$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa File: 889e1dc3-7376-38e7-8389-5e83a3a0926e.roa (raw, json) Hash identifier: T03ZtIowkxhRL+QdKDa1zpwawmbeFoNtbqIoICkkTVA= Subject key identifier: A3:80:B2:5D:F0:A3:2E:AA:0C:DF:7B:0B:38:69:AC:A1:CD:48:94:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0A77C088225D628F66B23EB0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 208.198.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:c0:88:22:5d:62:8f:66:b2:3e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=46300e9a-d50e-4364-81c8-96e8ca4cb4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:71:75:f1:ae:95:ae:21:02:7c:12:db:98: 6c:84:94:92:81:94:17:93:8a:e2:83:a0:ab:f1:e2: 9a:b0:7b:0a:69:54:21:ae:cc:5a:66:5c:22:76:a6: 6b:08:c0:f2:b5:34:79:2b:77:df:8d:2c:26:e2:72: 4b:2e:e1:a7:ec:ed:8d:7b:1a:78:de:6f:0d:e6:3c: d6:18:1a:08:a7:48:39:0e:f9:35:91:bd:9e:3f:e8: 3d:59:4c:e5:1a:91:c0:19:4d:32:43:0f:37:a1:79: d1:6b:cc:68:e1:68:f1:b6:14:33:4b:2f:77:46:ea: 4a:95:60:e2:a6:cf:2b:f5:fd:1f:37:73:86:7f:eb: 92:74:74:5c:be:0e:d5:5b:a9:25:b1:a6:81:21:00: f4:6c:f8:a1:bb:e2:26:29:0b:d3:77:f1:f8:76:de: 7a:13:63:26:6f:78:f5:1d:7e:35:8a:63:38:2a:7f: 58:bc:b1:63:dd:90:89:be:93:41:81:6a:29:90:62: 88:a6:4d:17:45:17:46:80:1d:fc:b7:96:9d:13:44: ad:b2:93:67:0a:18:4e:4c:03:a7:8c:c9:d4:ec:6d: 47:a7:ef:f7:f9:23:ed:35:cd:40:13:c7:b7:1d:fe: 68:a4:06:d4:16:f8:a2:e5:ee:ea:4a:e0:41:32:5a: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:80:B2:5D:F0:A3:2E:AA:0C:DF:7B:0B:38:69:AC:A1:CD:48:94:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.198.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1f:86:c0:6a:a0:e9:ca:77:4e:99:75:f0:2f:f6:93:e5:ce: df:0f:46:50:c2:df:d6:f6:da:ca:db:df:e2:ed:71:62:64:a9: 50:e2:a4:77:ac:d0:05:87:95:3d:cd:03:21:94:2d:8e:93:2f: 9f:d9:c0:04:60:30:5c:ea:ae:e0:ec:af:f2:b4:62:b3:10:3e: 7f:57:4c:b5:8e:4c:1d:a2:53:0d:4b:7d:2d:e1:0c:00:1e:81: 4f:89:f3:57:be:00:40:1b:d9:d6:46:37:67:09:0f:1f:24:96: db:68:14:80:9c:7f:45:c6:8d:08:94:14:6e:db:24:af:23:d8: 7e:57:6d:e0:06:cc:cc:de:a3:e7:80:de:b0:75:c4:50:52:ba: 4c:ca:4a:17:ef:d0:7e:35:da:da:9d:93:7b:4a:61:80:ba:bd: 91:bf:4e:ff:f1:11:0f:26:ff:56:7d:23:6f:8d:85:06:7f:c6: aa:42:cc:2b:5c:42:c9:b5:4c:cf:b6:97:c9:d3:7c:22:89:7b: 8b:9e:9b:97:fa:6e:73:9b:07:cb:80:90:5e:60:a9:54:57:7b: 93:60:9d:b6:9f:ee:7a:ec:c4:35:ca:49:f2:a6:f8:6f:ef:79: 73:57:0d:c6:01:16:be:8a:4a:fe:16:27:fe:88:01:0b:7d:70: bf:83:4c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd8CIIl1ij2ayPrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDYzMDBlOWEtZDUwZS00MzY0LTgxYzgtOTZlOGNhNGNiNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXpxdfGula4hAnwS25hshJSSgZQXk4rig6Cr 8eKasHsKaVQhrsxaZlwidqZrCMDytTR5K3ffjSwm4nJLLuGn7O2Nexp43m8N5jzW GBoIp0g5Dvk1kb2eP+g9WUzlGpHAGU0yQw83oXnRa8xo4WjxthQzSy93RupKlWDi ps8r9f0fN3OGf+uSdHRcvg7VW6klsaaBIQD0bPihu+ImKQvTd/H4dt56E2Mmb3j1 HX41imM4Kn9YvLFj3ZCJvpNBgWopkGKIpk0XRRdGgB38t5adE0StspNnChhOTAOn jMnU7G1Hp+/3+SPtNc1AE8e3Hf5opAbUFvii5e7qSuBBMlqu/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOAsl3woy6qDN97CzhprKHNSJRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg5ZTFkYzMtNzM3Ni0z OGU3LTgzODktNWU4M2EzYTA5MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIfhsBqoOnKd06ZdfAv9pPlzt8PRlDC39b22srb3+LtcWJkqVDipHes 0AWHlT3NAyGULY6TL5/ZwARgMFzqruDsr/K0YrMQPn9XTLWOTB2iUw1LfS3hDAAe gU+J81e+AEAb2dZGN2cJDx8klttoFICcf0XGjQiUFG7bJK8j2H5XbeAGzMzeo+eA 3rB1xFBSukzKShfv0H412tqdk3tKYYC6vZG/Tv/xEQ8m/1Z9I2+NhQZ/xqpCzCtc Qsm1TM+2l8nTfCKJe4uem5f6bnObB8uAkF5gqVRXe5Ngnbaf7nrsxDXKSfKm+G/v eXNXDcYBFr6KSv4WJ/6IAQt9cL+DTF0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:26 2026 by rpki-client