLI4ryF4DI/d4SSU/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E1MjgxNzEtMGZlMy0z NTE4LTlmYjItNTkzM2RjOWE1OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFyRqgfeKgbZy8ZxKndhj2/z/Cv9aXapwsV7mhgv3yncxegVYctKda+ k83ki5lnFp330/ku6mhJ4YwhrMU+WCxg0F2dtTYkDj8WCl+TnGYoff7gG1l5I0dM t8BpsQ1hRIFx3c3eOkSomuE6y0I51oxR6cBjX5VGKxsc4LfcHq1lZnwzAkExidzq M+bsANKmiFrnH9hON3KomwV8ifKI3LM5RaUARQD4xyLVC1lgVWAuE3p/S8IWRq0g 7kocgieqC6cflqcErYxNQ9lzsnibOXOGwR2e8vCXgHRq5WmVmOYbmr9wH+7/nkJO 0bZYsjr2VKJFPNFaaD73RdeVmT2ChdM= -----END CERTIFICATE-----Generated at Thu Feb 26 12:21:17 2026 by rpki-client