$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa File: b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa (raw, json) Hash identifier: 2hF/v7zpOvZqfTa6TkT8CirozIO9qq+/iUvEy+kjQkc= Subject key identifier: 51:50:6A:31:89:67:79:71:A2:D2:72:99:3D:A6:0E:37:BB:8E:61:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A3EDCF321589611425500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 198.225.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:3e:dc:f3:21:58:96:11:42:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=62332fd9-fa80-4a25-ad26-34914e9fe707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:5c:af:65:3e:e8:d1:5c:b4:58:f9:49:04: 8f:bc:8a:97:e0:a8:5d:7c:af:ff:85:b3:70:43:cc: 57:a7:3a:7a:88:10:83:84:92:2b:79:da:5c:8d:a8: f9:52:3e:5c:8d:f3:7c:e9:5b:25:23:5c:06:94:32: 12:00:2e:f1:c9:c5:1b:48:e8:eb:c8:98:9a:03:4d: ed:29:0d:76:04:a0:15:26:e4:d6:14:0a:8d:35:a8: f8:d3:ba:6d:d0:a8:f1:0d:66:f8:0c:3e:4b:37:3a: f8:46:f3:39:27:95:88:87:19:0a:a7:e9:1e:c4:9a: 05:eb:cb:9e:78:0c:cd:10:b6:ff:88:9a:62:a5:36: 5f:43:26:98:b0:25:e8:e4:aa:94:80:2b:34:53:66: 77:6f:99:ec:d5:37:86:00:67:b4:78:fd:5f:19:f3: 75:5f:dc:5e:c2:09:45:21:d3:07:86:22:b1:88:95: 29:e4:de:0a:89:2d:02:c5:8a:4c:a0:c0:b2:ca:87: e2:1d:db:04:0c:76:90:48:73:28:c8:7a:de:75:21: b1:3c:bc:11:ef:29:61:2b:ed:22:f6:76:bc:c3:80: 11:0e:b6:a3:e7:19:4e:36:e3:09:97:53:fd:62:ec: 59:00:fd:78:e0:cf:3c:47:5a:40:c7:4f:04:09:6e: dc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:50:6A:31:89:67:79:71:A2:D2:72:99:3D:A6:0E:37:BB:8E:61:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b25f3541-cce2-33b8-9449-2bb67d5c7df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.225.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6e:6b:3e:28:87:75:37:41:86:1a:06:f9:b4:f3:d9:7e:c6: 33:8c:b1:34:68:6e:cf:e6:88:5a:fe:8f:a0:60:32:30:7f:8b: 03:17:6f:79:81:71:d5:60:09:e4:0c:45:b6:44:e3:c1:f3:8a: b2:da:0e:1c:9c:08:11:0c:1a:a4:0e:1b:2d:5c:51:4c:0f:39: 7f:21:da:14:3a:1b:dd:c9:7f:13:a9:dc:09:4c:f7:b1:48:3d: bf:30:dc:55:69:b5:57:bb:1d:5b:fb:9f:86:88:5a:38:d8:2b: 5e:b3:fc:8f:6e:81:19:58:a0:fe:d1:10:67:3d:2e:a5:38:c9: b5:43:07:95:f5:69:e6:61:6f:39:54:0e:1e:ae:f9:9e:72:61: 19:40:df:6b:02:73:38:29:22:84:43:4f:cc:d4:02:89:8b:13: 43:50:8a:c8:77:48:6d:ef:51:9a:01:7a:d9:b7:42:25:8a:a6: 51:e1:2a:37:e1:f8:2b:25:28:61:10:30:0f:94:3f:6b:e3:74: 04:c2:bb:9e:36:4a:48:33:f9:07:e5:12:38:c2:38:34:f0:95: c9:ca:84:4a:69:3f:4b:dd:6b:73:3e:42:4d:fa:8c:39:93:2f: 1e:e2:7d:0e:94:ac:94:f6:12:33:d9:be:83:cb:79:02:b5:02: 8d:25:52:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGj7c8yFYlhFCVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NjIzMzJmZDktZmE4MC00YTI1LWFkMjYtMzQ5MTRlOWZlNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMFcr2U+6NFctFj5SQSPvIqX4KhdfK//hbNw Q8xXpzp6iBCDhJIredpcjaj5Uj5cjfN86VslI1wGlDISAC7xycUbSOjryJiaA03t KQ12BKAVJuTWFAqNNaj407pt0KjxDWb4DD5LNzr4RvM5J5WIhxkKp+kexJoF68ue eAzNELb/iJpipTZfQyaYsCXo5KqUgCs0U2Z3b5ns1TeGAGe0eP1fGfN1X9xewglF IdMHhiKxiJUp5N4KiS0CxYpMoMCyyofiHdsEDHaQSHMoyHredSGxPLwR7ylhK+0i 9na8w4ARDraj5xlONuMJl1P9YuxZAP144M88R1pAx08ECW7c1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFQajGJZ3lxotJymT2mDje7jmEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjI1ZjM1NDEtY2NlMi0z M2I4LTk0NDktMmJiNjdkNWM3ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNuaz4oh3U3QYYaBvm089l+xjOMsTRobs/miFr+j6BgMjB/iwMXb3mB cdVgCeQMRbZE48HzirLaDhycCBEMGqQOGy1cUUwPOX8h2hQ6G93JfxOp3AlM97FI Pb8w3FVptVe7HVv7n4aIWjjYK16z/I9ugRlYoP7REGc9LqU4ybVDB5X1aeZhbzlU Dh6u+Z5yYRlA32sCczgpIoRDT8zUAomLE0NQish3SG3vUZoBetm3QiWKplHhKjfh +CslKGEQMA+UP2vjdATCu542Skgz+QflEjjCODTwlcnKhEppP0vda3M+Qk36jDmT Lx7ifQ6UrJT2EjPZvoPLeQK1Ao0lUuE= -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:19 2026 by rpki-client