$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5ddc7e-5b08-3084-8486-756a792c15ad.roa File: 3d5ddc7e-5b08-3084-8486-756a792c15ad.roa (raw, json) Hash identifier: +fvXIzlEpuZYsal7CREQdo31Do2P/daBz/lY5c7isjE= Subject key identifier: 55:75:05:33:1B:39:F5:DB:3D:F4:AD:11:69:8D:F9:18:B2:55:EB:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F225D1618FF62C825D9323580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5ddc7e-5b08-3084-8486-756a792c15ad.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 72.106.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:16:18:ff:62:c8:25:d9:32:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=71c44419-6a9f-47e0-8492-170a864e219d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:2d:b5:7d:5d:7b:89:e5:90:8a:11:5c:52: e1:3f:5e:11:97:4a:79:dd:77:c5:b0:eb:95:8d:86: 8b:b5:2c:b7:67:46:c1:41:85:a2:d2:cd:3e:fe:06: b2:ac:28:91:8d:6c:9e:c3:37:13:6c:b4:80:56:b2: 50:96:b8:58:da:dd:92:db:84:85:5e:4a:e4:f0:8b: 2a:0e:39:26:2e:62:0e:39:86:94:03:37:e2:93:1f: bc:66:38:93:20:74:ff:66:9b:53:eb:55:5a:1b:c9: 37:36:91:4d:e8:eb:b1:c7:e0:00:d6:10:2a:72:de: 0c:49:c4:a2:72:77:ea:be:0a:57:21:c7:d8:34:48: d3:e4:29:89:0c:ef:b9:86:2f:fa:50:dc:88:c5:8f: 97:ea:bc:f1:36:2d:fd:f4:ee:77:61:e9:1f:e6:40: 26:c8:8b:fc:79:17:8b:a8:dc:06:d6:a1:e9:6b:93: f5:e8:7c:43:3f:a0:fe:1b:c4:c7:92:ad:aa:66:b2: 04:a8:c4:12:ca:0c:3b:2a:86:18:cb:53:3a:18:91: 5e:0c:df:d1:88:b9:01:ed:57:27:1f:7c:3c:8a:7a: ce:d8:17:e6:0c:27:a8:ea:48:49:ce:17:0d:41:c8: ab:c5:72:30:d4:cd:ac:ae:f3:7e:a1:67:14:30:0b: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:05:33:1B:39:F5:DB:3D:F4:AD:11:69:8D:F9:18:B2:55:EB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5ddc7e-5b08-3084-8486-756a792c15ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:32:e2:af:a4:10:21:8e:1e:bd:9a:23:aa:81:c8:95:d9:b1: 9e:c3:8e:e9:2a:5f:3d:05:d4:79:79:9b:58:4b:f5:64:22:48: f0:47:57:48:56:4a:2c:70:9f:b9:3a:a9:a8:b8:c2:c4:e5:85: c1:41:43:4d:48:92:cf:f0:31:a3:21:e0:de:ac:1b:65:ee:59: f3:24:0d:9c:bc:81:dc:60:1b:77:06:43:85:55:c1:ed:8d:14: 46:1e:e9:7c:df:f2:a1:90:0a:0d:93:a1:8e:e1:d3:be:1b:bb: cf:8c:09:c7:e8:02:1c:80:5e:c1:b6:d0:24:62:e1:eb:10:1a: 3b:06:83:e6:0f:6d:46:d5:bf:b6:f6:3d:c7:47:d1:82:51:64: 92:b0:70:0f:59:33:46:18:37:8e:03:a1:a7:63:87:d3:cd:13: db:9f:af:7e:d8:8b:f4:c4:8f:57:63:9b:f9:87:1f:84:a3:dc: 0e:44:c1:6b:81:19:91:be:e2:07:22:22:73:d7:79:c4:0f:23: 01:82:db:5e:e5:84:7b:7c:44:c0:c0:6e:ea:bb:21:6b:db:31: 4f:57:2d:87:03:9a:8a:be:c2:21:ec:2d:38:aa:d1:23:8a:27: e9:16:c3:ed:df:ef:d9:b2:52:aa:f6:eb:f0:cf:ef:6c:b3:79: 44:2c:de:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXRYY/2LIJdkyNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NzFjNDQ0MTktNmE5Zi00N2UwLTg0OTItMTcwYTg2NGUyMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJottX1de4nlkIoRXFLhP14Rl0p53XfFsOuV jYaLtSy3Z0bBQYWi0s0+/gayrCiRjWyewzcTbLSAVrJQlrhY2t2S24SFXkrk8Isq DjkmLmIOOYaUAzfikx+8ZjiTIHT/ZptT61VaG8k3NpFN6Ouxx+AA1hAqct4MScSi cnfqvgpXIcfYNEjT5CmJDO+5hi/6UNyIxY+X6rzxNi399O53Yekf5kAmyIv8eReL qNwG1qHpa5P16HxDP6D+G8THkq2qZrIEqMQSygw7KoYYy1M6GJFeDN/RiLkB7Vcn H3w8inrO2BfmDCeo6khJzhcNQcirxXIw1M2srvN+oWcUMAsQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV1BTMbOfXbPfStEWmN+RiyVetfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q1ZGRjN2UtNWIwOC0z MDg0LTg0ODYtNzU2YTc5MmMxNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0y4q+kECGOHr2aI6qByJXZsZ7DjukqXz0F1Hl5m1hL9WQiSPBHV0hW Sixwn7k6qai4wsTlhcFBQ01Iks/wMaMh4N6sG2XuWfMkDZy8gdxgG3cGQ4VVwe2N FEYe6Xzf8qGQCg2ToY7h074bu8+MCcfoAhyAXsG20CRi4esQGjsGg+YPbUbVv7b2 PcdH0YJRZJKwcA9ZM0YYN44Doadjh9PNE9ufr37Yi/TEj1djm/mHH4Sj3A5EwWuB GZG+4gciInPXecQPIwGC217lhHt8RMDAbuq7IWvbMU9XLYcDmoq+wiHsLTiq0SOK J+kWw+3f79myUqr26/DP72yzeUQs3sE= -----END CERTIFICATE-----Generated at Tue Sep 29 00:07:02 2026 by rpki-client