$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9843429b-4eda-3368-bb78-99fa2bd4248c.roa File: 9843429b-4eda-3368-bb78-99fa2bd4248c.roa (raw, json) Hash identifier: hC33G6QI0qFjg0WnipjIoalLc3uy48JLXIUi0l0b/38= Subject key identifier: BA:11:3B:88:97:1B:1B:4F:46:6B:F7:D9:61:76:37:DD:7E:D6:90:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5E62AB1159797F7E67555080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9843429b-4eda-3368-bb78-99fa2bd4248c.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 3855 IP address blocks: 199.172.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ab:11:59:79:7f:7e:67:55:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=fcc09f24-d68b-4ae6-8e72-c90752292913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:54:55:f8:f6:7d:ae:fa:d5:d3:23:1a:a2: eb:07:48:83:ec:d8:e3:39:72:ff:4d:83:d5:7e:99: 6e:5c:f2:f3:d3:5f:c6:8f:5b:b0:b6:fb:6a:e4:27: d8:5e:93:5f:3d:00:38:7e:83:9b:71:4a:50:14:e7: 9d:d4:44:8a:b1:e4:cc:0b:a0:e5:e7:f4:62:c9:b3: 72:97:4a:9f:cd:1f:05:ec:dc:eb:e8:39:85:97:0b: 38:23:33:ef:bc:f7:b4:e9:4e:70:c7:1d:c4:94:89: 05:9b:29:c0:36:3f:a1:d1:86:23:c1:e6:30:f3:e6: 88:a1:d6:1d:d1:ab:57:a8:34:f2:38:0d:fe:b4:df: cb:04:28:d9:05:9e:41:ce:0e:5c:83:60:f6:9a:a0: 41:14:1e:85:c2:17:3b:80:5c:ae:8c:02:a5:4a:77: df:6b:83:23:ce:0e:1c:27:79:02:04:f1:6a:ef:19: 93:8d:af:d0:de:38:c3:7f:bc:14:7d:e0:44:35:19: 88:49:c9:9d:58:79:15:24:bc:a3:35:67:ca:ee:6f: 37:0a:94:3c:3d:9d:63:8b:30:6c:71:55:5d:4b:e8: ec:26:4b:8f:85:bf:d0:83:6d:aa:18:52:ff:76:70: f5:83:37:8c:97:eb:87:0a:ba:20:cf:5f:05:a0:f7: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:3B:88:97:1B:1B:4F:46:6B:F7:D9:61:76:37:DD:7E:D6:90:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9843429b-4eda-3368-bb78-99fa2bd4248c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ea:95:40:f7:ee:cd:e5:5a:73:2a:4c:e9:db:30:fc:92:4f: 90:f8:2a:8e:45:0f:d8:7e:4d:1c:a9:67:0e:bc:7c:1c:2b:cc: e6:79:e3:e8:d1:57:03:11:4c:7f:4f:ee:8f:6d:de:cb:3d:84: 1c:17:8c:bd:b4:88:90:b6:12:42:f4:f4:20:8b:85:71:7b:64: 0c:e2:5a:1a:b6:64:32:1d:0b:a9:97:88:c8:23:34:52:c5:12: 52:a0:6d:b6:ce:18:b4:7a:90:8d:89:d0:90:f1:32:25:cb:12: 98:f2:45:25:f1:22:2e:b0:b0:d6:31:4a:d0:d7:eb:cf:0e:28: e2:f4:a7:db:ba:53:3d:83:27:aa:22:2b:d0:79:79:d2:14:84: e8:0e:91:0c:67:98:78:e2:1c:bc:67:69:fd:2b:46:ac:48:4b: 91:f0:1e:ba:fe:27:f6:aa:7c:95:7e:63:85:27:dd:7d:1c:fc: eb:dd:b3:3c:f7:45:68:b9:9c:8c:58:9a:95:02:e0:c2:f6:c9: 81:0b:e9:5f:9d:d3:6a:84:6f:3f:17:bc:45:59:b8:9f:be:70: 90:7d:71:f3:de:02:b7:35:5b:3b:81:15:73:26:6b:8f:14:5b: ad:e2:c9:28:b3:f8:d3:14:a8:2c:69:43:79:28:90:f7:00:cc: 98:54:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYqsRWXl/fmdVUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZmNjMDlmMjQtZDY4Yi00YWU2LThlNzItYzkwNzUyMjkyOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivhUVfj2fa761dMjGqLrB0iD7NjjOXL/TYPV fpluXPLz01/Gj1uwtvtq5CfYXpNfPQA4foObcUpQFOed1ESKseTMC6Dl5/RiybNy l0qfzR8F7Nzr6DmFlws4IzPvvPe06U5wxx3ElIkFmynANj+h0YYjweYw8+aIodYd 0atXqDTyOA3+tN/LBCjZBZ5Bzg5cg2D2mqBBFB6Fwhc7gFyujAKlSnffa4Mjzg4c J3kCBPFq7xmTja/Q3jjDf7wUfeBENRmIScmdWHkVJLyjNWfK7m83CpQ8PZ1jizBs cVVdS+jsJkuPhb/Qg22qGFL/dnD1gzeMl+uHCrogz18FoPcHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoRO4iXGxtPRmv32WF2N91+1pBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTg0MzQyOWItNGVkYS0z MzY4LWJiNzgtOTlmYTJiZDQyNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3qlUD37s3lWnMqTOnbMPyST5D4Ko5FD9h+TRypZw68fBwrzOZ54+jR VwMRTH9P7o9t3ss9hBwXjL20iJC2EkL09CCLhXF7ZAziWhq2ZDIdC6mXiMgjNFLF ElKgbbbOGLR6kI2J0JDxMiXLEpjyRSXxIi6wsNYxStDX688OKOL0p9u6Uz2DJ6oi K9B5edIUhOgOkQxnmHjiHLxnaf0rRqxIS5HwHrr+J/aqfJV+Y4Un3X0c/Ovdszz3 RWi5nIxYmpUC4ML2yYEL6V+d02qEbz8XvEVZuJ++cJB9cfPeArc1WzuBFXMma48U W63iySiz+NMUqCxpQ3kokPcAzJhUDbA= -----END CERTIFICATE-----Generated at Sun Oct 4 21:24:32 2026 by rpki-client