$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d146884a-5bf2-3be5-82f2-1e1b83feda82.roa File: d146884a-5bf2-3be5-82f2-1e1b83feda82.roa (raw, json) Hash identifier: 4gxWmSQrDLmEPDVTYlGLOK15A88TpzTzW27kwWvzM6A= Subject key identifier: 40:9A:EA:76:0F:F9:CF:70:18:05:47:2F:0C:04:8E:F0:63:B5:6C:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E428F31171E9E2FD9BE8B7A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d146884a-5bf2-3be5-82f2-1e1b83feda82.roa Signing time: Mon 22 Jun 2026 21:00:12 +0000 ROA not before: Mon 22 Jun 2026 21:00:12 +0000 ROA not after: Sun 20 Sep 2026 21:00:12 +0000 asID: 22394 IP address blocks: 198.223.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:8f:31:17:1e:9e:2f:d9:be:8b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 22 21:00:12 2026 GMT Not After : Sep 20 21:00:12 2026 GMT Subject: CN=f8298fe8-78d8-4e9b-a2a1-26fceb351208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:c6:67:72:29:7d:25:87:d6:fc:b0:5e:93: cc:c2:15:d2:fc:b8:46:0c:f6:b7:22:66:54:b3:35: d0:87:79:46:3f:2d:55:08:f5:87:3e:1d:2a:68:0a: dd:ba:09:d3:b7:0d:9d:b8:e9:8f:0b:f4:43:c8:34: f2:e8:de:c6:ce:8a:59:2c:dc:5c:c5:dd:72:71:18: 21:9a:20:b6:7f:cb:15:a0:1f:ba:04:dc:f6:fb:57: 1f:be:11:77:7f:8a:31:f3:39:d6:a0:ed:ee:f0:44: b6:17:02:f6:c0:e1:22:e9:c5:96:97:96:b0:32:28: bc:85:b4:0a:df:dc:61:ef:b4:1e:5b:bd:e9:ff:c1: f9:98:5d:fa:94:32:eb:8e:8a:c8:1d:4a:f0:77:9c: 61:8f:92:ca:9c:87:03:d2:8a:b4:6d:8b:d9:fa:32: c7:a7:78:15:cf:33:f3:bf:52:4c:08:99:dd:42:8e: d3:63:f0:e7:4d:5a:19:27:3f:c3:f1:60:af:93:03: 56:fa:1d:a8:cc:b0:86:3e:fa:95:42:35:77:4d:41: af:97:f0:57:d8:f9:5f:f6:1d:a9:5c:4e:12:1a:6d: ce:a9:f3:7c:4a:25:d0:a2:a2:69:d8:2e:18:11:d1: 73:90:b4:04:6e:9a:63:6b:f5:ed:16:76:6e:9b:46: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:EA:76:0F:F9:CF:70:18:05:47:2F:0C:04:8E:F0:63:B5:6C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d146884a-5bf2-3be5-82f2-1e1b83feda82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.223.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:aa:c4:3c:aa:7c:5d:01:4e:62:67:3b:30:a6:3c:4e:23:ce: 64:b3:e7:59:62:5d:b9:46:2a:4d:f1:8c:10:2f:3f:d7:54:b3: 1c:4b:6b:32:5f:d4:48:f9:1b:89:0e:ff:36:e4:36:54:20:44: c7:84:e0:ef:c7:47:fb:9b:fa:01:73:cc:fe:c5:da:3f:eb:5a: 7d:3f:68:84:77:60:32:72:b9:af:5c:fa:62:a6:93:26:12:5d: b0:f7:10:cb:aa:bf:c6:07:f8:be:74:33:f0:38:58:c0:68:c0: bc:7b:0c:d6:4c:40:62:69:2b:15:d0:01:c6:ca:9f:60:fd:ba: b9:3e:95:cd:8e:9f:13:e7:62:d6:f8:e7:c8:e9:e9:e7:dc:6f: 81:65:75:1f:f7:58:22:34:aa:3f:a8:a7:a4:35:01:bd:8e:ca: c0:23:bd:2e:5b:be:e8:5d:b3:72:d9:ff:fb:99:34:a1:5b:43: 0d:13:9c:42:e8:91:0b:f3:25:d8:bc:73:e0:b3:c2:82:b3:97: 9c:5f:d4:e2:de:72:21:8b:7d:31:9f:25:50:71:35:f1:73:8c: c8:ff:5c:bb:6e:f3:38:5b:a4:0f:41:ba:82:e0:d7:ae:9c:6c: b6:0f:81:81:d4:7c:fd:c1:04:75:92:a3:1c:c5:09:7e:47:3c: 81:e7:0d:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5CjzEXHp4v2b6LeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMjIxMDAxMloXDTI2MDkyMDIxMDAxMlowLzEtMCsGA1UEAxMk ZjgyOThmZTgtNzhkOC00ZTliLWEyYTEtMjZmY2ViMzUxMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE3GZ3IpfSWH1vywXpPMwhXS/LhGDPa3ImZU szXQh3lGPy1VCPWHPh0qaArdugnTtw2duOmPC/RDyDTy6N7GzopZLNxcxd1ycRgh miC2f8sVoB+6BNz2+1cfvhF3f4ox8znWoO3u8ES2FwL2wOEi6cWWl5awMii8hbQK 39xh77QeW73p/8H5mF36lDLrjorIHUrwd5xhj5LKnIcD0oq0bYvZ+jLHp3gVzzPz v1JMCJndQo7TY/DnTVoZJz/D8WCvkwNW+h2ozLCGPvqVQjV3TUGvl/BX2Plf9h2p XE4SGm3OqfN8SiXQoqJp2C4YEdFzkLQEbppja/XtFnZum0YsJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFECa6nYP+c9wGAVHLwwEjvBjtWwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE0Njg4NGEtNWJmMi0z YmU1LTgyZjItMWUxYjgzZmVkYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxt8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA6rEPKp8XQFOYmc7MKY8TiPOZLPnWWJduUYqTfGMEC8/11SzHEtrMl/U SPkbiQ7/NuQ2VCBEx4Tg78dH+5v6AXPM/sXaP+tafT9ohHdgMnK5r1z6YqaTJhJd sPcQy6q/xgf4vnQz8DhYwGjAvHsM1kxAYmkrFdABxsqfYP26uT6VzY6fE+di1vjn yOnp59xvgWV1H/dYIjSqP6inpDUBvY7KwCO9Llu+6F2zctn/+5k0oVtDDROcQuiR C/Ml2Lxz4LPCgrOXnF/U4t5yIYt9MZ8lUHE18XOMyP9cu27zOFukD0G6guDXrpxs tg+BgdR8/cEEdZKjHMUJfkc8gecNig== -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:46 2026 by rpki-client