$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ad44bf-c242-3da1-959a-62021461de6f.roa File: 35ad44bf-c242-3da1-959a-62021461de6f.roa (raw, json) Hash identifier: ZhrpWqOkaWro+BHwf6HFkvmnN9jQpN9EguDkb366HMc= Subject key identifier: 97:3D:36:C5:00:1D:B5:F7:32:4A:FA:4D:F0:61:E9:13:2E:71:EF:DD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0A77A01B80FA39546B66EB40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ad44bf-c242-3da1-959a-62021461de6f.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 208.192.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a0:1b:80:fa:39:54:6b:66:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f7b34dca-1446-4e5c-8bb3-1f9171612695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:e4:5c:70:90:0e:29:c7:67:d4:44:b6:e3: 36:76:7d:f6:57:ef:d4:68:de:2b:2a:58:88:19:00: 9f:f8:81:e4:10:5f:02:d4:e7:0a:dd:4a:b4:62:92: 5e:a7:d7:fd:9a:50:af:f0:b5:8f:3a:59:f7:f0:53: 03:18:f5:ed:eb:d2:59:08:5a:d3:a4:1c:fb:ba:ef: ae:aa:9b:ca:1a:e8:e9:62:81:9b:2a:99:b4:cc:48: d2:b2:0a:43:93:5c:3f:8b:1c:7f:40:21:ab:f8:7f: 7a:d9:a4:ae:4d:9d:bc:9e:eb:9f:87:63:77:6a:3f: 66:44:9e:07:85:28:40:f2:fe:4f:da:9c:2c:71:4c: 4f:eb:6b:3e:08:e2:a7:be:dd:fa:56:f9:8a:f4:ed: 89:a4:74:3c:f9:c3:dc:a8:3f:c8:8c:f6:62:33:3a: b5:48:0b:b1:87:cd:ee:89:c7:77:de:7d:4f:9b:63: bd:86:3a:eb:28:34:43:b7:9c:13:71:eb:7e:a3:f7: 5f:e4:63:b4:31:66:4d:44:f8:75:3c:b2:46:a0:5c: e7:0e:56:2f:aa:9f:38:4b:19:c5:c9:69:8a:cf:bd: 1f:6b:27:75:32:db:a8:be:b8:e0:a3:dd:fc:24:2d: a5:19:28:af:05:9a:c7:9a:94:7a:a5:d4:a6:12:64: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3D:36:C5:00:1D:B5:F7:32:4A:FA:4D:F0:61:E9:13:2E:71:EF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35ad44bf-c242-3da1-959a-62021461de6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.192.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ce:ec:a0:4d:4d:a3:a9:df:b8:58:64:2d:d2:d8:19:48:7c: 16:52:8b:6c:d4:6b:bb:d8:3c:19:d6:a9:94:97:ab:77:93:fb: 11:35:de:90:c1:6e:8b:99:db:39:0f:d6:5d:2d:2e:f2:42:ac: b2:e7:81:a5:24:da:05:3c:17:41:3d:85:46:e4:44:00:6b:fc: ee:84:01:2b:81:be:93:d6:37:64:d4:08:34:e4:1d:bf:d4:89: 71:f7:17:ad:2d:99:7c:f1:95:e1:73:be:e4:47:d1:26:d2:0f: 07:f7:81:3e:f5:de:c7:57:69:11:ce:3d:d2:97:da:eb:db:de: f5:1a:16:38:bb:5c:55:5f:ac:17:f4:6b:14:fa:2d:95:b1:03: c1:08:72:e9:89:9c:2c:1d:50:d2:0b:86:2b:0c:f6:3e:e7:ce: 2d:24:9f:46:50:31:a0:96:07:dc:77:8a:f0:05:0f:05:b5:63: 2e:2c:24:ed:ed:5d:50:4b:f5:dd:20:82:cd:45:7e:ce:97:f2: 40:97:36:d7:ef:ab:15:32:79:97:92:8c:29:f5:23:78:c3:62: 38:65:fc:65:39:97:fe:63:dc:e5:f9:d1:7f:67:27:3c:9c:30: c8:8b:2a:3f:d4:39:38:58:5f:d2:fe:90:5e:d0:88:27:fb:f3: 9d:84:f7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6AbgPo5VGtm60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjdiMzRkY2EtMTQ0Ni00ZTVjLThiYjMtMWY5MTcxNjEyNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpzkXHCQDinHZ9REtuM2dn32V+/UaN4rKliI GQCf+IHkEF8C1OcK3Uq0YpJep9f9mlCv8LWPOln38FMDGPXt69JZCFrTpBz7uu+u qpvKGujpYoGbKpm0zEjSsgpDk1w/ixx/QCGr+H962aSuTZ28nuufh2N3aj9mRJ4H hShA8v5P2pwscUxP62s+COKnvt36VvmK9O2JpHQ8+cPcqD/IjPZiMzq1SAuxh83u icd33n1Pm2O9hjrrKDRDt5wTcet+o/df5GO0MWZNRPh1PLJGoFznDlYvqp84SxnF yWmKz70fayd1Mtuovrjgo938JC2lGSivBZrHmpR6pdSmEmTL8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc9NsUAHbX3Mkr6TfBh6RMuce/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVhZDQ0YmYtYzI0Mi0z ZGExLTk1OWEtNjIwMjE0NjFkZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/O7KBNTaOp37hYZC3S2BlIfBZSi2zUa7vYPBnWqZSXq3eT+xE13pDB bouZ2zkP1l0tLvJCrLLngaUk2gU8F0E9hUbkRABr/O6EASuBvpPWN2TUCDTkHb/U iXH3F60tmXzxleFzvuRH0SbSDwf3gT713sdXaRHOPdKX2uvb3vUaFji7XFVfrBf0 axT6LZWxA8EIcumJnCwdUNILhisM9j7nzi0kn0ZQMaCWB9x3ivAFDwW1Yy4sJO3t XVBL9d0ggs1Ffs6X8kCXNtfvqxUyeZeSjCn1I3jDYjhl/GU5l/5j3OX50X9nJzyc MMiLKj/UOThYX9L+kF7QiCf7852E9xA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:15 2026 by rpki-client