$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa File: d625d077-e359-3776-8ac5-1239a89451ce.roa (raw, json) Hash identifier: Tt0r+nrK53j1q6oo/+EGP6UhgDPbhDmM7yJSi9TLtoQ= Subject key identifier: 0D:36:4F:77:36:7D:2C:4E:54:FB:76:55:BB:F8:82:0C:C5:2E:EF:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2872C0DB6FC6571490BD980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:2c:0d:b6:fc:65:71:49:0b:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=aa617555-6988-465e-9d81-298b458513c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4d:2e:35:c9:11:c6:93:dc:cf:39:10:36:8e: f7:23:eb:65:36:15:d6:4d:88:78:7b:bf:28:55:ca: 85:2e:f4:f0:1a:dc:30:ac:a4:59:12:4d:e1:55:e3: 07:29:59:fb:7b:64:3a:86:46:75:90:4c:cf:2a:03: 89:33:e6:c7:6e:a3:05:4f:9a:cb:4c:e4:65:cb:9e: e2:7c:5a:38:1b:72:74:f9:f6:4a:3f:7c:a0:70:31: c3:57:96:33:b5:00:17:9a:05:c2:01:23:0a:25:e3: 89:24:4b:df:d6:8f:36:d0:76:79:db:84:90:1e:23: 61:94:60:67:48:de:9e:83:de:12:5b:9e:e5:e7:8a: ea:1d:82:e9:46:03:e6:96:33:21:41:82:d6:ab:5f: 25:d6:83:a7:45:97:67:df:1a:5d:17:f0:b1:5b:1a: be:b9:8d:76:5f:2c:6e:30:e3:ca:0f:bd:2b:c1:cf: 3a:8a:6c:7a:c3:75:f4:69:e1:2a:bd:7b:cb:62:c9: 8c:70:03:71:44:fa:74:b3:94:ac:50:9e:f4:e3:5b: 5e:c7:ca:ad:1f:36:0c:67:d8:dc:86:b8:46:38:84: e9:ed:96:8e:f2:10:f5:21:e5:8d:52:75:4d:ed:33: d6:02:ad:e3:01:c9:04:5e:f8:3e:bd:37:34:ef:90: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:36:4F:77:36:7D:2C:4E:54:FB:76:55:BB:F8:82:0C:C5:2E:EF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:48:f6:0c:3b:08:a3:c3:5e:f4:96:e3:a1:3e:36:8f:6d:0b: 2f:90:28:23:bf:4e:8a:37:91:2d:a3:c4:42:c4:5f:1c:fd:af: b2:c3:82:d4:64:56:46:40:8b:45:91:b9:92:bf:86:7a:c4:4a: a5:76:22:99:b4:20:cb:09:cf:5f:90:5c:09:53:ef:e4:50:f8: f0:cb:98:92:3d:fd:1b:7a:da:99:c8:14:f2:a7:72:64:91:5e: 2c:16:ba:7f:05:b3:24:77:78:d2:46:e8:93:78:ad:71:cb:90: b1:68:ac:b6:4e:a4:ec:39:50:f1:50:6b:4f:ca:86:07:d5:1a: 24:7d:67:57:8b:04:a6:a8:a8:20:0e:b4:86:9e:43:a4:d5:b6: d6:21:3f:a3:a6:09:0e:42:31:ca:52:db:ef:cd:82:7c:18:22: 27:00:98:3d:26:34:78:b8:95:35:32:14:f6:0b:ae:b7:e8:8d: 73:91:4b:92:82:c9:d7:c0:45:1d:5c:41:bd:bd:4c:06:3c:c6: e8:26:62:83:c9:a5:46:5b:96:46:df:19:ce:f3:1c:d3:60:5c: c4:a4:b5:03:f6:6a:2e:38:4b:7f:8a:39:2c:6f:bb:81:02:4a: 9e:6e:6b:de:b9:6f:be:31:ee:d2:c9:60:4d:6e:32:52:49:f3: 7a:b2:cf:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhywNtvxlcUkL2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk YWE2MTc1NTUtNjk4OC00NjVlLTlkODEtMjk4YjQ1ODUxM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9U0uNckRxpPczzkQNo73I+tlNhXWTYh4e78o VcqFLvTwGtwwrKRZEk3hVeMHKVn7e2Q6hkZ1kEzPKgOJM+bHbqMFT5rLTORly57i fFo4G3J0+fZKP3ygcDHDV5YztQAXmgXCASMKJeOJJEvf1o820HZ524SQHiNhlGBn SN6eg94SW57l54rqHYLpRgPmljMhQYLWq18l1oOnRZdn3xpdF/CxWxq+uY12Xyxu MOPKD70rwc86imx6w3X0aeEqvXvLYsmMcANxRPp0s5SsUJ7041tex8qtHzYMZ9jc hrhGOITp7ZaO8hD1IeWNUnVN7TPWAq3jAckEXvg+vTc075B4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA02T3c2fSxOVPt2Vbv4ggzFLu8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYyNWQwNzctZTM1OS0z Nzc2LThhYzUtMTIzOWE4OTQ1MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhI9gw7CKPDXvSW46E+No9tCy+QKCO/Too3kS2jxELEXxz9r7LDgtRk VkZAi0WRuZK/hnrESqV2Ipm0IMsJz1+QXAlT7+RQ+PDLmJI9/Rt62pnIFPKncmSR XiwWun8FsyR3eNJG6JN4rXHLkLForLZOpOw5UPFQa0/KhgfVGiR9Z1eLBKaoqCAO tIaeQ6TVttYhP6OmCQ5CMcpS2+/NgnwYIicAmD0mNHi4lTUyFPYLrrfojXORS5KC ydfARR1cQb29TAY8xugmYoPJpUZblkbfGc7zHNNgXMSktQP2ai44S3+KOSxvu4EC Sp5ua965b74x7tLJYE1uMlJJ83qyz1U= -----END CERTIFICATE-----Generated at Thu Feb 26 12:21:16 2026 by rpki-client