$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/588afd86-ffa7-3f93-ba0a-f0dc29cfc611.roa File: 588afd86-ffa7-3f93-ba0a-f0dc29cfc611.roa (raw, json) Hash identifier: LhODIUxqmf7OvDwqwYBPVMYA6gMmJWuWqsk9amHunbk= Subject key identifier: 0C:64:C6:0F:40:45:D2:E0:06:B6:90:6A:62:62:D3:C4:2F:64:7F:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A80EB432BB6E7959E0B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/588afd86-ffa7-3f93-ba0a-f0dc29cfc611.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 198.180.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:80:eb:43:2b:b6:e7:95:9e:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=bd519096-0850-4a3e-9617-3f108d9d26ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:70:68:fc:2d:7f:30:fe:b7:af:c2:2b:b1: ae:a8:5b:40:e3:72:7a:76:a0:aa:76:18:47:91:1b: 11:56:e6:bd:c3:1b:04:51:32:d4:73:67:56:ef:1e: 80:e7:61:6e:ad:63:31:dc:c6:05:27:40:e8:7f:b0: 84:4b:01:11:ff:9d:9a:85:74:6e:4b:b5:05:61:9e: 11:c1:c5:a4:75:b3:8b:3c:72:30:8d:45:ac:6a:b8: e4:dc:4b:1e:99:1d:a8:01:0e:14:ff:4e:2d:68:fc: d7:d0:6d:df:90:14:55:f9:52:3c:3b:8d:a8:b2:16: 2b:d5:5d:a0:d6:54:3f:66:99:09:19:a4:60:7a:82: 5a:50:84:d2:85:43:1f:4a:1c:ef:91:29:a9:b4:5e: ba:7e:9c:8b:8c:c0:c8:6b:29:ac:f8:66:a6:77:9b: 04:12:3b:ab:5c:cb:58:66:30:85:e6:9c:37:11:5d: 75:0f:0f:e5:89:92:4c:df:15:8e:1e:8a:4e:40:c0: f2:53:d6:50:00:b3:70:83:88:ed:db:b0:48:fa:1d: f0:48:f1:bd:5d:15:02:a8:3a:26:7c:4b:d1:6c:0a: 0c:83:15:c1:88:25:c4:4c:6d:73:53:25:2d:74:f6: dc:10:96:38:11:77:33:fd:47:d0:34:6c:6b:58:ca: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:64:C6:0F:40:45:D2:E0:06:B6:90:6A:62:62:D3:C4:2F:64:7F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/588afd86-ffa7-3f93-ba0a-f0dc29cfc611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.180.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d5:f0:e8:8c:6b:05:34:c7:a3:50:67:0a:aa:8b:f4:5b:ac: 1d:f2:df:c0:a7:f8:cd:b3:03:ce:67:e5:6b:19:0f:df:1c:f4: ae:88:59:e5:5b:73:c0:9f:e9:a4:50:38:a6:b9:3c:e4:97:14: 22:c3:c6:d1:1b:51:24:cc:e5:e6:d9:2d:2d:6e:a5:86:bc:cb: 3d:bd:35:0a:f1:9b:3f:71:0b:81:db:a0:5a:af:d2:ce:ea:3c: d5:6a:6e:75:58:68:e8:82:d5:4a:b1:fd:0d:4d:81:6d:13:ba: 02:c5:93:51:f9:a2:4c:c0:bc:f1:fe:bf:8b:95:a7:0c:e1:84: ab:7f:4d:71:d7:31:fe:6a:3a:68:ab:91:58:66:95:35:b4:ed: 39:0a:a4:99:a7:62:2e:3b:1f:2c:69:b0:12:b5:1e:0c:37:40: 1e:c4:b6:f3:58:ab:de:47:bc:c0:e9:b4:6d:c5:86:8d:a5:da: 69:1e:02:b0:06:99:85:f3:15:39:e5:78:8f:3f:5c:aa:b9:8e: 0b:09:e2:47:f2:91:a0:4b:5e:9d:e1:49:7d:08:fa:5f:67:47: 36:53:82:cb:79:ea:76:0c:69:a2:a5:0c:60:4b:a4:53:98:9c: fe:ec:0d:e9:44:11:69:ac:4c:33:18:67:4a:fe:68:b8:24:fe: 9a:33:84:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoDrQyu255WeCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmQ1MTkwOTYtMDg1MC00YTNlLTk2MTctM2YxMDhkOWQyNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBdwaPwtfzD+t6/CK7GuqFtA43J6dqCqdhhH kRsRVua9wxsEUTLUc2dW7x6A52FurWMx3MYFJ0Dof7CESwER/52ahXRuS7UFYZ4R wcWkdbOLPHIwjUWsarjk3EsemR2oAQ4U/04taPzX0G3fkBRV+VI8O42oshYr1V2g 1lQ/ZpkJGaRgeoJaUITShUMfShzvkSmptF66fpyLjMDIayms+Gamd5sEEjurXMtY ZjCF5pw3EV11Dw/liZJM3xWOHopOQMDyU9ZQALNwg4jt27BI+h3wSPG9XRUCqDom fEvRbAoMgxXBiCXETG1zUyUtdPbcEJY4EXcz/UfQNGxrWMoCaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxkxg9ARdLgBraQamJi08QvZH++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTg4YWZkODYtZmZhNy0z ZjkzLWJhMGEtZjBkYzI5Y2ZjNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvV8OiMawU0x6NQZwqqi/RbrB3y38Cn+M2zA85n5WsZD98c9K6IWeVb c8Cf6aRQOKa5POSXFCLDxtEbUSTM5ebZLS1upYa8yz29NQrxmz9xC4HboFqv0s7q PNVqbnVYaOiC1Uqx/Q1NgW0TugLFk1H5okzAvPH+v4uVpwzhhKt/TXHXMf5qOmir kVhmlTW07TkKpJmnYi47HyxpsBK1Hgw3QB7EtvNYq95HvMDptG3Fho2l2mkeArAG mYXzFTnleI8/XKq5jgsJ4kfykaBLXp3hSX0I+l9nRzZTgst56nYMaaKlDGBLpFOY nP7sDelEEWmsTDMYZ0r+aLgk/pozhJk= -----END CERTIFICATE-----Generated at Mon Apr 13 17:21:04 2026 by rpki-client