$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa File: 8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa (raw, json) Hash identifier: Ux97tluOj7tz30jCKeotUqilDF/AJyOOAXMhLEEgQ1Y= Subject key identifier: 60:30:E6:19:D9:FA:D0:48:2A:74:A2:26:E1:20:DE:E4:93:94:90:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D7470040284038F65C8FC0B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 199.202.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:04:02:84:03:8f:65:c8:fc:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=6dc46f2a-df37-447c-8ecd-068913b080c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:af:18:0b:4f:38:62:32:77:66:7d:22:31: 1a:17:1d:ca:63:0d:e3:91:b6:3a:a8:77:d7:94:ba: 66:d5:38:d0:16:7c:eb:17:ac:2b:3c:cc:4b:54:5d: 72:cf:50:03:da:41:99:b9:51:35:ce:33:d2:02:50: 4f:08:b8:df:1e:aa:d3:ea:0e:2f:e4:f4:c5:21:96: fb:34:17:4b:46:c5:02:fd:10:91:a4:7f:44:dd:cb: fc:d7:3a:e9:05:c8:99:2f:57:36:81:75:35:4a:5d: 64:ed:f8:01:ae:f3:d3:1e:2b:d3:b5:e6:d5:0e:a4: e2:db:be:72:a8:fd:00:5d:2b:e0:94:f1:96:45:b6: 64:90:3b:3f:e5:2f:39:fc:9a:79:31:89:58:ee:5e: 51:f6:21:05:48:ed:76:41:89:04:8f:32:7a:4d:95: 25:f3:f7:b0:4c:23:31:0d:d9:eb:df:0d:9d:c0:42: 91:71:aa:0b:3e:74:35:d0:44:3e:c7:b8:23:59:72: cc:2d:a8:d4:b0:e1:b6:db:7e:1b:fd:4f:28:7d:1e: 80:81:41:c5:70:3b:47:41:20:20:e8:54:ae:b0:30: ee:73:c8:8a:48:1a:59:07:07:b5:42:69:f3:1b:78: e8:28:b8:09:02:c0:2b:3b:24:4a:cd:02:c0:e1:9c: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:30:E6:19:D9:FA:D0:48:2A:74:A2:26:E1:20:DE:E4:93:94:90:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d0:08:84:2c:87:4d:6f:7b:b6:13:11:b0:db:c3:f4:d6:f8: 08:15:c9:d8:fc:9b:37:6e:8d:13:78:68:8f:45:8e:d4:62:9c: a3:64:c2:49:8d:79:9f:91:e1:9e:25:c7:e0:c6:bd:37:04:e3: c3:52:97:fb:0e:9b:55:c2:dc:c4:81:cb:7c:60:ef:14:1c:c3: 77:e8:20:f5:37:87:82:03:11:f7:6e:37:e9:76:01:bc:ad:0e: 48:b7:db:77:84:ff:48:00:0a:e0:24:62:c7:48:e4:3d:a5:5f: 29:70:1a:9f:d9:54:3f:87:5d:aa:fe:29:67:22:89:f7:2d:ec: 82:3b:e0:e0:d3:a7:e4:db:3e:fb:8e:fb:5c:85:a7:a9:96:f6: dc:46:3e:17:3a:c7:b5:c2:76:4a:e0:1c:59:2e:d1:90:bd:51: b3:c8:39:04:7f:8f:c9:c9:79:14:f6:f9:01:0e:e9:d6:92:53: 83:7e:2b:5d:a2:20:e1:01:ab:1f:38:39:43:af:a3:b9:e7:9e: 04:11:7b:a2:bc:c7:88:38:cc:a3:e3:a8:5a:3e:52:9f:4c:44: 60:e7:77:a6:eb:e7:f1:60:76:60:fd:ea:97:bb:f1:d6:8e:26: 0d:68:01:a9:4b:a2:d0:ac:48:d6:38:b7:00:f1:86:c7:34:e9: 51:f3:32:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAQChAOPZcj8CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NmRjNDZmMmEtZGYzNy00NDdjLThlY2QtMDY4OTEzYjA4MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEOvGAtPOGIyd2Z9IjEaFx3KYw3jkbY6qHfX lLpm1TjQFnzrF6wrPMxLVF1yz1AD2kGZuVE1zjPSAlBPCLjfHqrT6g4v5PTFIZb7 NBdLRsUC/RCRpH9E3cv81zrpBciZL1c2gXU1Sl1k7fgBrvPTHivTtebVDqTi275y qP0AXSvglPGWRbZkkDs/5S85/Jp5MYlY7l5R9iEFSO12QYkEjzJ6TZUl8/ewTCMx Ddnr3w2dwEKRcaoLPnQ10EQ+x7gjWXLMLajUsOG2234b/U8ofR6AgUHFcDtHQSAg 6FSusDDuc8iKSBpZBwe1QmnzG3joKLgJAsArOyRKzQLA4ZxjGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAw5hnZ+tBIKnSiJuEg3uSTlJBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZiOTQxYWItM2EzZC0z MzY1LTgyOGEtYTNlMWEwMjA5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbQCIQsh01ve7YTEbDbw/TW+AgVydj8mzdujRN4aI9FjtRinKNkwkmN eZ+R4Z4lx+DGvTcE48NSl/sOm1XC3MSBy3xg7xQcw3foIPU3h4IDEfduN+l2Abyt Dki323eE/0gACuAkYsdI5D2lXylwGp/ZVD+HXar+KWciifct7II74ODTp+TbPvuO +1yFp6mW9txGPhc6x7XCdkrgHFku0ZC9UbPIOQR/j8nJeRT2+QEO6daSU4N+K12i IOEBqx84OUOvo7nnngQRe6K8x4g4zKPjqFo+Up9MRGDnd6br5/FgdmD96pe78daO Jg1oAalLotCsSNY4twDxhsc06VHzMgY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:02 2026 by rpki-client