$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa File: db594c0b-1972-3064-abcb-2c71cbf21550.roa (raw, json) Hash identifier: HIvcfBZMTwdsv/n0XVXzuF4x7S7d0WYUSMNzbtbS4QA= Subject key identifier: 0A:2F:BE:CD:67:80:B5:F3:2D:B7:00:78:2A:83:0A:A4:A0:69:3D:77 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E736A3A55992138134C3AC980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 3855 IP address blocks: 199.172.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:3a:55:99:21:38:13:4c:3a:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=38f924d0-c299-496e-9950-b73fa3ba3a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8e:8f:cf:9c:ac:ac:0b:3b:8b:0c:03:8e:1f: 09:30:fb:0d:2a:cc:38:c7:bc:47:42:54:48:00:49: 30:0d:21:d1:46:16:23:a6:c5:8f:4f:7e:c6:48:1a: 1e:29:86:10:09:8b:22:b6:2e:c0:01:47:55:7e:d8: 9a:40:0b:8f:ac:af:6e:bb:89:7e:0a:ea:64:fb:2e: b9:dc:aa:18:06:42:7b:6b:a4:ce:0f:23:fa:84:9c: cb:49:e8:17:82:fb:2d:ae:6d:1a:3c:32:c7:a0:56: c1:4f:78:07:50:ee:f5:ee:52:c2:57:2f:35:80:79: 7d:4f:13:09:1f:9a:6d:f2:99:0e:d4:12:73:1e:11: 6f:24:be:81:89:0f:cf:80:38:11:dc:75:f7:cc:fd: b9:2a:f2:8d:23:7e:97:d2:79:6e:49:e7:19:74:f7: 85:fb:68:d3:db:ea:1e:ad:8b:38:df:23:dd:b7:d8: 73:28:b0:e5:29:27:9e:f3:0b:b4:bc:89:33:a8:ae: 76:4f:bf:32:64:29:5e:b4:79:5a:08:d8:d5:ce:dc: ef:e8:47:af:dc:82:0c:67:ef:a5:c2:16:1f:1f:6d: 71:39:f7:c7:1c:38:03:49:a2:ac:55:45:37:5f:50: 64:fa:87:32:59:59:9b:74:39:66:15:ec:bf:b2:f3: ac:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:BE:CD:67:80:B5:F3:2D:B7:00:78:2A:83:0A:A4:A0:69:3D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ab:d4:f1:ea:59:e8:af:e9:2b:16:57:b2:f4:87:5d:4e:a8: 66:e3:d8:a8:3a:b9:a9:9b:c9:a4:7b:2a:9e:ff:5f:89:43:c9: 64:6e:1f:1b:88:0b:fb:bb:f4:be:09:a4:58:b0:33:c6:e6:a4: 2c:6e:bc:07:ca:b0:6d:3e:8e:be:3e:f0:c6:26:f7:28:f3:c4: 68:fd:08:2f:b0:48:5c:5d:e2:b0:37:a1:0c:15:d4:42:77:6c: 95:6e:1d:51:45:b8:1c:9b:b2:75:a2:1c:73:6b:3e:a1:c6:22: 21:8e:38:25:38:b2:2e:4e:60:05:7f:16:6b:5f:d3:ca:28:88: 97:32:75:2e:64:c6:67:fe:e9:4d:e0:93:29:34:6c:b1:f4:7b: c1:ec:31:9e:e4:fb:1c:9a:ee:62:d4:32:0c:0e:be:63:8b:65: ee:c4:91:42:57:5f:b5:b4:2c:0b:6f:1b:49:b1:1d:51:9a:38: f9:43:4d:52:ed:50:d9:5f:dc:c9:75:eb:f9:7f:84:8f:9f:b6: 39:25:40:07:22:02:41:76:34:7b:d1:a1:8e:8a:62:48:44:88: 26:81:a0:ab:7a:6e:0b:e4:72:35:d3:b4:3f:23:5c:aa:66:0f: 39:65:50:fc:f1:84:f2:da:ec:a6:ff:fc:2e:49:0b:5f:cb:6b: 7d:87:a5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajpVmSE4E0w6yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MzhmOTI0ZDAtYzI5OS00OTZlLTk5NTAtYjczZmEzYmEzYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI6Pz5ysrAs7iwwDjh8JMPsNKsw4x7xHQlRI AEkwDSHRRhYjpsWPT37GSBoeKYYQCYsiti7AAUdVftiaQAuPrK9uu4l+Cupk+y65 3KoYBkJ7a6TODyP6hJzLSegXgvstrm0aPDLHoFbBT3gHUO717lLCVy81gHl9TxMJ H5pt8pkO1BJzHhFvJL6BiQ/PgDgR3HX3zP25KvKNI36X0nluSecZdPeF+2jT2+oe rYs43yPdt9hzKLDlKSee8wu0vIkzqK52T78yZCletHlaCNjVztzv6Eev3IIMZ++l whYfH21xOffHHDgDSaKsVUU3X1Bk+ocyWVmbdDlmFey/svOsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAovvs1ngLXzLbcAeCqDCqSgaT13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1OTRjMGItMTk3Mi0z MDY0LWFiY2ItMmM3MWNiZjIxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmr1PHqWeiv6SsWV7L0h11OqGbj2Kg6uambyaR7Kp7/X4lDyWRuHxuI C/u79L4JpFiwM8bmpCxuvAfKsG0+jr4+8MYm9yjzxGj9CC+wSFxd4rA3oQwV1EJ3 bJVuHVFFuBybsnWiHHNrPqHGIiGOOCU4si5OYAV/Fmtf08ooiJcydS5kxmf+6U3g kyk0bLH0e8HsMZ7k+xya7mLUMgwOvmOLZe7EkUJXX7W0LAtvG0mxHVGaOPlDTVLt UNlf3Ml16/l/hI+ftjklQAciAkF2NHvRoY6KYkhEiCaBoKt6bgvkcjXTtD8jXKpm DzllUPzxhPLa7Kb//C5JC1/La32HpR8= -----END CERTIFICATE-----Generated at Mon Jul 13 12:55:23 2026 by rpki-client