$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38630d77-e577-30ec-bc5b-95d3dc8e45e2.roa File: 38630d77-e577-30ec-bc5b-95d3dc8e45e2.roa (raw, json) Hash identifier: wUhFjSTbk6ArOWqfgIjFH7+9LEyYRyFkrEt6rBO6s0k= Subject key identifier: 05:E5:F2:5A:EB:A7:6A:76:4C:B4:DC:FB:09:F2:81:98:0C:A4:49:F6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB57D38B2C941632F994980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38630d77-e577-30ec-bc5b-95d3dc8e45e2.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.108.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:7d:38:b2:c9:41:63:2f:99:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=7c06087f-0a34-4f8f-8f10-58730bbd1fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:e3:4b:22:fe:3a:39:fb:6d:bc:95:64:68: 96:b2:19:25:95:38:8d:2e:11:ab:75:b3:86:d4:3b: f0:8e:8e:b9:3b:a7:e8:c0:04:27:4e:27:e5:37:35: 68:94:b5:92:2a:17:cb:73:22:13:4e:a2:a3:71:dc: bf:dd:a4:22:31:0d:f9:52:bf:61:32:6a:2c:c5:01: 57:4f:0b:42:e4:5a:a3:c9:e7:6f:ef:e5:d0:c6:52: 6f:e5:40:2c:2c:90:aa:18:c8:39:e4:06:18:e2:12: 05:02:d4:b9:95:88:ad:af:dc:71:35:25:f3:35:42: 20:1b:36:4d:dc:fe:9b:7b:06:75:90:8a:de:10:12: cf:a3:bf:0d:52:c6:81:d4:c5:41:a7:f2:34:05:0f: 8a:7a:a3:66:c9:e7:f9:cd:27:a8:fc:61:02:fb:6a: 90:25:81:2d:07:25:2a:d8:65:e3:56:1e:fa:c2:78: ce:bc:70:a3:f5:61:94:dc:b9:c8:df:32:0c:ec:42: 8d:9a:93:c9:71:7b:7b:b5:bb:cf:71:64:d5:e4:88: da:00:1c:3c:0f:91:84:53:83:d1:cc:c3:f2:5b:f0: 69:da:f5:51:d3:b6:e6:a8:cd:74:58:4e:c5:c2:1e: c6:b0:0f:6b:1d:60:ca:a8:ba:ef:dd:c8:5b:3e:c2: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E5:F2:5A:EB:A7:6A:76:4C:B4:DC:FB:09:F2:81:98:0C:A4:49:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38630d77-e577-30ec-bc5b-95d3dc8e45e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:15:0d:1e:ac:79:4b:a0:4a:ba:7d:d6:8b:78:a8:bc:9e:c4: c1:d5:aa:88:59:08:68:bb:43:23:42:f2:94:62:f4:cc:9a:4f: 1e:ef:ce:0f:c1:92:2a:b2:cb:4d:fc:fb:90:ff:99:c6:3d:fe: 7d:fe:5f:b3:5d:28:2d:43:af:3d:4e:ac:78:a1:08:ae:8d:28: e8:15:c1:69:d2:ac:b8:67:bb:ee:00:81:e3:84:69:ad:fd:83: 50:5c:d2:97:55:ac:27:2a:f0:da:e9:7d:84:4f:27:df:bb:df: b8:bc:b6:56:6a:f0:a2:50:d1:fc:9c:2a:2d:87:4a:ff:6f:35: 8a:a0:9a:9a:c8:e9:12:ac:34:0f:23:3b:42:82:d3:e3:0a:b6: c9:89:b3:48:89:9d:94:85:25:e4:f6:c8:ed:0f:e3:c3:38:12: 2c:f9:c4:63:1a:a4:fa:56:b0:63:a2:2b:ec:9b:c4:ab:73:ae: 36:a2:58:f8:2b:c7:43:25:5e:12:1c:04:42:78:cf:87:7f:ee: 60:70:3b:a9:7f:7c:9c:cf:7c:54:49:ee:d9:13:02:7b:c4:a5: aa:7d:3f:7e:65:d3:b6:a1:c3:da:04:0d:d1:d3:fc:77:bb:bf: 29:77:67:0a:ab:bc:c9:88:9f:12:0c:b5:b8:34:4c:dc:d5:52: 7b:f0:8a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftX04sslBYy+ZSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk N2MwNjA4N2YtMGEzNC00ZjhmLThmMTAtNTg3MzBiYmQxZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8XjSyL+Ojn7bbyVZGiWshkllTiNLhGrdbOG 1Dvwjo65O6fowAQnTiflNzVolLWSKhfLcyITTqKjcdy/3aQiMQ35Ur9hMmosxQFX TwtC5Fqjyedv7+XQxlJv5UAsLJCqGMg55AYY4hIFAtS5lYitr9xxNSXzNUIgGzZN 3P6bewZ1kIreEBLPo78NUsaB1MVBp/I0BQ+KeqNmyef5zSeo/GEC+2qQJYEtByUq 2GXjVh76wnjOvHCj9WGU3LnI3zIM7EKNmpPJcXt7tbvPcWTV5IjaABw8D5GEU4PR zMPyW/Bp2vVR07bmqM10WE7Fwh7GsA9rHWDKqLrv3chbPsL8bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXl8lrrp2p2TLTc+wnygZgMpEn2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg2MzBkNzctZTU3Ny0z MGVjLWJjNWItOTVkM2RjOGU0NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASGxDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMVDR6seUugSrp91ot4qLyexMHVqohZCGi7QyNC8pRi9MyaTx7vzg/B kiqyy038+5D/mcY9/n3+X7NdKC1Drz1OrHihCK6NKOgVwWnSrLhnu+4AgeOEaa39 g1Bc0pdVrCcq8NrpfYRPJ9+737i8tlZq8KJQ0fycKi2HSv9vNYqgmprI6RKsNA8j O0KC0+MKtsmJs0iJnZSFJeT2yO0P48M4Eiz5xGMapPpWsGOiK+ybxKtzrjaiWPgr x0MlXhIcBEJ4z4d/7mBwO6l/fJzPfFRJ7tkTAnvEpap9P35l07ahw9oEDdHT/He7 vyl3ZwqrvMmInxIMtbg0TNzVUnvwimA= -----END CERTIFICATE-----Generated at Wed May 13 04:36:22 2026 by rpki-client