$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa File: 25e6f460-c894-32b1-ad14-f99116ad088e.roa (raw, json) Hash identifier: +f4JwY7Pk0v9lX3lQHvH5cKyUc4AdPa6b+agF4xFmwY= Subject key identifier: 81:28:AF:72:9E:FF:63:18:A0:55:6F:F5:8D:F3:D4:76:00:4C:E9:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F15CD048F9DB1C022A8993200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 3855 IP address blocks: 199.172.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:04:8f:9d:b1:c0:22:a8:99:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=795c1e17-001e-4155-a4d7-b11cd883aec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:b5:af:a7:32:ee:cf:ce:21:41:82:60:9e: 8f:de:1b:29:0b:5e:87:12:e8:e0:15:83:fc:85:47: d1:60:09:2a:86:5c:02:e0:28:5f:e2:15:83:0f:80: 84:4b:7f:75:4f:c3:9b:49:6a:99:59:4c:fe:7b:4c: 2e:f8:aa:18:ae:61:53:f6:27:b7:2b:c1:89:27:9e: ad:e4:29:1c:93:04:23:65:99:2c:bb:c1:d5:9a:3b: 93:8e:48:19:39:09:c4:fb:8b:e2:95:d0:6e:9c:1b: 3f:33:8a:50:4f:2b:c4:47:22:56:47:66:21:d0:e4: c6:f1:ac:6a:61:a9:8a:d1:09:73:28:57:ba:35:2f: ca:f5:fe:c0:d8:bb:00:bc:f2:7c:8b:23:b6:45:c1: f4:ac:62:43:1c:92:e2:be:5f:b1:1e:2b:57:7c:a1: fd:6b:bb:28:02:ef:a0:c2:dc:d6:bf:e1:7b:6c:f4: 0f:f8:c1:72:5c:4a:c2:9c:8d:fd:4f:3e:26:15:21: 4d:80:ee:d5:d6:16:b4:ec:6b:27:08:27:af:22:cd: f4:01:3a:50:1d:73:84:b3:0d:36:0a:08:7f:0e:f3: ad:4f:59:a4:0a:9c:a4:5b:98:ec:d7:73:34:3c:a2: b0:4c:5a:aa:29:07:30:bb:5e:3e:4b:2f:1a:6c:9f: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:AF:72:9E:FF:63:18:A0:55:6F:F5:8D:F3:D4:76:00:4C:E9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ad:28:6c:5e:c3:4b:f4:06:4c:41:62:cc:99:9c:2b:fa:16: 75:fc:c6:ac:0d:8b:33:51:b9:7b:00:be:ef:79:b4:b3:6d:81: 44:3b:6b:52:4c:b0:ef:c9:fe:5d:d5:b4:dd:b7:d1:0e:6a:4a: 63:06:42:70:7b:42:b2:65:66:de:04:9e:0a:24:d1:ef:f0:d0: b8:19:62:8f:be:ba:af:af:71:b5:b8:38:1c:c5:ad:7b:ce:16: d9:87:59:93:fe:35:a2:e9:58:03:ec:2b:ac:7d:71:18:72:20: bd:01:f7:a1:50:bd:e6:64:de:fa:d3:ff:82:19:36:d3:c4:48: 18:77:71:63:0c:57:7e:d8:d7:fc:8a:f2:a2:9d:ba:90:7d:a6: dc:ce:dc:3c:1f:e1:bb:81:09:65:1e:fd:f7:62:dd:90:d3:f4: ce:e0:b3:e1:9f:7a:d6:27:25:93:f0:dc:1d:0c:2a:f1:09:d2: a4:26:38:b0:27:0d:89:eb:09:83:b7:9e:97:3e:79:7f:a5:29: 48:73:54:2f:08:91:dc:b6:60:98:bf:c1:13:46:3c:54:06:81: 11:41:72:c4:e6:15:cf:d4:d8:af:d9:50:14:37:d5:74:91:b7: 12:5b:c7:99:dc:8d:17:fc:8f:91:4f:7f:77:1a:66:c7:da:51: c9:6b:0c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQSPnbHAIqiZMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk Nzk1YzFlMTctMDAxZS00MTU1LWE0ZDctYjExY2Q4ODNhZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8e1r6cy7s/OIUGCYJ6P3hspC16HEujgFYP8 hUfRYAkqhlwC4Chf4hWDD4CES391T8ObSWqZWUz+e0wu+KoYrmFT9ie3K8GJJ56t 5CkckwQjZZksu8HVmjuTjkgZOQnE+4vildBunBs/M4pQTyvERyJWR2Yh0OTG8axq YamK0QlzKFe6NS/K9f7A2LsAvPJ8iyO2RcH0rGJDHJLivl+xHitXfKH9a7soAu+g wtzWv+F7bPQP+MFyXErCnI39Tz4mFSFNgO7V1ha07GsnCCevIs30ATpQHXOEsw02 Cgh/DvOtT1mkCpykW5js13M0PKKwTFqqKQcwu14+Sy8abJ8D4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEor3Ke/2MYoFVv9Y3z1HYATOmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVlNmY0NjAtYzg5NC0z MmIxLWFkMTQtZjk5MTE2YWQwODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKtKGxew0v0BkxBYsyZnCv6FnX8xqwNizNRuXsAvu95tLNtgUQ7a1JM sO/J/l3VtN230Q5qSmMGQnB7QrJlZt4Engok0e/w0LgZYo++uq+vcbW4OBzFrXvO FtmHWZP+NaLpWAPsK6x9cRhyIL0B96FQveZk3vrT/4IZNtPESBh3cWMMV37Y1/yK 8qKdupB9ptzO3Dwf4buBCWUe/fdi3ZDT9M7gs+GfetYnJZPw3B0MKvEJ0qQmOLAn DYnrCYO3npc+eX+lKUhzVC8Ikdy2YJi/wRNGPFQGgRFBcsTmFc/U2K/ZUBQ31XSR txJbx5ncjRf8j5FPf3caZsfaUclrDCw= -----END CERTIFICATE-----Generated at Sun Sep 20 13:12:27 2026 by rpki-client