$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa File: 5116f738-3a7a-36b6-ac6e-1500d371e106.roa (raw, json) Hash identifier: 09oQuLvXoMfkllMmb9f7stYx4Vfjhv19KIa7u/425qI= Subject key identifier: 09:07:76:AB:8B:BF:B3:0E:78:59:52:11:DA:CE:0B:8D:24:65:16:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4C54A2E8C2BA6E290D43AC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 701 IP address blocks: 72.65.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a2:e8:c2:ba:6e:29:0d:43:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=2e231259-613a-412c-94a0-c1ad0f894f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bd:08:8a:bb:04:21:dd:0b:18:5b:1f:8f:8a: 6e:b2:95:3c:be:82:15:56:71:22:67:85:4e:74:47: 8b:1d:29:b8:59:23:e8:1c:72:20:4b:c4:74:1a:23: 79:ae:0d:f0:3a:b1:d6:be:82:c0:75:b4:82:c9:cf: da:76:1b:75:4d:26:93:b6:5e:f9:fc:45:3b:10:a1: 8b:3b:7d:08:86:ef:a4:53:49:a7:74:ef:ee:eb:b2: d5:1d:75:b9:20:03:9d:95:f2:df:6b:e1:41:6a:7d: 42:09:b7:0d:05:e8:05:e3:82:1b:c7:a2:d4:74:2e: 7a:d2:ab:a1:a5:fa:b9:fd:83:0e:68:e2:ff:63:2a: 8d:b1:5b:d3:d9:5d:e3:c1:19:57:9a:9c:9e:96:47: 70:3e:5f:c9:4a:d5:e2:67:9a:44:0b:4e:1a:0d:f2: 44:41:75:75:cc:48:fb:a7:9e:ec:d3:f0:a0:7b:7b: c1:64:56:32:f1:59:58:37:e5:b8:99:4f:93:4a:e4: b5:ee:76:38:9d:5c:1a:97:93:0e:c4:72:e9:7f:b2: 07:83:c6:51:57:77:d1:04:26:fa:4b:c5:01:00:63: 8b:a3:85:19:da:89:0f:42:1f:96:6e:87:18:91:5c: 95:74:a6:e5:fe:8c:f1:d6:f8:15:94:e8:23:e3:3d: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:76:AB:8B:BF:B3:0E:78:59:52:11:DA:CE:0B:8D:24:65:16:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5116f738-3a7a-36b6-ac6e-1500d371e106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.65.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:da:ec:fd:dd:4a:c8:82:83:eb:1c:42:18:61:b1:be:65:90: a1:1f:11:b1:a9:e0:46:fa:23:d6:58:9a:6d:63:c1:93:bd:eb: 04:9c:7e:30:19:de:f8:94:22:96:60:0f:f3:4f:34:0a:62:a4: 0c:fb:48:41:60:f7:3f:31:02:cd:ec:96:c7:25:bc:30:41:b4: 45:94:02:bc:77:4e:2d:92:7e:21:7d:2f:18:b2:b1:c5:5b:e9: 51:2a:9d:83:9a:17:5a:00:37:0c:dc:1b:4e:7d:a2:95:54:94: 0e:1c:e6:09:b3:e9:64:d0:a7:ec:3c:e2:68:95:c3:52:51:0f: 9d:5d:c0:52:ac:64:28:d4:98:63:4a:db:a1:80:33:87:8a:79: b4:3c:23:81:f0:d9:d9:10:ff:1c:3f:6d:3d:0a:54:88:09:15: ac:b1:78:ba:fa:9a:6c:d7:10:c4:4a:ac:89:7d:81:63:1a:f5: 6f:06:39:41:75:25:91:46:6b:9c:24:f5:fd:72:33:89:67:e7: 21:41:4c:3c:54:cd:ae:84:93:9c:9f:6a:f4:ed:95:15:ed:49: b4:df:64:69:ce:f7:4b:4a:29:4e:22:75:b8:c2:f8:7b:f3:86: c7:d4:c5:ea:fb:e6:60:47:ca:71:46:55:1a:71:bf:f9:1c:0e: 23:c4:5c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKLowrpuKQ1DrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MmUyMzEyNTktNjEzYS00MTJjLTk0YTAtYzFhZDBmODk0ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL0IirsEId0LGFsfj4puspU8voIVVnEiZ4VO dEeLHSm4WSPoHHIgS8R0GiN5rg3wOrHWvoLAdbSCyc/adht1TSaTtl75/EU7EKGL O30Ihu+kU0mndO/u67LVHXW5IAOdlfLfa+FBan1CCbcNBegF44Ibx6LUdC560quh pfq5/YMOaOL/YyqNsVvT2V3jwRlXmpyelkdwPl/JStXiZ5pEC04aDfJEQXV1zEj7 p57s0/Cge3vBZFYy8VlYN+W4mU+TSuS17nY4nVwal5MOxHLpf7IHg8ZRV3fRBCb6 S8UBAGOLo4UZ2okPQh+WbocYkVyVdKbl/ozx1vgVlOgj4z3WjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkHdquLv7MOeFlSEdrOC40kZRYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTExNmY3MzgtM2E3YS0z NmI2LWFjNmUtMTUwMGQzNzFlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSEEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDa7P3dSsiCg+scQhhhsb5lkKEfEbGp4Eb6I9ZYmm1jwZO96wScfjAZ 3viUIpZgD/NPNApipAz7SEFg9z8xAs3slsclvDBBtEWUArx3Ti2SfiF9LxiyscVb 6VEqnYOaF1oANwzcG059opVUlA4c5gmz6WTQp+w84miVw1JRD51dwFKsZCjUmGNK 26GAM4eKebQ8I4Hw2dkQ/xw/bT0KVIgJFayxeLr6mmzXEMRKrIl9gWMa9W8GOUF1 JZFGa5wk9f1yM4ln5yFBTDxUza6Ek5yfavTtlRXtSbTfZGnO90tKKU4idbjC+Hvz hsfUxer75mBHynFGVRpxv/kcDiPEXEQ= -----END CERTIFICATE-----Generated at Fri Jul 24 14:06:15 2026 by rpki-client