$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa File: c7b14290-0b3a-3af1-a228-7043e737d3ae.roa (raw, json) Hash identifier: 6cbCR3X5mdrjX0wXmCm/AXdLbXUM7hBBjAuEzT676c0= Subject key identifier: 22:9B:05:EC:A5:42:B7:2F:8B:46:34:7B:5B:8C:97:5A:F0:97:6D:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D93256329F1AFEEC975EBBD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 3855 IP address blocks: 199.172.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:63:29:f1:af:ee:c9:75:eb:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=4a381341-dd44-4747-9e06-8ab870203498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:ad:6c:d2:ab:69:54:ee:6d:9d:c2:3b:ce: 97:2c:e5:9e:36:54:89:87:f8:02:8e:fa:80:63:da: 00:42:2c:94:fa:9d:12:e7:98:24:41:5c:66:42:44: 1f:a8:a8:51:96:90:2c:4e:9e:a0:aa:b3:cb:81:2b: 12:df:8e:d2:f5:c0:f1:ad:49:b1:f1:6d:64:ce:50: 1f:57:ee:2e:2c:8f:47:de:9f:35:c0:07:94:f1:3d: 36:65:f5:98:5f:2c:7a:ae:3d:46:74:d7:f1:2a:c6: 53:16:f5:d3:29:90:37:f4:30:31:f4:40:b0:c9:39: c1:82:bd:5e:dc:f6:d8:f0:ea:7a:42:ed:40:20:8c: 34:3f:36:ea:e2:31:31:ce:0b:8b:0c:bf:db:0a:83: 4d:5b:21:42:f1:b3:f8:a4:ce:b1:6c:07:89:4b:67: 79:26:89:bd:50:a0:fe:35:02:14:9b:3e:55:4b:06: 9b:18:d3:9e:3c:9b:03:c6:e5:00:30:23:64:e2:81: d3:92:b4:ec:5c:e7:ec:46:0c:b7:07:62:38:df:d7: 36:d1:d4:65:dd:13:32:38:7a:61:44:1f:6c:dc:57: ed:77:4b:8c:70:3f:61:72:d5:f0:fe:d1:b9:d8:cf: 6e:f6:82:bd:00:ef:6d:1e:12:58:6d:41:b5:1c:18: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9B:05:EC:A5:42:B7:2F:8B:46:34:7B:5B:8C:97:5A:F0:97:6D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7b14290-0b3a-3af1-a228-7043e737d3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:84:37:97:87:1e:60:aa:9c:80:78:69:4c:79:9b:c4:aa:7a: ce:6c:43:b0:b9:32:9f:aa:f1:df:fe:46:de:b7:97:05:34:84: 1f:21:d4:fe:73:c4:b8:6e:01:c3:65:c1:3e:ef:87:31:97:6c: 8d:fc:bf:6c:86:7d:f9:7d:6c:b9:90:fe:64:74:98:34:85:bb: c7:90:2b:35:b3:a7:87:8a:79:8b:14:5f:fa:55:09:ef:a3:da: 61:41:1a:c0:60:60:ed:2d:5f:53:75:62:c7:b1:5b:4c:d9:d5: 89:3f:ce:06:89:79:8b:21:ec:4b:36:7c:d2:13:11:ec:d9:44: 54:15:b9:43:15:db:c1:06:3d:50:19:30:dd:1a:59:49:52:d5: e8:35:42:b4:1b:b8:ab:0c:29:53:87:3d:ac:10:bc:e2:d2:1f: 9d:66:82:17:6b:1f:58:19:a4:03:08:a1:60:f3:ff:e6:2b:5a: b3:16:90:34:79:74:83:05:32:10:5f:1b:b0:07:7c:16:13:f7: 83:7a:68:e7:65:ec:ab:92:90:2c:92:c0:f0:fb:54:51:8d:06: 77:15:b5:61:8e:93:da:e7:83:ef:7d:e7:6d:5c:e4:b9:43:80: f3:b2:74:19:05:95:dd:ba:54:12:43:34:3c:ed:03:25:50:ba: 33:04:76:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWMp8a/uyXXrvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGEzODEzNDEtZGQ0NC00NzQ3LTllMDYtOGFiODcwMjAzNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRKtbNKraVTubZ3CO86XLOWeNlSJh/gCjvqA Y9oAQiyU+p0S55gkQVxmQkQfqKhRlpAsTp6gqrPLgSsS347S9cDxrUmx8W1kzlAf V+4uLI9H3p81wAeU8T02ZfWYXyx6rj1GdNfxKsZTFvXTKZA39DAx9ECwyTnBgr1e 3PbY8Op6Qu1AIIw0Pzbq4jExzguLDL/bCoNNWyFC8bP4pM6xbAeJS2d5Jom9UKD+ NQIUmz5VSwabGNOePJsDxuUAMCNk4oHTkrTsXOfsRgy3B2I439c20dRl3RMyOHph RB9s3Fftd0uMcD9hctXw/tG52M9u9oK9AO9tHhJYbUG1HBhvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKbBeylQrcvi0Y0e1uMl1rwl23yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdiMTQyOTAtMGIzYS0z YWYxLWEyMjgtNzA0M2U3MzdkM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiEN5eHHmCqnIB4aUx5m8Sqes5sQ7C5Mp+q8d/+Rt63lwU0hB8h1P5z xLhuAcNlwT7vhzGXbI38v2yGffl9bLmQ/mR0mDSFu8eQKzWzp4eKeYsUX/pVCe+j 2mFBGsBgYO0tX1N1YsexW0zZ1Yk/zgaJeYsh7Es2fNITEezZRFQVuUMV28EGPVAZ MN0aWUlS1eg1QrQbuKsMKVOHPawQvOLSH51mghdrH1gZpAMIoWDz/+YrWrMWkDR5 dIMFMhBfG7AHfBYT94N6aOdl7KuSkCySwPD7VFGNBncVtWGOk9rng+99521c5LlD gPOydBkFld26VBJDNDztAyVQujMEdsY= -----END CERTIFICATE-----Generated at Wed May 13 14:38:11 2026 by rpki-client