$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa File: c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa (raw, json) Hash identifier: xapL3uP7S0WuDKerhvIu6AUPXAWsVX1EbWjnFaCGPZE= Subject key identifier: 9E:61:14:DC:0F:60:5B:E1:56:6C:C1:24:8A:FF:65:71:5F:EA:F5:5D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E18AEFD170D3C88280E178160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 3855 IP address blocks: 199.172.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:fd:17:0d:3c:88:28:0e:17:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=355356f3-40e9-4ca1-8dd1-f05e3d9c9af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:50:4e:7a:20:13:8e:d0:52:d5:56:c0:3e: 2c:32:3c:be:43:a4:c0:b1:4d:57:5e:0f:c3:6b:ee: b7:44:c6:6d:0d:16:a3:24:97:77:fc:e8:77:30:85: 6c:34:6c:7a:0a:ea:3d:60:ab:25:82:06:cd:cd:8e: ff:6c:14:35:a6:9c:2a:60:0c:1c:3c:65:b4:6a:1d: 01:b2:40:ae:96:53:98:bd:23:82:78:20:fa:ac:46: ae:9b:1f:38:b0:96:50:a1:42:f4:b1:6b:3c:fd:70: 1f:3a:9d:23:61:35:d1:bc:1e:ba:dd:0c:ee:f6:c3: 7e:a7:16:83:ee:29:13:ed:55:6d:6e:6e:d1:dc:da: f9:26:1f:67:dc:b5:87:01:d8:c3:6a:d1:ca:aa:f0: 18:8e:18:49:c8:45:8b:7e:fe:ac:f4:37:80:d9:86: 92:8c:1b:01:4a:3f:22:71:f4:af:54:e2:85:30:90: ee:89:74:60:48:dc:16:30:fc:7f:52:c1:63:f2:96: 24:67:04:1d:00:6c:01:bc:e3:d9:86:85:b0:8a:36: 4c:31:cc:a9:0f:45:84:b8:08:0f:3b:36:9f:78:ae: 7b:80:07:a3:59:ca:b2:97:4c:70:38:47:45:ad:69: a2:25:0f:f2:5c:bc:1c:52:c9:d6:09:1a:3f:26:08: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:14:DC:0F:60:5B:E1:56:6C:C1:24:8A:FF:65:71:5F:EA:F5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4ea0221-54a1-30a1-a70f-5739961d1ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:64:64:ed:df:32:77:54:e6:92:7b:ff:7f:72:b7:60:4b:a9: cf:fa:82:8b:6f:a0:38:a3:6e:b2:e7:d3:52:fd:6d:31:68:73: 12:e1:69:b0:9c:32:9b:65:5d:78:a1:47:1d:7c:dc:6d:09:4c: 95:c5:93:cb:b0:1f:a4:94:41:16:09:38:a3:a4:cc:83:0c:69: fa:95:3f:b2:71:25:9e:c8:30:f4:46:48:c7:93:43:65:30:6c: cb:4c:97:5c:55:48:3b:92:17:9b:3e:e2:6b:d4:74:fa:7e:27: 64:79:2e:84:ab:dd:4f:96:9d:fe:5c:7e:d6:d3:50:b7:e7:60: c1:32:c7:08:4e:dc:e0:ca:13:0d:88:da:ec:e1:49:98:a6:70: 51:ec:0e:ae:e8:6c:d3:72:9a:e1:49:c2:40:a0:a5:f9:23:63: ab:e9:f7:0e:b5:1d:33:40:c6:b8:aa:e1:d6:d9:38:6f:ab:90: 2b:c0:6f:94:e2:f1:10:fe:c2:ca:a4:eb:55:c1:a9:e1:5f:91: d5:a0:3f:4e:46:81:22:bf:e7:87:9f:a8:b0:48:52:93:64:79: 56:8b:6b:7e:34:07:25:7c:33:a1:50:84:d8:87:77:75:34:84: 64:67:3d:6e:69:48:61:b5:a6:4e:92:14:45:bc:23:1d:8e:a4: d1:8c:f6:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Yrv0XDTyIKA4XgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk MzU1MzU2ZjMtNDBlOS00Y2ExLThkZDEtZjA1ZTNkOWM5YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbVQTnogE47QUtVWwD4sMjy+Q6TAsU1XXg/D a+63RMZtDRajJJd3/Oh3MIVsNGx6Cuo9YKslggbNzY7/bBQ1ppwqYAwcPGW0ah0B skCullOYvSOCeCD6rEaumx84sJZQoUL0sWs8/XAfOp0jYTXRvB663Qzu9sN+pxaD 7ikT7VVtbm7R3Nr5Jh9n3LWHAdjDatHKqvAYjhhJyEWLfv6s9DeA2YaSjBsBSj8i cfSvVOKFMJDuiXRgSNwWMPx/UsFj8pYkZwQdAGwBvOPZhoWwijZMMcypD0WEuAgP OzafeK57gAejWcqyl0xwOEdFrWmiJQ/yXLwcUsnWCRo/JggOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5hFNwPYFvhVmzBJIr/ZXFf6vVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRlYTAyMjEtNTRhMS0z MGExLWE3MGYtNTczOTk2MWQxYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFkZO3fMndU5pJ7/39yt2BLqc/6gotvoDijbrLn01L9bTFocxLhabCc MptlXXihRx183G0JTJXFk8uwH6SUQRYJOKOkzIMMafqVP7JxJZ7IMPRGSMeTQ2Uw bMtMl1xVSDuSF5s+4mvUdPp+J2R5LoSr3U+Wnf5cftbTULfnYMEyxwhO3ODKEw2I 2uzhSZimcFHsDq7obNNymuFJwkCgpfkjY6vp9w61HTNAxriq4dbZOG+rkCvAb5Ti 8RD+wsqk61XBqeFfkdWgP05GgSK/54efqLBIUpNkeVaLa340ByV8M6FQhNiHd3U0 hGRnPW5pSGG1pk6SFEW8Ix2OpNGM9os= -----END CERTIFICATE-----Generated at Sat Jun 13 23:36:58 2026 by rpki-client