$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa File: 8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa (raw, json) Hash identifier: OpE/V2nwu6gV3NIm7ZTSvjped/5AjjhssWSWKOfQC0k= Subject key identifier: 92:18:E5:67:B6:A9:9A:5D:D9:44:B6:8F:58:14:E6:62:BB:71:57:56 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2872E5DB25FE55501A54E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2e:5d:b2:5f:e5:55:01:a5:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=5c72b8f7-08ab-4725-92c0-7075a0598962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:82:84:83:52:89:c3:bf:bd:e9:36:cb:33: 57:c4:75:d7:42:d7:63:13:96:df:71:54:1a:6d:ea: 14:14:e8:80:15:53:11:89:08:48:12:06:4a:c3:0d: cf:10:42:19:6a:45:66:ab:17:16:73:93:09:e3:8f: 1e:86:55:a0:ca:eb:db:a7:f3:fc:a7:fc:bf:7d:85: 02:8e:39:f1:43:07:de:55:08:5b:f1:af:8e:08:7c: cc:ea:9b:8e:cf:3c:ae:01:15:7a:d4:e1:ba:06:ca: a8:bf:c4:17:d3:63:f9:8c:6f:8d:75:0a:9d:47:db: 15:c4:75:0c:bf:c3:38:cd:20:2e:ff:6d:c1:82:a1: d3:c2:5f:19:6d:a9:2d:ae:79:4f:5a:44:6a:21:33: 32:f4:3d:14:94:cd:2b:80:8c:0c:6c:87:7b:9d:0a: ef:3f:e4:e9:54:f1:8c:c9:d1:24:cb:16:8b:2b:f2: 40:ca:33:cb:8a:d6:3e:41:74:b7:8b:6e:58:23:86: 76:3b:2f:29:20:1d:00:53:a6:63:20:88:2b:3e:50: 4f:21:ed:63:f1:4e:9c:8a:59:3e:a9:cc:34:6c:db: 9d:7f:ad:d0:90:e1:3e:80:33:48:e8:f5:c2:b3:1c: 35:85:78:aa:bf:80:cf:ef:87:e1:8d:3e:46:4f:8b: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:E5:67:B6:A9:9A:5D:D9:44:B6:8F:58:14:E6:62:BB:71:57:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ed:dc:ed:e7:15:7f:53:94:fa:1b:3c:1d:72:7c:e1:70:55: 3b:46:fc:e9:a9:cc:c3:a5:14:6a:78:1e:45:21:e0:03:6d:a7: 3c:44:40:eb:b5:cc:61:50:13:82:81:3c:98:73:c6:4d:05:12: 01:0a:c8:12:c1:e3:11:e7:b0:c5:6f:42:1f:38:6a:49:a1:0a: b0:5b:c2:db:a9:e5:85:77:15:32:1f:d6:67:48:0c:84:bf:41: 47:4b:55:14:3c:8c:e6:4b:49:1b:b6:89:05:d6:e6:54:6a:b7: de:cf:c3:80:7a:85:bb:94:0d:c2:a7:38:04:21:96:7f:5c:d1: 8e:8b:7a:79:85:3b:7d:ec:ed:64:45:ec:a4:86:e8:9c:9e:98: 57:14:9f:2e:34:f7:f6:55:3d:1d:af:b3:00:8e:6a:fd:b3:2e: 84:22:8b:f6:98:26:77:65:01:fb:be:6f:8f:8a:41:22:e3:98: e3:fc:cb:6c:4c:d6:88:a8:0d:b3:0a:14:51:8d:f7:d4:e4:54: 77:dd:5c:da:bf:b4:69:0e:a4:86:5f:57:01:03:a1:72:f6:56: 14:9d:96:c1:43:00:6d:32:96:b8:6e:2a:99:56:5f:66:0b:2f: f6:e6:93:72:dc:a1:ac:28:27:4c:1a:de:44:03:50:70:13:e6: 34:88:cc:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhy5dsl/lVQGlTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NWM3MmI4ZjctMDhhYi00NzI1LTkyYzAtNzA3NWEwNTk4OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlECChINSicO/vek2yzNXxHXXQtdjE5bfcVQa beoUFOiAFVMRiQhIEgZKww3PEEIZakVmqxcWc5MJ448ehlWgyuvbp/P8p/y/fYUC jjnxQwfeVQhb8a+OCHzM6puOzzyuARV61OG6Bsqov8QX02P5jG+NdQqdR9sVxHUM v8M4zSAu/23BgqHTwl8ZbaktrnlPWkRqITMy9D0UlM0rgIwMbId7nQrvP+TpVPGM ydEkyxaLK/JAyjPLitY+QXS3i25YI4Z2Oy8pIB0AU6ZjIIgrPlBPIe1j8U6cilk+ qcw0bNudf63QkOE+gDNI6PXCsxw1hXiqv4DP74fhjT5GT4u+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIY5We2qZpd2US2j1gU5mK7cVdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGY4ZTNiMzAtOWEzYS0z YzIxLWE5ZTUtZDUwYzlhMWEzN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKft3O3nFX9TlPobPB1yfOFwVTtG/OmpzMOlFGp4HkUh4ANtpzxEQOu1 zGFQE4KBPJhzxk0FEgEKyBLB4xHnsMVvQh84akmhCrBbwtup5YV3FTIf1mdIDIS/ QUdLVRQ8jOZLSRu2iQXW5lRqt97Pw4B6hbuUDcKnOAQhln9c0Y6LenmFO33s7WRF 7KSG6JyemFcUny409/ZVPR2vswCOav2zLoQii/aYJndlAfu+b4+KQSLjmOP8y2xM 1oioDbMKFFGN99TkVHfdXNq/tGkOpIZfVwEDoXL2VhSdlsFDAG0ylrhuKplWX2YL L/bmk3LcoawoJ0wa3kQDUHAT5jSIzGI= -----END CERTIFICATE-----Generated at Thu Feb 26 12:20:40 2026 by rpki-client