$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa File: db594c0b-1972-3064-abcb-2c71cbf21550.roa (raw, json) Hash identifier: p7YRPHT/Y8LcDHqJGHe/IY0a/hQzowINhICIki95Ufs= Subject key identifier: 07:07:BF:F0:82:70:9A:81:CF:98:84:CC:44:5E:56:40:E7:CB:40:50 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584CB2874E7CD5B5040029D6ED80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 3855 IP address blocks: 199.172.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:4e:7c:d5:b5:04:00:29:d6:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=ea5c8270-5120-4b81-a386-72b441db0cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:8f:9f:85:87:19:30:4d:cb:eb:f4:0b:56: 3c:10:4b:04:30:91:db:a5:06:f1:fc:29:bb:72:ab: d9:11:10:4a:61:69:60:89:cb:5b:b9:6d:8a:af:e2: 80:2a:33:5e:43:54:60:e3:6f:26:c2:d5:40:69:62: 1f:9b:e7:4a:f3:0c:bb:da:8d:25:53:17:7b:38:aa: 02:92:79:d5:01:2f:01:e0:fa:6e:19:66:28:93:97: a7:49:df:18:ae:1b:90:e0:db:75:14:08:a1:28:8e: 46:18:8c:08:66:9c:1f:b6:36:a0:17:39:68:82:7d: d2:17:82:fd:fe:10:dd:87:46:cc:ae:1e:0c:6b:fe: b2:ae:bf:34:bc:51:38:9d:00:00:8a:2a:01:06:a8: ee:1f:f9:b8:f3:af:98:3d:da:bd:f9:02:78:40:dd: 07:8e:57:b8:da:e8:9a:b5:f5:ea:24:4e:ba:c4:81: 66:4d:b6:51:8a:b2:6b:f8:61:d0:30:7e:bb:fe:2f: 37:24:b1:d7:e1:de:03:66:c2:24:e1:4b:fb:77:6e: e9:62:e2:e8:0a:a5:e6:56:a3:83:07:2e:15:c4:cb: 4b:8a:56:b9:bb:9c:b2:21:8a:f7:d9:1b:8e:bb:09: 17:0d:49:bb:a1:e9:3d:41:19:d3:8e:4c:6d:d0:cd: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:07:BF:F0:82:70:9A:81:CF:98:84:CC:44:5E:56:40:E7:CB:40:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e4:67:80:2f:9d:58:20:cb:63:1f:2b:0a:99:fb:70:52:3f: 4d:d8:ad:7d:fb:03:34:82:db:dd:82:dc:3d:2f:3c:46:95:2d: eb:db:5d:9a:72:81:57:a7:49:11:37:a8:d8:7a:2a:3e:cd:5d: 66:e1:2e:64:e9:54:4b:98:7e:1c:53:1d:5a:de:97:ff:7f:ca: ba:fa:e0:51:b1:01:91:cd:a2:f2:c9:24:e2:47:c6:ca:7d:bb: f5:df:8f:98:25:b9:b7:ed:fc:a5:4b:bb:79:bf:b2:cb:bd:79: cc:39:63:3b:40:e8:2b:86:f2:e2:6f:4f:8b:fa:cd:b8:bc:2b: f9:fd:d7:c6:bb:0d:8c:e6:a7:ef:fe:3c:0d:8d:20:bd:50:ef: b9:80:bf:94:b4:00:7c:5d:f1:1a:83:b9:3d:f3:5f:1b:b7:69: f0:94:8d:9b:b7:2b:60:86:93:b2:9c:39:65:87:c7:55:fa:cc: 68:0d:29:91:61:28:6a:c3:68:26:2e:d1:68:1a:e4:77:3a:58: a0:48:6b:11:0e:17:36:b8:ee:7b:4d:9f:e1:64:5a:21:79:76: 96:70:fa:a3:d5:b4:00:e6:ac:41:d7:35:33:4d:d6:84:11:f6: 15:ac:48:ef:86:a4:6e:2d:bc:1b:12:d3:16:a0:88:fa:2e:3e: d9:28:4c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyh0581bUEACnW7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWE1YzgyNzAtNTEyMC00YjgxLWEzODYtNzJiNDQxZGIwY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4+Pn4WHGTBNy+v0C1Y8EEsEMJHbpQbx/Cm7 cqvZERBKYWlgictbuW2Kr+KAKjNeQ1Rg428mwtVAaWIfm+dK8wy72o0lUxd7OKoC knnVAS8B4PpuGWYok5enSd8YrhuQ4Nt1FAihKI5GGIwIZpwftjagFzlogn3SF4L9 /hDdh0bMrh4Ma/6yrr80vFE4nQAAiioBBqjuH/m486+YPdq9+QJ4QN0Hjle42uia tfXqJE66xIFmTbZRirJr+GHQMH67/i83JLHX4d4DZsIk4Uv7d27pYuLoCqXmVqOD By4VxMtLila5u5yyIYr32RuOuwkXDUm7oek9QRnTjkxt0M3L3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcHv/CCcJqBz5iEzEReVkDny0BQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1OTRjMGItMTk3Mi0z MDY0LWFiY2ItMmM3MWNiZjIxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPkZ4AvnVggy2MfKwqZ+3BSP03YrX37AzSC292C3D0vPEaVLevbXZpy gVenSRE3qNh6Kj7NXWbhLmTpVEuYfhxTHVrel/9/yrr64FGxAZHNovLJJOJHxsp9 u/Xfj5glubft/KVLu3m/ssu9ecw5YztA6CuG8uJvT4v6zbi8K/n918a7DYzmp+/+ PA2NIL1Q77mAv5S0AHxd8RqDuT3zXxu3afCUjZu3K2CGk7KcOWWHx1X6zGgNKZFh KGrDaCYu0Wga5Hc6WKBIaxEOFza47ntNn+FkWiF5dpZw+qPVtADmrEHXNTNN1oQR 9hWsSO+GpG4tvBsS0xagiPouPtkoTNY= -----END CERTIFICATE-----Generated at Thu Feb 26 12:21:57 2026 by rpki-client