$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa File: 5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa (raw, json) Hash identifier: eUr4CS4jwhKahYN6JuD/WQBfe4Whr9S5QmOidz9oIl8= Subject key identifier: D4:41:62:F6:78:35:D4:90:D8:04:DB:88:34:EC:91:C7:16:D7:74:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2874FF504FD361DC1E15890 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:4f:f5:04:fd:36:1d:c1:e1:58:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=d9f80f19-d11a-46bd-9d47-c3014a5d720e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:f2:68:77:83:82:a8:ef:31:bd:38:0e:ff: f5:b5:99:b4:bf:65:22:7d:2a:8e:68:44:99:5c:5d: dc:14:32:56:23:dc:e1:bf:29:73:56:fb:0e:1b:e1: 81:12:c4:4c:02:99:94:60:95:89:20:90:97:e3:7e: 94:39:01:91:5b:93:f9:0f:d5:aa:02:86:68:d2:f5: db:93:d8:b6:70:2a:49:23:72:08:59:5b:45:13:57: 4b:32:72:9e:1d:1d:d0:1d:f8:71:60:11:cc:f9:e7: 58:e7:7a:5e:7f:46:37:4d:96:7b:fa:cf:ad:8f:57: e5:2d:50:ea:df:e2:5e:bf:9d:67:a6:36:03:66:85: 5b:e4:d7:7a:c4:f1:98:e6:d2:23:d7:4d:54:85:a9: c2:c2:36:1e:8f:d7:f4:72:45:fa:51:f0:13:85:0b: 13:a7:05:92:3e:12:9e:64:a5:4e:d0:f7:44:a1:b6: 7a:87:89:0f:5b:b5:fb:9a:a2:11:58:ca:59:fe:5c: c9:35:15:03:fb:02:b2:6d:4f:b2:11:c2:4c:e3:3f: 72:dc:2a:fd:5a:c5:a4:e1:bc:f6:56:ab:d8:8c:cc: d7:33:26:ef:bc:e7:4f:8d:48:f4:a1:fa:6a:c9:82: 85:1f:e4:58:ff:cf:b3:aa:09:7f:8c:cf:5c:e3:9a: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:62:F6:78:35:D4:90:D8:04:DB:88:34:EC:91:C7:16:D7:74:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d75eb5d-4044-3eaa-9cc6-00b76796d42f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:92:ee:ad:76:cf:0d:63:e6:9e:94:e8:1a:56:64:70:b9:c1: d8:18:8e:38:07:2d:e5:e6:f7:92:7c:ac:db:ec:6f:5e:b5:db: e6:bc:12:bc:a9:1e:e1:da:66:23:b6:42:a1:d7:24:ef:23:d1: 9f:fd:3e:94:f1:fc:18:9a:3b:21:02:d7:b1:97:1c:70:ca:e4: e7:f1:ac:9b:c8:fa:04:65:9b:89:04:7f:bf:46:28:c2:7c:de: 91:e4:74:19:c1:28:34:e5:ae:eb:52:9b:5c:57:8f:91:05:2d: d2:73:09:2a:00:46:e2:6c:8c:f6:0e:90:73:22:31:68:60:ef: 35:be:9d:b9:88:0e:c6:33:a0:1c:af:6d:06:75:1e:4e:24:0c: a2:26:e5:3c:70:16:99:f4:94:fb:00:16:04:a5:2c:03:f2:13: 85:dc:4f:8d:80:92:e2:fd:8d:39:ef:0c:43:35:bf:91:fc:42: d7:90:eb:09:2c:68:d9:d2:03:de:bd:91:44:40:8e:0c:44:22: 95:cc:37:9e:15:fa:37:b3:ea:60:77:16:b3:bf:77:3d:f9:52: 9b:74:40:d9:29:d2:22:dc:e1:26:26:36:10:e9:23:bb:2e:d8: de:6d:b3:de:62:6c:37:1a:43:51:ea:a8:43:00:28:9e:bd:2e: bb:93:5f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0/1BP02HcHhWJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDlmODBmMTktZDExYS00NmJkLTlkNDctYzMwMTRhNWQ3MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji7yaHeDgqjvMb04Dv/1tZm0v2UifSqOaESZ XF3cFDJWI9zhvylzVvsOG+GBEsRMApmUYJWJIJCX436UOQGRW5P5D9WqAoZo0vXb k9i2cCpJI3IIWVtFE1dLMnKeHR3QHfhxYBHM+edY53pef0Y3TZZ7+s+tj1flLVDq 3+Jev51npjYDZoVb5Nd6xPGY5tIj101UhanCwjYej9f0ckX6UfAThQsTpwWSPhKe ZKVO0PdEobZ6h4kPW7X7mqIRWMpZ/lzJNRUD+wKybU+yEcJM4z9y3Cr9WsWk4bz2 VqvYjMzXMybvvOdPjUj0ofpqyYKFH+RY/8+zqgl/jM9c45oFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRBYvZ4NdSQ2ATbiDTskccW13SVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQ3NWViNWQtNDA0NC0z ZWFhLTljYzYtMDBiNzY3OTZkNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuS7q12zw1j5p6U6BpWZHC5wdgYjjgHLeXm95J8rNvsb1612+a8Eryp HuHaZiO2QqHXJO8j0Z/9PpTx/BiaOyEC17GXHHDK5OfxrJvI+gRlm4kEf79GKMJ8 3pHkdBnBKDTlrutSm1xXj5EFLdJzCSoARuJsjPYOkHMiMWhg7zW+nbmIDsYzoByv bQZ1Hk4kDKIm5TxwFpn0lPsAFgSlLAPyE4XcT42AkuL9jTnvDEM1v5H8QteQ6wks aNnSA969kURAjgxEIpXMN54V+jez6mB3FrO/dz35Upt0QNkp0iLc4SYmNhDpI7su 2N5ts95ibDcaQ1HqqEMAKJ69LruTX6I= -----END CERTIFICATE-----Generated at Thu Feb 26 12:20:29 2026 by rpki-client