$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa File: 4bf20ecc-8502-3c28-88ab-5115085485ba.roa (raw, json) Hash identifier: ZkJlzRXoOEiHAcmfpGyi0H/xo0Xko2Cd52t0oNZ7VRc= Subject key identifier: 82:B4:80:78:91:78:94:96:CB:4F:B3:78:EC:74:60:B2:0A:49:90:44 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D386A3DE7C31A0AB53B5B7840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3855 IP address blocks: 199.172.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3d:e7:c3:1a:0a:b5:3b:5b:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=e13d9307-e76b-4087-bbcd-0f3934dcdd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:ea:62:74:0b:ca:b7:db:34:b4:3f:76:7a: 78:86:3f:64:23:a8:ce:b6:71:c4:60:e5:cd:72:34: 78:d2:2c:f1:00:79:fd:22:df:50:c6:02:3f:91:fb: c1:64:7d:06:a7:48:9c:32:20:85:fe:05:34:f9:95: 55:99:7d:8e:0e:77:a0:5f:53:28:ce:eb:45:9d:08: 29:95:4c:63:76:dd:15:6b:0a:0a:b1:9f:de:b0:c3: d8:aa:44:74:87:ed:58:d0:7a:b1:09:23:6e:46:18: c6:07:75:ba:f1:9a:27:51:cc:2f:e1:0d:fd:7c:23: 8b:bc:2f:74:ec:9e:79:c4:37:87:a5:4e:dd:49:81: d8:f7:c2:3a:08:2d:44:5a:7b:59:8c:ea:45:70:32: 16:a5:9a:95:cf:9e:96:9d:8c:7f:68:d6:6d:ff:cc: 0e:77:d5:b2:53:06:73:ed:a1:e9:e1:22:67:15:8c: 60:98:c7:d4:d3:fe:7b:e6:58:c8:cd:c5:6e:2b:e6: 23:3c:c0:f8:1d:85:e0:ba:b1:f1:e0:65:5d:5a:35: 0f:12:e2:7f:29:25:46:f7:9f:47:9f:d4:27:ff:95: 29:39:be:25:47:a4:83:af:e9:32:da:45:ca:6c:aa: 73:c0:1e:19:ba:e6:93:84:0b:90:da:0a:33:07:fa: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:80:78:91:78:94:96:CB:4F:B3:78:EC:74:60:B2:0A:49:90:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:85:13:f2:1b:0e:79:85:85:ec:fa:75:ad:a5:6b:e5:58:a1: 62:00:65:e7:4c:48:b6:33:e5:4b:73:1e:65:8e:3b:cb:9f:35: d6:a5:99:a2:d3:7d:e2:44:f6:36:16:41:17:00:75:b3:14:e8: 81:e7:30:29:8e:45:68:62:96:54:1b:f4:a8:ac:ca:28:89:74: e3:c6:21:72:05:52:9c:6c:4b:9a:67:e3:fc:d2:84:8b:a0:13: 33:c8:52:2f:48:e7:21:61:a5:66:c8:61:a1:9f:28:bc:6d:2c: 9d:b8:d9:26:ff:b0:ec:fa:67:c2:b6:9c:f7:32:a2:f3:a5:33: 6e:f4:28:d9:d9:26:57:c8:c2:de:98:65:95:78:71:8d:24:40: 46:11:f4:d8:27:7c:70:f0:f1:a0:cd:d0:7c:f5:a4:c3:ed:f6: fa:f1:9c:05:76:4d:7c:3a:88:2c:b1:29:e3:bf:bc:8b:f8:92: 5f:77:fb:28:ea:25:2c:60:58:3d:f4:41:d1:9d:a9:ca:0a:02: 3f:5f:3d:f6:2f:38:62:71:58:f1:a5:e2:7d:6d:64:f6:dc:9d: f3:6c:46:d2:43:65:2f:5d:c4:fe:cc:02:50:e0:1e:67:3c:95: b4:32:d4:46:cc:09:80:64:cd:76:bb:17:cb:6e:3b:90:9e:6c: 05:51:30:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04aj3nwxoKtTtbeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZTEzZDkzMDctZTc2Yi00MDg3LWJiY2QtMGYzOTM0ZGNkZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGTqYnQLyrfbNLQ/dnp4hj9kI6jOtnHEYOXN cjR40izxAHn9It9QxgI/kfvBZH0Gp0icMiCF/gU0+ZVVmX2ODnegX1MozutFnQgp lUxjdt0VawoKsZ/esMPYqkR0h+1Y0HqxCSNuRhjGB3W68ZonUcwv4Q39fCOLvC90 7J55xDeHpU7dSYHY98I6CC1EWntZjOpFcDIWpZqVz56WnYx/aNZt/8wOd9WyUwZz 7aHp4SJnFYxgmMfU0/575ljIzcVuK+YjPMD4HYXgurHx4GVdWjUPEuJ/KSVG959H n9Qn/5UpOb4lR6SDr+ky2kXKbKpzwB4ZuuaThAuQ2gozB/oi2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK0gHiReJSWy0+zeOx0YLIKSZBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJmMjBlY2MtODUwMi0z YzI4LTg4YWItNTExNTA4NTQ4NWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmFE/IbDnmFhez6da2la+VYoWIAZedMSLYz5UtzHmWOO8ufNdalmaLT feJE9jYWQRcAdbMU6IHnMCmORWhillQb9KisyiiJdOPGIXIFUpxsS5pn4/zShIug EzPIUi9I5yFhpWbIYaGfKLxtLJ242Sb/sOz6Z8K2nPcyovOlM270KNnZJlfIwt6Y ZZV4cY0kQEYR9NgnfHDw8aDN0Hz1pMPt9vrxnAV2TXw6iCyxKeO/vIv4kl93+yjq JSxgWD30QdGdqcoKAj9fPfYvOGJxWPGl4n1tZPbcnfNsRtJDZS9dxP7MAlDgHmc8 lbQy1EbMCYBkzXa7F8tuO5CebAVRMPY= -----END CERTIFICATE-----Generated at Thu Mar 26 03:56:32 2026 by rpki-client