$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85eb0811-7e20-35b9-ba25-2c81a0a8ce60.roa File: 85eb0811-7e20-35b9-ba25-2c81a0a8ce60.roa (raw, json) Hash identifier: rJr+57uk3hxeoJmqmhMtd04nFTeKlEq+X2BKz31IqNc= Subject key identifier: D0:51:5C:37:ED:E1:F8:9F:77:58:EA:E6:82:D3:92:5A:39:0A:26:43 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A82718813058C5F84C980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85eb0811-7e20-35b9-ba25-2c81a0a8ce60.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 198.224.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:82:71:88:13:05:8c:5f:84:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=74f86886-d7be-44ac-92ea-00f5be0766f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:35:88:f5:d6:d4:d3:3c:67:b8:6e:0f:26: 29:8d:db:4a:1b:62:9f:b9:1a:16:94:5f:8e:7b:49: bf:fb:33:4c:91:43:44:3f:e5:48:a6:49:db:25:18: 6d:3b:f9:c3:cf:b0:b2:b2:f1:50:73:ba:30:6b:18: 35:89:b2:37:a2:df:e8:a3:19:f6:78:39:8b:ab:cc: 82:65:23:e4:cb:08:a8:09:7d:ad:59:4b:e3:7c:43: af:e4:d9:36:2d:cf:fb:d9:e1:57:5f:6f:d9:1c:94: 41:b6:47:16:56:b2:d0:07:3b:d8:b3:51:f1:1d:25: 76:34:06:70:c2:db:f9:a7:06:63:9f:e3:aa:fd:1c: d2:e2:d3:38:10:f7:16:7d:24:75:33:a1:9b:0b:17: 83:34:6b:62:96:ec:42:8c:84:96:d5:7e:be:39:83: d0:e1:ba:e6:b2:ac:cb:69:f0:94:d8:78:3e:39:24: 6c:26:e0:e5:dd:49:33:4e:9e:6d:da:35:fc:4e:7d: e5:ee:c2:57:4f:19:5d:8b:49:c4:ba:76:6c:b3:d8: 7f:d5:a4:65:a9:3e:7b:23:9f:79:04:55:09:61:97: c6:0d:48:f3:4f:39:b4:61:71:06:6e:57:a0:f1:13: 79:01:73:dd:c7:bc:1a:5a:91:e7:1f:22:81:5c:02: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:51:5C:37:ED:E1:F8:9F:77:58:EA:E6:82:D3:92:5A:39:0A:26:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85eb0811-7e20-35b9-ba25-2c81a0a8ce60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.224.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0a:c5:36:72:59:05:d9:71:a4:dd:48:a8:d5:15:63:79:a9: 38:61:6d:8c:38:95:51:c0:6e:3d:0a:b9:16:a7:54:3d:c4:2d: b7:b6:57:b2:aa:ac:1a:68:a0:97:6e:04:74:1d:2f:1f:d5:ac: b2:e9:9a:6d:5e:dc:53:ce:23:c2:dc:9a:db:fc:d0:25:78:34: 11:29:6e:3d:a2:15:23:86:74:5c:48:97:27:21:a2:d0:0b:0b: bd:83:f6:b8:8a:c5:00:ad:54:62:5a:0d:a3:a7:b6:04:6d:1c: 46:d4:b0:79:d9:c5:22:3d:cf:69:73:61:64:14:0b:c5:2c:f4: 9b:4c:9d:34:2c:0b:4f:55:0c:44:13:7e:59:fe:16:b4:0c:33: ba:61:7e:9a:61:92:90:09:2d:e4:38:cb:77:0b:c0:f8:a1:d5: ad:39:63:80:1e:84:a6:5f:26:a4:7a:29:2a:ce:a7:95:fc:bc: 5d:ac:de:70:35:0e:81:26:c2:70:00:08:77:db:e3:7f:98:da: 89:b1:63:5c:db:67:f4:6c:8e:80:d3:1c:c7:0f:70:40:98:fa: f8:dc:79:45:33:dc:7a:53:fb:33:74:42:a5:c4:f9:f6:de:ea: a6:24:5c:2f:d0:5c:f9:5e:82:0a:42:0c:db:35:85:bb:41:d7: 5e:3f:f4:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoJxiBMFjF+EyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzRmODY4ODYtZDdiZS00NGFjLTkyZWEtMDBmNWJlMDc2NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCU1iPXW1NM8Z7huDyYpjdtKG2KfuRoWlF+O e0m/+zNMkUNEP+VIpknbJRhtO/nDz7CysvFQc7owaxg1ibI3ot/ooxn2eDmLq8yC ZSPkywioCX2tWUvjfEOv5Nk2Lc/72eFXX2/ZHJRBtkcWVrLQBzvYs1HxHSV2NAZw wtv5pwZjn+Oq/RzS4tM4EPcWfSR1M6GbCxeDNGtiluxCjISW1X6+OYPQ4brmsqzL afCU2Hg+OSRsJuDl3UkzTp5t2jX8Tn3l7sJXTxldi0nEunZss9h/1aRlqT57I595 BFUJYZfGDUjzTzm0YXEGbleg8RN5AXPdx7waWpHnHyKBXAKeJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBRXDft4fifd1jq5oLTklo5CiZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODVlYjA4MTEtN2UyMC0z NWI5LWJhMjUtMmM4MWEwYThjZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxuCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcKxTZyWQXZcaTdSKjVFWN5qThhbYw4lVHAbj0KuRanVD3ELbe2V7Kq rBpooJduBHQdLx/VrLLpmm1e3FPOI8Lcmtv80CV4NBEpbj2iFSOGdFxIlychotAL C72D9riKxQCtVGJaDaOntgRtHEbUsHnZxSI9z2lzYWQUC8Us9JtMnTQsC09VDEQT fln+FrQMM7phfpphkpAJLeQ4y3cLwPih1a05Y4AehKZfJqR6KSrOp5X8vF2s3nA1 DoEmwnAACHfb43+Y2omxY1zbZ/RsjoDTHMcPcECY+vjceUUz3HpT+zN0QqXE+fbe 6qYkXC/QXPleggpCDNs1hbtB114/9JM= -----END CERTIFICATE-----Generated at Mon Apr 13 18:24:56 2026 by rpki-client