$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa File: 8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa (raw, json) Hash identifier: LCMnIYyaVmir37yk2OYfXgZ8/OsPkqqpMcq0v4eY8FY= Subject key identifier: ED:48:2D:83:48:68:C1:53:E9:D8:68:71:D3:95:94:E3:54:E6:BC:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A1C797AAC451223E5880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 199.202.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a1:c7:97:aa:c4:51:22:3e:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=dd64d29a-d186-4c74-b8eb-0d852330eaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:90:f1:04:73:62:fa:7b:8c:bb:6f:8f:96: 46:f6:13:4f:66:c9:aa:48:b7:8e:72:ab:8e:c4:f9: 93:97:6e:35:e8:4f:bd:2a:b7:fa:0d:47:60:6e:0a: b6:0f:99:99:00:5f:5e:e6:c3:4b:1c:a4:72:60:5b: 52:fc:dc:78:16:0c:6f:e9:73:2b:5a:22:0f:44:d4: f1:0f:bb:b4:a4:4e:57:a6:30:71:e2:b4:78:f0:fc: 55:c3:32:b5:70:ae:84:94:f8:1e:36:cc:8d:ab:bc: 57:7f:2d:be:9a:69:0a:3a:6b:37:3b:a0:fb:fb:a2: 61:01:94:33:be:fa:4e:c3:18:0f:86:9d:7e:2f:f2: 64:8e:18:6e:27:19:33:07:31:86:d9:1d:b5:15:86: 09:2c:83:98:a3:d3:8a:de:f8:db:0c:6d:f4:5d:11: 64:ad:88:b4:91:20:32:45:6f:4d:9f:85:bf:55:d2: 32:a5:bc:00:1f:12:2f:84:31:9f:87:4a:ac:01:2c: ea:b1:29:91:9e:f0:5a:53:03:7e:94:05:7b:a1:f5: 80:7f:0d:f9:be:71:20:9a:db:91:9e:66:08:d1:7e: 0f:7f:57:46:9b:7b:b2:bd:6b:10:ca:72:b4:20:94: 7a:a4:3e:b7:53:54:55:fa:24:62:92:d5:91:5f:aa: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:48:2D:83:48:68:C1:53:E9:D8:68:71:D3:95:94:E3:54:E6:BC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ef:39:55:b1:bc:25:2e:75:ca:65:f1:82:69:9e:a1:df:28: fd:3f:7d:17:3f:b4:e8:aa:de:c8:4b:5f:b4:fc:cf:3b:19:ec: 37:60:5c:18:93:66:e2:e9:cc:7d:f3:e7:73:5c:fb:37:c9:d7: 84:64:f8:5c:73:5b:08:94:3a:98:33:21:c6:b3:18:d5:cd:35: 27:dd:47:ee:35:6a:5b:3d:09:f3:5c:89:5d:95:55:57:1e:c0: 51:0d:94:fd:8c:e6:d0:a8:13:54:6e:f9:71:b1:48:ef:65:45: 9f:3d:de:da:a8:96:62:34:76:8d:d9:6e:b2:34:cb:18:1c:85: 7a:b5:88:cb:12:02:65:3b:0b:06:6f:49:21:75:30:b0:0c:d8: 7e:0b:69:4a:5e:67:fc:dd:77:a9:03:6c:ff:cd:59:54:20:84: 76:12:01:90:fe:28:6e:f8:e2:94:55:22:94:49:d7:70:8e:8a: ff:be:4b:98:57:50:82:79:6c:fe:ec:a0:05:88:e1:f4:54:21: 59:cf:e2:c5:7d:dc:84:72:40:79:fe:b4:18:d4:c1:cc:00:f8: 80:a6:c8:4d:63:0b:95:04:14:06:d2:27:96:fb:4b:4f:29:ac: 52:e9:95:0d:d3:3f:89:ad:54:10:9a:04:8d:d6:ea:67:0d:da: e3:58:05:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6HHl6rEUSI+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGQ2NGQyOWEtZDE4Ni00Yzc0LWI4ZWItMGQ4NTIzMzBlYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS+Q8QRzYvp7jLtvj5ZG9hNPZsmqSLeOcquO xPmTl2416E+9Krf6DUdgbgq2D5mZAF9e5sNLHKRyYFtS/Nx4Fgxv6XMrWiIPRNTx D7u0pE5XpjBx4rR48PxVwzK1cK6ElPgeNsyNq7xXfy2+mmkKOms3O6D7+6JhAZQz vvpOwxgPhp1+L/JkjhhuJxkzBzGG2R21FYYJLIOYo9OK3vjbDG30XRFkrYi0kSAy RW9Nn4W/VdIypbwAHxIvhDGfh0qsASzqsSmRnvBaUwN+lAV7ofWAfw35vnEgmtuR nmYI0X4Pf1dGm3uyvWsQynK0IJR6pD63U1RV+iRiktWRX6pH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1ILYNIaMFT6dhocdOVlONU5rwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZiOTQxYWItM2EzZC0z MzY1LTgyOGEtYTNlMWEwMjA5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjvOVWxvCUudcpl8YJpnqHfKP0/fRc/tOiq3shLX7T8zzsZ7DdgXBiT ZuLpzH3z53Nc+zfJ14Rk+FxzWwiUOpgzIcazGNXNNSfdR+41als9CfNciV2VVVce wFENlP2M5tCoE1Ru+XGxSO9lRZ893tqolmI0do3ZbrI0yxgchXq1iMsSAmU7CwZv SSF1MLAM2H4LaUpeZ/zdd6kDbP/NWVQghHYSAZD+KG744pRVIpRJ13COiv++S5hX UIJ5bP7soAWI4fRUIVnP4sV93IRyQHn+tBjUwcwA+ICmyE1jC5UEFAbSJ5b7S08p rFLplQ3TP4mtVBCaBI3W6mcN2uNYBS0= -----END CERTIFICATE-----Generated at Sun Sep 13 17:26:47 2026 by rpki-client