$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa File: 0223d4fe-1fb7-3e32-8033-bff52035a445.roa (raw, json) Hash identifier: pFGct+BIJd6TFlxD7MsONpgl20gV5udmGz4SFGrZyMk= Subject key identifier: 9C:2F:88:BF:BE:3B:04:51:59:6A:0F:F2:07:ED:D9:C7:FF:34:13:56 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB5791A4A7C45D9455C1B46 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.108.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:79:1a:4a:7c:45:d9:45:5c:1b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=86f53056-da2c-4b59-a7c2-62d389d64e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:2f:1d:1e:3f:32:0d:14:09:65:67:bc:b4: ed:05:f8:96:e4:e4:2a:40:ec:6b:97:ea:13:06:58: 70:fb:9b:d5:3d:14:54:92:26:68:9a:92:02:64:ff: 73:a8:1f:8e:9f:e6:b8:0d:21:fe:83:09:40:b8:fb: 28:b0:af:6c:99:fa:69:3b:88:0c:dd:a1:f5:84:dc: 8a:29:85:52:29:74:cd:e2:fc:ba:ec:0a:ed:de:46: fe:6c:45:c2:bf:fc:c1:08:37:a3:af:76:51:10:92: 39:96:92:2a:ed:a8:e9:3f:c6:2f:10:2a:5e:88:99: 4a:2d:7b:92:3d:85:15:c2:07:81:6e:d4:38:62:19: 02:19:9f:17:91:0e:65:37:11:09:38:18:be:97:00: b4:d8:01:0c:70:38:08:61:3f:d4:89:e9:d6:1d:5a: e7:e2:8c:60:97:95:74:49:20:88:86:b3:d3:00:2b: 70:1e:d6:0e:f3:42:04:71:93:b4:be:c9:fe:8c:5a: bd:cf:3c:03:f9:e0:ef:03:23:25:dc:40:65:43:41: 0a:4a:be:99:f4:e0:04:ac:b9:7b:8e:ab:2f:cf:8e: 42:57:1e:c9:63:0c:e7:50:a1:e0:31:bb:3e:35:dd: 9d:88:72:12:5b:68:4a:b2:e0:5d:5b:98:c0:a5:ea: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:88:BF:BE:3B:04:51:59:6A:0F:F2:07:ED:D9:C7:FF:34:13:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0223d4fe-1fb7-3e32-8033-bff52035a445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b6:ff:07:c3:74:f8:46:c7:88:68:b7:54:e2:4e:b7:d6:df: 73:46:00:6e:52:ee:8b:72:c1:e5:ca:27:69:1a:00:c8:de:8d: 2f:18:20:89:61:44:45:c2:21:ab:00:d6:9c:10:e9:5d:1d:53: 0a:f8:1a:a0:d0:96:4d:36:46:2c:a9:c5:37:a8:f8:7b:5b:97: d6:75:3f:2b:95:03:09:83:ab:e6:fe:5b:43:be:de:81:58:4c: 13:ea:35:c6:81:bd:98:b7:ec:f4:ff:4f:e5:b5:4f:aa:05:02: a7:9e:ec:fb:97:a3:ba:e8:2c:f3:8b:81:d2:68:0d:8c:89:e1: df:5a:d6:f4:b1:78:05:a5:87:95:6a:da:66:aa:bc:79:20:b6: 2b:94:95:d1:ac:24:6d:83:73:7f:40:20:8e:7e:b5:f6:cc:4a: 0d:58:ff:34:f3:a9:ff:b7:b4:da:47:87:75:a1:8d:7b:06:32: f7:0d:86:2d:87:6d:3c:a9:da:4f:7c:c3:81:b3:46:7c:21:ac: d3:e3:20:21:92:ae:b1:91:8f:01:fa:c2:1c:9f:a0:ab:e5:2c: b8:e0:6c:bd:c4:63:42:b6:e9:11:94:fb:41:39:4c:0b:2f:1f: 68:a8:bd:09:3a:be:53:5a:f8:37:ee:0d:18:99:f3:49:95:17: 5d:a8:ff:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXkaSnxF2UVcG0YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ODZmNTMwNTYtZGEyYy00YjU5LWE3YzItNjJkMzg5ZDY0ZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm10vHR4/Mg0UCWVnvLTtBfiW5OQqQOxrl+oT Blhw+5vVPRRUkiZompICZP9zqB+On+a4DSH+gwlAuPsosK9smfppO4gM3aH1hNyK KYVSKXTN4vy67Art3kb+bEXCv/zBCDejr3ZREJI5lpIq7ajpP8YvECpeiJlKLXuS PYUVwgeBbtQ4YhkCGZ8XkQ5lNxEJOBi+lwC02AEMcDgIYT/UienWHVrn4oxgl5V0 SSCIhrPTACtwHtYO80IEcZO0vsn+jFq9zzwD+eDvAyMl3EBlQ0EKSr6Z9OAErLl7 jqsvz45CVx7JYwznUKHgMbs+Nd2diHISW2hKsuBdW5jApepB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwviL++OwRRWWoP8gft2cf/NBNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDIyM2Q0ZmUtMWZiNy0z ZTMyLTgwMzMtYmZmNTIwMzVhNDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC2/wfDdPhGx4hot1TiTrfW33NGAG5S7otyweXKJ2kaAMjejS8YIIlh REXCIasA1pwQ6V0dUwr4GqDQlk02RiypxTeo+Htbl9Z1PyuVAwmDq+b+W0O+3oFY TBPqNcaBvZi37PT/T+W1T6oFAqee7PuXo7roLPOLgdJoDYyJ4d9a1vSxeAWlh5Vq 2maqvHkgtiuUldGsJG2Dc39AII5+tfbMSg1Y/zTzqf+3tNpHh3WhjXsGMvcNhi2H bTyp2k98w4GzRnwhrNPjICGSrrGRjwH6whyfoKvlLLjgbL3EY0K26RGU+0E5TAsv H2iovQk6vlNa+DfuDRiZ80mVF12o/6I= -----END CERTIFICATE-----Generated at Wed May 13 13:50:14 2026 by rpki-client