$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa File: 25e6f460-c894-32b1-ad14-f99116ad088e.roa (raw, json) Hash identifier: S710WWMRRW/wh13A1VDQJR7UNIMTcq+A/WhpVlVf4y8= Subject key identifier: AE:AA:B3:9A:C4:2D:D8:26:04:50:25:1A:F3:C8:17:46:E3:05:FA:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584FB7D67DBA754DB431D17DFA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa Signing time: Tue 03 Nov 2026 14:00:13 +0000 ROA not before: Tue 03 Nov 2026 14:00:13 +0000 ROA not after: Mon 01 Feb 2027 14:00:13 +0000 asID: 3855 IP address blocks: 199.172.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b7:d6:7d:ba:75:4d:b4:31:d1:7d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 3 14:00:13 2026 GMT Not After : Feb 1 14:00:13 2027 GMT Subject: CN=7da8dfa2-ece4-42d1-bf05-7ade9480f53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:65:27:b1:31:ca:ab:a0:89:36:7e:87:ff: aa:d4:fa:dc:b9:81:fd:f4:35:ad:5c:ed:c0:21:ca: da:ab:aa:6c:4c:b6:07:e2:cf:49:40:4c:ea:d2:2a: b0:49:81:de:4e:96:4a:37:52:bb:6d:35:55:62:69: 25:52:64:6e:bb:83:bd:1d:c9:27:88:64:b5:bb:b4: e5:59:07:37:5e:88:ad:94:6d:94:00:a3:c1:ba:56: 25:b0:18:08:ce:ad:c6:68:4d:e4:e4:d2:33:5e:f6: b1:f7:10:a3:d0:cf:7d:42:f6:dd:30:88:a5:0b:a7: 8b:ba:fc:c7:08:ed:35:e1:c0:9f:86:39:f3:76:8a: de:f0:8a:7e:a8:c3:06:96:24:4a:7f:f9:f3:3e:7c: e0:7f:d8:d5:c1:a1:c1:cd:fa:d9:26:38:20:97:96: 73:73:fd:ca:58:a3:bf:90:1c:52:4b:26:e9:2e:16: 47:d0:ba:29:40:c1:06:40:29:2f:1a:13:7f:ce:41: e0:4c:79:ba:b9:19:06:6f:05:f6:61:49:4a:47:8c: 70:1c:ce:81:29:e5:51:94:57:ac:55:e5:3e:99:90: 64:88:37:4e:e0:bf:4d:da:67:a0:97:75:b3:2d:83: f8:78:92:dd:6b:79:38:68:c8:04:3a:3e:07:70:d6: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:B3:9A:C4:2D:D8:26:04:50:25:1A:F3:C8:17:46:E3:05:FA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e3:e2:31:b5:1f:ac:f5:6a:20:a9:97:68:3e:58:aa:d4:38: aa:35:16:70:18:51:3b:d2:23:8e:f6:a6:9e:19:63:99:5b:04: 88:dc:c4:cc:bc:a8:ef:79:50:09:39:e9:25:01:c4:d4:a9:64: 3f:68:00:2d:0e:2d:0d:f4:b8:4e:45:03:cc:ce:8a:3c:2a:4c: 11:a7:2f:bf:2d:ac:8a:55:42:4b:6f:4d:da:00:94:a7:68:67: 67:2c:2c:6b:b3:38:2f:4a:da:3d:9d:49:7e:a2:c7:8e:9e:57: e3:c4:9f:53:f8:07:54:ed:56:82:e6:a1:af:e0:44:2f:a2:c5: 66:93:a8:a5:52:59:67:96:d6:81:e4:4a:68:bb:56:e3:0a:dc: 15:0e:fb:74:3a:38:26:2f:41:92:2b:c0:4f:a5:04:d0:c7:3c: 46:73:c2:7f:4a:d3:a5:8a:b3:57:a2:39:36:3a:61:26:b6:7a: 1c:f3:6a:b1:8d:72:a2:78:ce:33:3e:fe:ad:cf:ef:bb:fb:de: 1d:06:06:0c:c6:20:06:ba:44:e4:19:70:8b:71:66:f4:b0:d3: 02:c5:27:49:bb:72:c3:f8:67:2a:72:e0:f7:85:73:61:28:17: 5b:4f:b8:57:7c:81:5d:2b:94:5b:f1:b4:af:48:e7:3f:73:48: 27:ec:84:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+31n26dU20MdF9+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTEwMzE0MDAxM1oXDTI3MDIwMTE0MDAxM1owLzEtMCsGA1UEAxMk N2RhOGRmYTItZWNlNC00MmQxLWJmMDUtN2FkZTk0ODBmNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJdlJ7ExyqugiTZ+h/+q1PrcuYH99DWtXO3A Icraq6psTLYH4s9JQEzq0iqwSYHeTpZKN1K7bTVVYmklUmRuu4O9HckniGS1u7Tl WQc3XoitlG2UAKPBulYlsBgIzq3GaE3k5NIzXvax9xCj0M99QvbdMIilC6eLuvzH CO014cCfhjnzdore8Ip+qMMGliRKf/nzPnzgf9jVwaHBzfrZJjggl5Zzc/3KWKO/ kBxSSybpLhZH0LopQMEGQCkvGhN/zkHgTHm6uRkGbwX2YUlKR4xwHM6BKeVRlFes VeU+mZBkiDdO4L9N2megl3WzLYP4eJLda3k4aMgEOj4HcNZjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6qs5rELdgmBFAlGvPIF0bjBfqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVlNmY0NjAtYzg5NC0z MmIxLWFkMTQtZjk5MTE2YWQwODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3j4jG1H6z1aiCpl2g+WKrUOKo1FnAYUTvSI472pp4ZY5lbBIjcxMy8 qO95UAk56SUBxNSpZD9oAC0OLQ30uE5FA8zOijwqTBGnL78trIpVQktvTdoAlKdo Z2csLGuzOC9K2j2dSX6ix46eV+PEn1P4B1TtVoLmoa/gRC+ixWaTqKVSWWeW1oHk Smi7VuMK3BUO+3Q6OCYvQZIrwE+lBNDHPEZzwn9K06WKs1eiOTY6YSa2ehzzarGN cqJ4zjM+/q3P77v73h0GBgzGIAa6ROQZcItxZvSw0wLFJ0m7csP4Zypy4PeFc2Eo F1tPuFd8gV0rlFvxtK9I5z9zSCfshIc= -----END CERTIFICATE-----Generated at Thu Nov 5 03:17:32 2026 by rpki-client