$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa File: 6d8378a6-7850-3b7d-8e57-654352e2ba53.roa (raw, json) Hash identifier: 4srEzn4QNnaWYr9XbEFkn/qYaa/YmoFRpv19l+sWAPQ= Subject key identifier: 86:D4:21:43:28:2A:0E:29:4A:D7:6E:4D:AC:C0:CE:CF:43:6E:D7:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9325498F60CBDB56888CFA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 3855 IP address blocks: 199.172.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:49:8f:60:cb:db:56:88:8c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=7589ed9b-8c64-4a6b-8a9a-89ef88480bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:26:ac:eb:37:f0:7c:d0:49:41:b6:d8:6f: ff:9b:24:19:cc:60:51:95:31:20:0a:2c:8b:14:93: b2:f1:62:a2:0a:f1:96:07:d1:af:dd:d1:33:ac:c6: 99:26:af:30:24:8e:96:20:35:97:d2:ad:a9:8e:43: 3c:41:11:28:42:60:7b:b3:40:2e:30:94:8b:18:c5: ed:03:3f:d3:88:1e:dc:ae:95:1a:ea:14:cc:07:04: 67:67:af:30:fb:d0:d5:ff:0f:f9:09:82:7e:e9:26: 94:67:42:15:04:3f:e2:6b:83:0f:07:68:9a:3f:44: 13:ab:05:ea:bd:6a:99:8c:23:c0:9d:8b:22:71:b4: 09:6a:45:44:15:db:a7:48:66:2d:6e:8e:0e:e9:ce: 85:0e:69:e6:77:e6:37:67:8d:6a:46:c1:3c:68:9f: 73:38:a2:49:6f:53:e3:40:b1:15:ec:53:8d:92:eb: d1:00:6b:94:3d:7f:46:d4:4f:33:9a:fd:e2:91:94: 30:5d:5d:ba:d9:dc:9c:1b:cf:37:f6:52:18:18:89: a6:ab:90:7e:9f:85:15:69:12:28:e7:a5:65:fb:4f: cd:cc:dc:34:f6:8e:bc:04:e8:8f:3a:12:3a:ee:d3: 22:82:2f:f3:8b:a6:61:d0:e8:f8:f1:84:19:18:2d: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:21:43:28:2A:0E:29:4A:D7:6E:4D:AC:C0:CE:CF:43:6E:D7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:65:73:6d:ed:bb:91:c0:d6:7c:4a:30:92:89:19:b6:28:3c: 1e:a4:0b:2b:e5:39:72:5b:da:f5:0e:11:10:11:96:ed:c4:f7: b4:fd:36:2c:13:9e:25:75:4b:7c:b5:10:2f:cb:60:ef:ca:83: 3e:e4:0a:9b:04:11:b0:3f:39:59:1e:e2:5a:2a:00:d7:e3:3d: 4f:f4:9e:3f:c4:39:8e:d0:92:f6:38:da:ad:0e:fc:fd:11:66: f2:48:f2:b9:5b:42:99:c3:ea:56:86:17:10:88:31:21:a1:65: fa:d3:23:30:a0:b4:7d:61:37:ad:ee:c6:4c:67:2e:a5:4e:3e: e0:a8:fc:ac:09:07:3c:5b:24:8e:80:22:60:c1:cd:f4:8f:7f: 07:90:08:b5:f7:7d:85:4a:30:08:0e:56:b1:79:88:fb:f6:73: 13:96:ef:0a:52:2e:b2:a3:f3:00:66:b3:78:c7:e4:57:b5:42: 4f:9d:19:c7:85:66:60:06:a4:9a:07:fd:6a:77:f8:e3:b2:d0: c2:5e:e8:2d:5e:d1:b7:73:58:2a:3a:f8:db:ff:8b:bf:6a:be: 86:65:a3:c2:3a:b6:10:42:80:31:fa:d8:24:90:7f:3a:18:20: 98:7a:fa:84:a5:ce:a0:a9:57:09:c3:13:4e:2c:ae:9f:c9:b0: 72:ad:3e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJUmPYMvbVoiM+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzU4OWVkOWItOGM2NC00YTZiLThhOWEtODllZjg4NDgwYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx8mrOs38HzQSUG22G//myQZzGBRlTEgCiyL FJOy8WKiCvGWB9Gv3dEzrMaZJq8wJI6WIDWX0q2pjkM8QREoQmB7s0AuMJSLGMXt Az/TiB7crpUa6hTMBwRnZ68w+9DV/w/5CYJ+6SaUZ0IVBD/ia4MPB2iaP0QTqwXq vWqZjCPAnYsicbQJakVEFdunSGYtbo4O6c6FDmnmd+Y3Z41qRsE8aJ9zOKJJb1Pj QLEV7FONkuvRAGuUPX9G1E8zmv3ikZQwXV262dycG8839lIYGImmq5B+n4UVaRIo 56Vl+0/NzNw09o68BOiPOhI67tMigi/zi6Zh0Oj48YQZGC0JBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbUIUMoKg4pStduTazAzs9DbtdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmQ4Mzc4YTYtNzg1MC0z YjdkLThlNTctNjU0MzUyZTJiYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhlc23tu5HA1nxKMJKJGbYoPB6kCyvlOXJb2vUOERARlu3E97T9NiwT niV1S3y1EC/LYO/Kgz7kCpsEEbA/OVke4loqANfjPU/0nj/EOY7QkvY42q0O/P0R ZvJI8rlbQpnD6laGFxCIMSGhZfrTIzCgtH1hN63uxkxnLqVOPuCo/KwJBzxbJI6A ImDBzfSPfweQCLX3fYVKMAgOVrF5iPv2cxOW7wpSLrKj8wBms3jH5Fe1Qk+dGceF ZmAGpJoH/Wp3+OOy0MJe6C1e0bdzWCo6+Nv/i79qvoZlo8I6thBCgDH62CSQfzoY IJh6+oSlzqCpVwnDE04srp/JsHKtPks= -----END CERTIFICATE-----Generated at Wed May 13 13:23:29 2026 by rpki-client