$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa File: db594c0b-1972-3064-abcb-2c71cbf21550.roa (raw, json) Hash identifier: IYjIVseLOrGmskOS7th8gqPFu/Q91q5JdQGljXe5lRU= Subject key identifier: FB:B5:26:DB:3D:B5:DC:14:6C:59:84:B2:37:F3:6E:B0:6A:91:86:8B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F15CD04DA69CEFE1D9387DAC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 3855 IP address blocks: 199.172.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:04:da:69:ce:fe:1d:93:87:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=3c95183f-76f7-4893-895f-179ee76ff74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:0c:18:c7:ca:cd:28:0e:fa:a1:92:fc:40: 8e:7c:b8:d1:cf:a0:cc:3c:e0:a5:81:1b:83:23:d7: 24:98:75:cf:56:2d:5b:fb:34:5a:b4:e0:07:73:a1: 2c:f9:06:c1:a3:6a:fd:9e:ec:1e:b4:a2:41:3b:72: c6:29:d3:97:04:e2:62:4d:ff:eb:90:5f:be:35:4b: a7:bf:71:32:15:6c:9c:57:d0:41:22:74:67:74:1e: b8:b5:22:85:7c:4f:5f:75:1b:67:9c:de:32:70:2d: 00:96:90:18:ec:e5:59:7c:dd:65:20:6f:4e:9a:e5: 59:25:77:98:0e:70:09:84:52:30:d0:80:fc:77:61: b4:0b:b8:de:ed:97:15:3f:92:6d:a1:84:e9:47:ae: d5:f9:c7:1f:4e:09:29:71:76:c3:bc:c4:38:16:cd: 9a:21:5d:43:f1:b8:d7:32:52:1e:3e:63:1b:e2:42: db:31:49:34:40:30:ae:26:c3:3e:29:51:ef:4b:eb: d4:73:06:60:3f:aa:94:f9:e5:0f:bb:8b:34:07:2a: 0c:66:44:27:9e:03:ca:ad:24:b9:cd:bf:56:34:f3: 89:40:b5:a1:17:79:82:d2:1a:8a:26:77:ba:4c:2b: e1:21:67:7f:38:20:6f:b6:e9:d1:0f:ed:ee:ab:ac: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:26:DB:3D:B5:DC:14:6C:59:84:B2:37:F3:6E:B0:6A:91:86:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:92:38:ed:ac:95:04:8c:3c:8e:48:f4:9f:0e:d7:93:0c:ec: d1:91:89:23:05:f0:a9:15:eb:9a:82:6d:f0:37:3a:15:b1:28: 26:de:04:b8:f7:25:51:03:b2:db:fb:dd:f0:ff:01:05:78:db: 9a:09:d2:1b:58:07:cd:39:16:79:d7:01:f4:cc:0d:1a:3c:e8: 3c:f3:ec:c5:41:64:e5:9f:51:70:7d:41:58:e2:d1:d9:12:04: 0e:70:54:c0:50:50:92:2d:77:d5:db:84:f3:fb:20:ea:68:71: 75:4c:7d:c4:71:e1:7c:af:4b:7e:7a:3b:11:dd:4c:61:34:a1: ff:10:e0:59:fa:c3:2e:82:be:a7:54:d2:c8:b6:d5:e0:2b:f1: 06:d8:36:07:a4:1f:91:be:10:12:7f:77:bb:4e:86:0d:ac:fa: 3d:77:d8:49:a1:92:01:58:17:ee:a4:44:f0:34:7e:26:aa:af: 74:5c:1a:59:fd:8e:7f:ff:7c:f9:9d:bb:4a:65:8f:67:17:88: 9f:7a:77:7b:6b:41:28:80:52:21:7c:f7:48:4d:b0:9f:c6:09: 7d:77:6f:86:cf:e0:01:9a:5b:50:3c:d7:4e:be:d4:c8:66:a3: 75:5a:fb:ea:38:8f:65:8d:7b:d6:75:de:53:eb:de:ef:a4:3e: 51:99:3b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQTaac7+HZOH2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk M2M5NTE4M2YtNzZmNy00ODkzLTg5NWYtMTc5ZWU3NmZmNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5sMGMfKzSgO+qGS/ECOfLjRz6DMPOClgRuD I9ckmHXPVi1b+zRatOAHc6Es+QbBo2r9nuwetKJBO3LGKdOXBOJiTf/rkF++NUun v3EyFWycV9BBInRndB64tSKFfE9fdRtnnN4ycC0AlpAY7OVZfN1lIG9OmuVZJXeY DnAJhFIw0ID8d2G0C7je7ZcVP5JtoYTpR67V+ccfTgkpcXbDvMQ4Fs2aIV1D8bjX MlIePmMb4kLbMUk0QDCuJsM+KVHvS+vUcwZgP6qU+eUPu4s0ByoMZkQnngPKrSS5 zb9WNPOJQLWhF3mC0hqKJne6TCvhIWd/OCBvtunRD+3uq6xfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu1Jts9tdwUbFmEsjfzbrBqkYaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1OTRjMGItMTk3Mi0z MDY0LWFiY2ItMmM3MWNiZjIxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSSOO2slQSMPI5I9J8O15MM7NGRiSMF8KkV65qCbfA3OhWxKCbeBLj3 JVEDstv73fD/AQV425oJ0htYB805FnnXAfTMDRo86Dzz7MVBZOWfUXB9QVji0dkS BA5wVMBQUJItd9XbhPP7IOpocXVMfcRx4XyvS356OxHdTGE0of8Q4Fn6wy6CvqdU 0si21eAr8QbYNgekH5G+EBJ/d7tOhg2s+j132EmhkgFYF+6kRPA0fiaqr3RcGln9 jn//fPmdu0plj2cXiJ96d3trQSiAUiF890hNsJ/GCX13b4bP4AGaW1A8106+1Mhm o3Va++o4j2WNe9Z13lPr3u+kPlGZOzM= -----END CERTIFICATE-----Generated at Sun Sep 20 13:04:03 2026 by rpki-client