$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa File: 7442de68-9be2-37ef-8966-84a9221808e1.roa (raw, json) Hash identifier: Tq7vPyKTFTh6H3uRSqqJQV6v8HE52VnqakwCTeAfkvo= Subject key identifier: 74:D8:D1:33:12:79:9A:19:17:0B:31:82:59:7D:69:D1:74:BE:9B:ED Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F15CD030D1DEBC9455E5ECD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 3855 IP address blocks: 199.172.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:03:0d:1d:eb:c9:45:5e:5e:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=6732e46a-8657-413d-b6b9-a82273cf2145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:69:4c:aa:61:73:14:06:b9:1b:df:23:5d: 30:97:1a:fc:3d:80:0a:69:4b:03:67:f5:e5:8a:94: a1:fe:a5:0c:30:84:02:d8:a6:f5:7a:50:15:ba:13: 7e:b4:20:8a:82:81:27:80:1f:4d:77:00:e5:05:ad: e8:c7:b3:8f:64:d6:2a:32:6c:aa:a9:93:ea:ef:0f: 00:7b:7a:ef:21:62:ef:49:db:dd:3e:a0:4c:0a:f0: cf:bc:4d:45:72:3c:e8:10:b2:de:c9:3c:33:0e:a1: 8d:22:3b:0d:67:79:80:b0:05:22:29:e7:12:31:23: fb:b2:a2:23:ed:8d:e1:9a:5c:09:81:d2:9d:4a:e6: 51:cc:07:81:40:82:58:ef:27:c0:5a:ec:76:69:e5: 3a:b5:a8:00:39:03:fe:64:aa:33:d7:ae:ee:5f:73: 1f:9f:48:56:9a:df:ef:8b:f6:27:25:47:3f:63:a5: 52:e5:9f:af:49:01:80:de:a6:e3:7e:83:4c:5e:58: b5:ac:3d:c4:88:60:75:5d:94:ab:95:3b:cf:5b:19: 34:6c:34:09:14:9b:29:d4:ad:1e:e8:bc:63:44:40: 8f:98:21:7d:42:7d:12:6a:1c:e8:35:47:61:73:24: 83:e8:a7:61:01:25:67:a0:89:24:24:24:82:a6:84: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D8:D1:33:12:79:9A:19:17:0B:31:82:59:7D:69:D1:74:BE:9B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b9:b7:40:b6:b5:d7:9d:1c:cc:9c:ce:fa:20:bc:bd:08:d7: 8e:d6:db:3c:6e:04:5c:7e:54:ec:f2:cc:3b:5c:d1:08:c3:1e: 26:ce:06:49:79:ae:b1:52:e9:1b:dc:a5:fa:93:d1:43:d8:3d: 97:fa:b8:f1:29:cc:e4:0e:21:80:c5:f6:e6:08:71:3a:d1:cb: d6:0f:f3:3e:51:9a:42:5c:df:79:c0:e0:66:53:c1:ac:d5:b9: 83:b4:55:11:9d:c1:0c:30:80:39:32:a2:76:d2:77:cb:bb:20: 05:f6:2e:ad:32:49:cf:29:a3:d6:ff:d7:f0:61:77:6e:a4:c8: 60:dd:99:5d:a6:43:51:98:b7:a5:0d:1b:21:4e:60:cd:67:57: 74:31:ba:2e:77:2e:69:54:7a:98:d5:11:de:2b:cf:e5:a0:69: 93:44:44:c5:e0:30:62:80:fc:ec:cc:37:1c:b4:62:4c:27:b2: bf:e6:96:2b:e4:3f:4b:d6:da:c3:cb:4c:c0:1c:99:f0:23:4a: 1d:5b:32:1f:20:70:d9:28:a4:06:b4:d9:27:9a:fe:fc:76:87: 93:e9:f2:47:49:10:eb:85:b0:28:fd:93:56:47:55:c1:84:53: 01:4a:f5:fd:ef:24:5b:6f:5b:a0:f3:b7:c2:d2:e2:c1:3e:a5: d8:8d:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQMNHevJRV5ezQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NjczMmU0NmEtODY1Ny00MTNkLWI2YjktYTgyMjczY2YyMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8lpTKphcxQGuRvfI10wlxr8PYAKaUsDZ/Xl ipSh/qUMMIQC2Kb1elAVuhN+tCCKgoEngB9NdwDlBa3ox7OPZNYqMmyqqZPq7w8A e3rvIWLvSdvdPqBMCvDPvE1FcjzoELLeyTwzDqGNIjsNZ3mAsAUiKecSMSP7sqIj 7Y3hmlwJgdKdSuZRzAeBQIJY7yfAWux2aeU6tagAOQP+ZKoz167uX3Mfn0hWmt/v i/YnJUc/Y6VS5Z+vSQGA3qbjfoNMXli1rD3EiGB1XZSrlTvPWxk0bDQJFJsp1K0e 6LxjRECPmCF9Qn0SahzoNUdhcySD6KdhASVnoIkkJCSCpoTGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTY0TMSeZoZFwsxgll9adF0vpvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ0MmRlNjgtOWJlMi0z N2VmLTg5NjYtODRhOTIyMTgwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES5t0C2tdedHMyczvogvL0I147W2zxuBFx+VOzyzDtc0QjDHibOBkl5 rrFS6RvcpfqT0UPYPZf6uPEpzOQOIYDF9uYIcTrRy9YP8z5RmkJc33nA4GZTwazV uYO0VRGdwQwwgDkyonbSd8u7IAX2Lq0ySc8po9b/1/Bhd26kyGDdmV2mQ1GYt6UN GyFOYM1nV3Qxui53LmlUepjVEd4rz+WgaZNERMXgMGKA/OzMNxy0Ykwnsr/mlivk P0vW2sPLTMAcmfAjSh1bMh8gcNkopAa02Sea/vx2h5Pp8kdJEOuFsCj9k1ZHVcGE UwFK9f3vJFtvW6Dzt8LS4sE+pdiNbeA= -----END CERTIFICATE-----Generated at Sun Sep 20 10:16:48 2026 by rpki-client