$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa File: c7b14290-0b3a-3af1-a228-7043e737d3ae.roa (raw, json) Hash identifier: lLvWCQ23FbzkaiLib5FJbxOOor5wUBoQ2NGcrW8ieok= Subject key identifier: 9C:8E:E5:3C:FC:3A:DD:16:50:61:12:5E:6B:76:6C:B8:66:42:7C:4E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E736A3AC2882596830CACEE20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 3855 IP address blocks: 199.172.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:3a:c2:88:25:96:83:0c:ac:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=8fa361bb-f212-4f0e-992c-1d0eae7757e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:41:f7:af:d0:5d:e9:49:31:c9:91:0b:a9: ba:92:a6:0c:96:3b:12:cf:99:18:87:73:7d:bf:72: 98:78:53:30:6f:78:1f:51:19:a2:5b:89:d3:c4:79: 3c:cf:14:4d:19:e7:50:93:4b:8f:2e:0e:ef:2e:dc: 97:7d:1b:6e:72:bf:cc:19:a1:f4:f9:df:08:61:3f: 1b:3f:e9:ea:4d:1b:b3:d7:b7:94:3f:e6:27:02:58: 16:17:ef:1f:fa:a2:5f:f2:d3:61:d5:65:33:e1:d5: 2b:b6:bf:e8:7c:34:ed:2b:ca:cb:70:d1:7a:61:88: b3:73:c6:55:2f:82:84:bb:ac:6a:40:a4:30:32:a2: 0d:a1:66:fc:b2:6d:10:cd:72:61:6d:5a:09:0f:06: b1:07:85:b1:cb:60:50:d6:83:9f:46:3a:52:54:f4: 7b:d4:e3:74:de:98:1f:d1:49:78:62:d3:bc:22:e3: 7b:b5:87:91:ce:41:7c:b1:37:5d:31:9c:5d:40:9d: 46:b0:31:05:22:f2:83:86:8f:c1:19:27:42:15:ed: cb:54:1f:4e:71:1a:81:37:6c:6f:51:60:bf:6b:30: f7:9a:25:10:40:47:08:2e:8e:06:22:c2:f2:0a:ec: e6:1e:00:5a:32:1a:9d:6e:26:65:aa:1e:a5:58:3f: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8E:E5:3C:FC:3A:DD:16:50:61:12:5E:6B:76:6C:B8:66:42:7C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5c:09:d9:f5:02:b2:50:0d:4c:75:0b:0b:64:4f:38:14:2e: 63:f5:51:09:1d:a2:9c:97:60:7a:4e:1b:0e:44:b1:19:1f:c8: fc:1c:1f:b0:ca:f3:4b:2e:01:fe:ee:bf:d0:80:06:3e:f5:a7: c7:36:d6:29:7e:2d:04:68:4b:a8:d2:5b:49:76:12:dc:e6:cc: 0e:96:27:51:dd:4a:58:a1:c2:4e:3e:1b:20:8c:f3:d5:94:a7: cf:8d:6e:96:c2:13:f1:62:05:33:06:4b:55:7b:b5:32:a0:0b: 6d:1c:54:17:f1:41:20:81:08:a9:d1:51:c0:d5:7f:35:76:dc: 18:57:32:39:0a:0a:96:f2:48:21:42:c3:97:41:b8:16:39:10: 9d:46:14:a1:98:4a:0a:5e:81:ee:c6:47:c1:e4:11:c6:fe:e4: 7c:e3:99:4b:93:82:a8:bd:fb:9d:60:0e:15:c7:55:f5:ad:a2: 04:8e:4a:0a:f0:97:1b:31:94:e7:6d:5e:36:0c:b5:39:f9:76: e0:ba:0c:0a:6b:d5:0c:11:a1:89:12:00:ab:ef:94:98:b1:c3: 20:ad:0e:65:dc:7c:d0:72:f7:33:6e:21:2b:c7:95:9e:f8:97: 03:cf:47:f4:6e:dd:78:37:d6:1f:1e:95:0e:4b:ac:fa:73:68: 63:20:72:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajrCiCWWgwys7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk OGZhMzYxYmItZjIxMi00ZjBlLTk5MmMtMWQwZWFlNzc1N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZRB96/QXelJMcmRC6m6kqYMljsSz5kYh3N9 v3KYeFMwb3gfURmiW4nTxHk8zxRNGedQk0uPLg7vLtyXfRtucr/MGaH0+d8IYT8b P+nqTRuz17eUP+YnAlgWF+8f+qJf8tNh1WUz4dUrtr/ofDTtK8rLcNF6YYizc8ZV L4KEu6xqQKQwMqINoWb8sm0QzXJhbVoJDwaxB4Wxy2BQ1oOfRjpSVPR71ON03pgf 0Ul4YtO8IuN7tYeRzkF8sTddMZxdQJ1GsDEFIvKDho/BGSdCFe3LVB9OcRqBN2xv UWC/azD3miUQQEcILo4GIsLyCuzmHgBaMhqdbiZlqh6lWD9pbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyO5Tz8Ot0WUGESXmt2bLhmQnxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdiMTQyOTAtMGIzYS0z YWYxLWEyMjgtNzA0M2U3MzdkM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVcCdn1ArJQDUx1CwtkTzgULmP1UQkdopyXYHpOGw5EsRkfyPwcH7DK 80suAf7uv9CABj71p8c21il+LQRoS6jSW0l2EtzmzA6WJ1HdSlihwk4+GyCM89WU p8+NbpbCE/FiBTMGS1V7tTKgC20cVBfxQSCBCKnRUcDVfzV23BhXMjkKCpbySCFC w5dBuBY5EJ1GFKGYSgpege7GR8HkEcb+5HzjmUuTgqi9+51gDhXHVfWtogSOSgrw lxsxlOdtXjYMtTn5duC6DApr1QwRoYkSAKvvlJixwyCtDmXcfNBy9zNuISvHlZ74 lwPPR/Ru3Xg31h8elQ5LrPpzaGMgcmg= -----END CERTIFICATE-----Generated at Mon Jul 13 10:39:18 2026 by rpki-client