$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa File: 6d8378a6-7850-3b7d-8e57-654352e2ba53.roa (raw, json) Hash identifier: Ax3+P2FFb6iTVBP0hFxKXBxusTqRRyW0wUmNLFR2RvY= Subject key identifier: 93:FF:D2:87:DC:41:61:2F:24:21:8C:68:B8:1F:F7:94:F7:39:EE:DA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2872C9654879AE79CE14E40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2c:96:54:87:9a:e7:9c:e1:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=1d96e69d-b851-4505-b6ae-dbe3e72cff25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:3b:73:86:4b:2b:81:ca:cb:9a:de:c6:7a: ff:40:d0:1b:b3:94:b7:7d:85:12:2e:33:f2:bf:e7: 7a:9d:9a:e7:cb:97:3b:3f:49:1d:db:cc:f2:79:ab: 8a:21:e9:9e:3e:29:90:4a:fb:c8:fa:d6:ee:a2:9a: ed:a7:bf:4e:23:1e:3e:bd:63:43:0d:e9:5f:98:6c: b3:6b:12:4e:56:12:d4:d9:f0:5b:24:4a:89:d3:95: 04:8f:8f:27:8e:7d:63:59:1b:f3:78:df:50:ff:06: 1f:83:41:24:24:57:b5:c8:4b:7d:af:d6:98:c7:0a: 3a:34:9c:be:e3:86:f5:70:e0:bd:87:ba:2b:04:73: 2c:7c:16:ae:41:cf:9c:38:05:3d:94:6b:97:6f:18: 66:77:35:e7:09:fd:b1:d3:be:78:27:5b:87:09:da: cb:e7:7f:4f:fb:83:ed:d4:e8:5e:27:fe:da:6f:39: 84:77:3d:32:10:2d:ba:36:8d:61:44:1d:50:90:d2: 50:4b:04:05:2f:52:87:1c:6e:13:81:08:0f:4b:ef: 8c:ab:13:25:a1:56:14:e3:9c:db:04:c2:a9:74:35: bc:e9:c8:d7:dd:19:b0:70:bf:1a:9e:f3:34:74:1c: 24:3a:12:52:7d:b1:a4:90:9e:a4:c5:43:65:c5:70: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FF:D2:87:DC:41:61:2F:24:21:8C:68:B8:1F:F7:94:F7:39:EE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:94:af:79:59:b6:14:02:d0:02:11:c3:e9:ed:c5:ce:c7:53: 6c:b5:70:f2:6c:3e:ab:43:46:c6:0f:3b:66:cd:b7:1f:eb:bb: 6c:6d:3f:5b:ea:f2:58:15:fa:eb:09:de:e7:6b:a4:6c:92:7d: 1f:a0:f1:d8:38:33:4d:c1:7d:c7:15:bd:a4:f5:e9:ba:04:a1: 95:14:08:ff:55:29:0d:17:f9:06:ea:2a:4e:3e:60:f9:25:cc: 8a:41:b1:4d:5d:c8:6f:6a:fb:47:f6:a4:36:4b:dc:05:f2:a9: 4b:38:6c:db:66:01:5b:01:7f:f7:86:ae:77:af:f9:7e:ac:dd: 85:d5:74:d0:41:b0:1f:68:97:e0:59:89:19:7e:11:13:c9:09: c2:e8:fb:55:b1:b1:20:90:b8:60:94:67:dd:45:c1:77:4f:61: 94:ca:3e:0f:53:f1:7c:f9:7c:db:54:2c:86:7d:54:e9:1a:3e: fc:ff:74:16:c0:3f:24:0c:e2:82:d2:b2:3b:59:29:43:0d:b3: 73:d2:72:ec:69:68:87:01:c1:26:8b:d9:6b:3d:b4:f0:91:70: f6:d7:31:01:c0:40:36:7f:17:aa:22:9b:e1:38:4f:00:da:61: 70:dd:79:5c:61:23:06:1e:7f:77:e6:d1:26:b5:1a:84:5f:b0: 55:9e:26:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhyyWVIea55zhTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk MWQ5NmU2OWQtYjg1MS00NTA1LWI2YWUtZGJlM2U3MmNmZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMc7c4ZLK4HKy5rexnr/QNAbs5S3fYUSLjPy v+d6nZrny5c7P0kd28zyeauKIemePimQSvvI+tbuoprtp79OIx4+vWNDDelfmGyz axJOVhLU2fBbJEqJ05UEj48njn1jWRvzeN9Q/wYfg0EkJFe1yEt9r9aYxwo6NJy+ 44b1cOC9h7orBHMsfBauQc+cOAU9lGuXbxhmdzXnCf2x0754J1uHCdrL539P+4Pt 1OheJ/7abzmEdz0yEC26No1hRB1QkNJQSwQFL1KHHG4TgQgPS++MqxMloVYU45zb BMKpdDW86cjX3RmwcL8anvM0dBwkOhJSfbGkkJ6kxUNlxXAWZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJP/0ofcQWEvJCGMaLgf95T3Oe7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmQ4Mzc4YTYtNzg1MC0z YjdkLThlNTctNjU0MzUyZTJiYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCUr3lZthQC0AIRw+ntxc7HU2y1cPJsPqtDRsYPO2bNtx/ru2xtP1vq 8lgV+usJ3udrpGySfR+g8dg4M03BfccVvaT16boEoZUUCP9VKQ0X+QbqKk4+YPkl zIpBsU1dyG9q+0f2pDZL3AXyqUs4bNtmAVsBf/eGrnev+X6s3YXVdNBBsB9ol+BZ iRl+ERPJCcLo+1WxsSCQuGCUZ91FwXdPYZTKPg9T8Xz5fNtULIZ9VOkaPvz/dBbA PyQM4oLSsjtZKUMNs3PScuxpaIcBwSaL2Ws9tPCRcPbXMQHAQDZ/F6oim+E4TwDa YXDdeVxhIwYef3fm0Sa1GoRfsFWeJjs= -----END CERTIFICATE-----Generated at Thu Feb 26 12:21:56 2026 by rpki-client