$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e06a29-ad1f-3bb9-a5e8-b52a0c1645d1.roa File: 87e06a29-ad1f-3bb9-a5e8-b52a0c1645d1.roa (raw, json) Hash identifier: XTxDfTSjlpFElX/gCF9AmbUC647YJAC9LlSpt4NV/1Q= Subject key identifier: DA:73:78:49:33:90:55:88:FF:1B:98:37:01:5E:67:1A:D2:60:70:88 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5E62CE84A7BC117C5C423280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e06a29-ad1f-3bb9-a5e8-b52a0c1645d1.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3855 IP address blocks: 199.172.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ce:84:a7:bc:11:7c:5c:42:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ed634460-b901-4185-a418-c7912ba3da24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:9e:26:89:f2:61:7b:23:8e:6a:62:5c:18: 09:db:d5:db:c2:9e:4f:4b:ce:5a:53:7c:e0:dc:e2: 07:8e:67:fb:b9:b6:d3:b4:b7:d7:94:51:19:0c:60: 55:51:2c:1a:30:58:2c:98:44:1e:4e:75:25:2e:6b: 84:dd:3f:44:eb:cf:6a:56:d4:af:3b:5e:32:40:04: 13:03:a5:44:24:c9:06:b6:b6:2c:06:13:42:8a:d2: b9:38:c2:44:b1:4e:36:cc:39:d2:88:ca:53:cb:a4: 21:7f:2a:f4:93:b0:ca:55:28:86:a0:bd:e0:03:e2: ad:36:7e:5b:9f:d1:14:f7:e7:bc:96:19:25:a7:79: 1b:37:d1:29:05:07:6a:93:37:ae:8b:3f:5a:0b:0a: d0:ca:b3:31:c0:21:e2:17:38:1b:57:6f:08:4e:20: f9:ea:34:76:d1:66:77:b7:38:0c:67:fc:37:4b:f7: f9:72:be:f3:2a:76:a8:0a:ec:1e:c6:a7:0c:35:46: b1:4f:70:51:ad:44:cd:9a:f1:b8:c0:28:b3:e0:39: 61:25:95:0b:0e:6e:dd:3c:cd:3d:5e:91:e6:a9:09: e0:e4:aa:37:a9:45:53:e3:bb:c7:4d:2f:fe:23:6d: c9:a2:b4:fe:f6:f2:a8:75:80:f4:e1:83:aa:44:1a: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:73:78:49:33:90:55:88:FF:1B:98:37:01:5E:67:1A:D2:60:70:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e06a29-ad1f-3bb9-a5e8-b52a0c1645d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d3:42:e7:7b:4b:d7:88:27:10:e2:be:92:eb:cf:16:b0:d0: eb:c3:be:12:6a:8c:08:2d:20:ba:4b:6f:4e:44:67:a0:f5:aa: d5:76:70:a7:f9:e6:51:e0:ed:3c:a1:b9:68:bd:64:ab:71:9a: 80:f7:41:be:96:52:f1:58:22:e4:fb:66:70:80:33:46:3d:21: bf:b6:0d:f2:4e:7a:23:37:11:c1:0f:1b:bd:08:fd:1c:dd:49: 78:23:4b:13:f1:00:c0:e5:fc:1a:f8:95:ce:c0:2d:bd:60:66: a7:1f:59:bf:7d:55:b2:8f:d5:82:b3:00:6c:d4:c4:de:9e:60: 1a:e1:fc:93:b6:a0:f9:c1:af:92:82:25:04:e1:a1:bb:6a:0c: ea:c1:0a:c3:14:9f:83:e4:38:c1:3e:98:91:24:d7:eb:8b:0d: 35:c9:e8:6c:d6:2a:6e:44:56:45:d3:f7:4d:24:03:d9:f7:ab: dc:36:19:3b:e8:05:a1:d1:c7:27:48:d5:cd:98:e0:65:ab:c8: c3:7c:1d:ce:4a:13:c1:39:cb:77:74:63:94:0a:22:36:5f:42: 68:2c:81:aa:10:fb:20:ad:cf:66:4a:eb:78:28:86:4e:1f:8a: 7f:b1:46:2b:2e:3d:03:d7:73:2a:f7:d9:35:79:06:ca:29:77: 3b:f1:f4:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYs6Ep7wRfFxCMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZWQ2MzQ0NjAtYjkwMS00MTg1LWE0MTgtYzc5MTJiYTNkYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/ueJonyYXsjjmpiXBgJ29Xbwp5PS85aU3zg 3OIHjmf7ubbTtLfXlFEZDGBVUSwaMFgsmEQeTnUlLmuE3T9E689qVtSvO14yQAQT A6VEJMkGtrYsBhNCitK5OMJEsU42zDnSiMpTy6Qhfyr0k7DKVSiGoL3gA+KtNn5b n9EU9+e8lhklp3kbN9EpBQdqkzeuiz9aCwrQyrMxwCHiFzgbV28ITiD56jR20WZ3 tzgMZ/w3S/f5cr7zKnaoCuwexqcMNUaxT3BRrUTNmvG4wCiz4DlhJZULDm7dPM09 XpHmqQng5Ko3qUVT47vHTS/+I23JorT+9vKodYD04YOqRBrVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpzeEkzkFWI/xuYNwFeZxrSYHCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODdlMDZhMjktYWQxZi0z YmI5LWE1ZTgtYjUyYTBjMTY0NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzTQud7S9eIJxDivpLrzxaw0OvDvhJqjAgtILpLb05EZ6D1qtV2cKf5 5lHg7TyhuWi9ZKtxmoD3Qb6WUvFYIuT7ZnCAM0Y9Ib+2DfJOeiM3EcEPG70I/Rzd SXgjSxPxAMDl/Br4lc7ALb1gZqcfWb99VbKP1YKzAGzUxN6eYBrh/JO2oPnBr5KC JQThobtqDOrBCsMUn4PkOME+mJEk1+uLDTXJ6GzWKm5EVkXT900kA9n3q9w2GTvo BaHRxydI1c2Y4GWryMN8Hc5KE8E5y3d0Y5QKIjZfQmgsgaoQ+yCtz2ZK63gohk4f in+xRisuPQPXcyr32TV5Bsopdzvx9Bo= -----END CERTIFICATE-----Generated at Tue Oct 13 12:57:05 2026 by rpki-client