$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa File: 303e7c7b-498d-38d1-b248-ea2a6afa1787.roa (raw, json) Hash identifier: Wh59kzgiyQYR30Ryc8WyP36Nlcw2kPXE7BdSJyd+Elc= Subject key identifier: A1:D3:E2:A1:BE:55:02:4F:D4:78:58:69:88:C0:C2:CD:00:9C:71:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB5818E5E97AECC34AABC60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.106.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:81:8e:5e:97:ae:cc:34:aa:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=cc97b52d-b5fb-4ad1-86a1-3faf48fd5f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:50:e7:f2:94:c0:aa:b9:cf:e2:6b:65:43: d7:8a:07:78:ba:1a:38:ef:4b:49:b6:02:06:72:90: 86:df:b2:24:a0:52:85:c1:83:72:fe:2e:5a:94:0f: b9:2a:64:fc:db:7b:0d:4b:c5:7c:44:85:6a:4c:aa: b4:97:72:74:a8:bb:26:8d:7c:77:6e:bc:fa:e0:49: d5:6e:cc:6c:27:64:16:9e:21:2e:a4:39:9a:6a:8b: 66:f2:99:58:2a:ff:83:45:17:00:ab:f3:bf:5e:46: 68:18:9c:18:d1:9f:a6:2c:4b:23:e0:5c:10:7c:52: ec:93:f0:bd:4f:cd:f7:a7:fb:b2:f1:86:21:e3:8b: 0b:a8:05:c7:d3:a4:69:c4:69:46:6d:00:8e:1f:d3: cf:62:bf:88:bf:df:55:4b:c4:3b:a3:be:05:4f:5e: 18:8f:62:e1:9b:43:ec:a2:e3:e2:8a:b4:36:d7:2f: a7:47:9b:fa:85:a4:24:cc:90:43:3e:64:0a:c5:5f: 9c:98:0a:ce:ef:0c:c5:7d:95:25:c4:e9:a9:e1:fa: e2:0e:d7:85:ad:be:f8:51:8c:ce:cc:01:4b:67:f7: 49:d7:43:7c:0d:cc:0a:58:22:a5:e0:98:96:b4:02: 71:9c:7e:cd:70:98:c4:8c:e5:65:a2:b2:09:12:10: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:E2:A1:BE:55:02:4F:D4:78:58:69:88:C0:C2:CD:00:9C:71:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/303e7c7b-498d-38d1-b248-ea2a6afa1787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:57:5c:73:50:be:d2:55:a0:07:f1:b0:99:d0:85:0c:45:bb: 38:d1:8e:15:44:6d:c8:85:0b:2a:fe:a1:63:dd:93:07:dd:38: 20:f5:c4:fd:c5:f5:e0:76:f5:ba:5c:86:40:f2:4f:3c:64:49: 7f:2c:a3:e5:c5:01:bd:a8:0a:62:e1:49:ca:40:b7:04:ab:70: 3a:aa:4a:82:bf:4d:74:47:e8:75:16:3b:2c:9b:68:13:2e:79: e7:0e:da:cd:9f:db:c8:95:ee:5a:76:8f:9b:38:e5:bd:68:7c: 6d:2e:8c:94:cc:1a:88:78:0c:53:54:65:f2:1d:a7:61:e4:03: d7:a4:bf:29:70:cf:73:34:6e:dc:c4:3a:8b:a0:27:7b:8a:4e: 20:78:9d:2c:36:fd:73:cd:dd:d7:71:34:80:6a:c3:77:e2:b2: d7:f1:6e:f9:36:4f:5d:8f:60:7d:21:c6:6e:5d:14:a9:fd:d2: d7:ef:c6:de:c9:85:43:50:c9:6f:88:3f:cf:78:56:23:66:e4: 4e:40:72:5d:4b:42:e7:f2:0d:02:4b:00:5e:07:c7:6c:96:b4: 2c:ed:0f:de:34:23:d5:f0:e4:3c:d8:64:72:8c:32:6e:d7:c8: 4c:96:ca:e7:7b:80:17:7e:70:68:cd:d2:d5:66:38:07:20:e4: c5:c0:fc:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYGOXpeuzDSqvGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk Y2M5N2I1MmQtYjVmYi00YWQxLTg2YTEtM2ZhZjQ4ZmQ1ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+ZQ5/KUwKq5z+JrZUPXigd4uho470tJtgIG cpCG37IkoFKFwYNy/i5alA+5KmT823sNS8V8RIVqTKq0l3J0qLsmjXx3brz64EnV bsxsJ2QWniEupDmaaotm8plYKv+DRRcAq/O/XkZoGJwY0Z+mLEsj4FwQfFLsk/C9 T833p/uy8YYh44sLqAXH06RpxGlGbQCOH9PPYr+Iv99VS8Q7o74FT14Yj2Lhm0Ps ouPiirQ21y+nR5v6haQkzJBDPmQKxV+cmArO7wzFfZUlxOmp4friDteFrb74UYzO zAFLZ/dJ10N8DcwKWCKl4JiWtAJxnH7NcJjEjOVlorIJEhCl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHT4qG+VQJP1HhYaYjAws0AnHHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzAzZTdjN2ItNDk4ZC0z OGQxLWIyNDgtZWEyYTZhZmExNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVXXHNQvtJVoAfxsJnQhQxFuzjRjhVEbciFCyr+oWPdkwfdOCD1xP3F 9eB29bpchkDyTzxkSX8so+XFAb2oCmLhScpAtwSrcDqqSoK/TXRH6HUWOyybaBMu eecO2s2f28iV7lp2j5s45b1ofG0ujJTMGoh4DFNUZfIdp2HkA9ekvylwz3M0btzE OougJ3uKTiB4nSw2/XPN3ddxNIBqw3fistfxbvk2T12PYH0hxm5dFKn90tfvxt7J hUNQyW+IP894ViNm5E5Acl1LQufyDQJLAF4Hx2yWtCztD940I9Xw5DzYZHKMMm7X yEyWyud7gBd+cGjN0tVmOAcg5MXA/Kk= -----END CERTIFICATE-----Generated at Wed May 13 11:29:47 2026 by rpki-client