$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c22845a-c9eb-3f9c-8303-fc034be1f317.roa File: 5c22845a-c9eb-3f9c-8303-fc034be1f317.roa (raw, json) Hash identifier: qSPpX8DSOAVHxbDwPlaf0H/TmkX1RpX1zGcDqnZf+1o= Subject key identifier: 50:56:AA:30:67:05:7F:1F:8B:FF:E5:73:33:49:48:70:98:C8:05:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB5805962AF6EAD0F498480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c22845a-c9eb-3f9c-8303-fc034be1f317.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.106.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:80:59:62:af:6e:ad:0f:49:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=97a4b0ef-38bd-4e2f-b127-0ae2dfbd1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:67:ea:52:c9:1f:c9:63:ca:c6:c2:5e:6c: 79:4a:33:39:f7:3c:7c:5f:06:fe:e0:f3:6e:6a:ca: 91:3b:fc:6c:4e:2c:c7:53:2d:a8:f4:b2:b0:8e:d3: 21:97:e9:d6:a6:e3:86:ff:be:bf:51:05:0f:40:38: 82:dd:df:ef:a3:bb:2a:35:eb:00:10:9c:a0:7a:e9: dc:db:c1:58:2a:eb:51:93:01:ad:02:2c:ff:7d:f3: 38:d5:50:48:d8:08:32:39:bc:46:08:1a:85:f3:92: 50:0d:ac:9a:0d:ab:b7:da:e8:2e:91:a9:4e:8c:bd: ea:31:75:dd:1c:0b:26:ab:f3:a7:72:6a:fd:9d:44: 08:92:6c:ae:5c:da:61:57:2f:0f:5e:4b:c8:9b:69: 73:52:7c:4b:20:02:5e:a7:63:74:33:5b:f3:14:ce: 83:12:8d:1b:49:50:22:53:a6:be:01:d0:00:dc:ba: 5f:d7:e0:b3:af:2a:d9:3e:f5:97:5b:e8:41:d9:a3: 69:2a:6a:ed:15:77:1d:ce:c2:a2:ff:aa:a5:27:f6: 7b:2e:a9:94:95:30:89:a5:73:a2:c3:b0:a5:56:9d: ad:e7:66:5c:ce:fc:ee:0c:ae:1d:18:b0:1d:c2:03: 6d:59:9e:b2:9f:69:d2:4b:22:d2:50:30:1b:d5:db: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:AA:30:67:05:7F:1F:8B:FF:E5:73:33:49:48:70:98:C8:05:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c22845a-c9eb-3f9c-8303-fc034be1f317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:00:4f:b5:9c:14:25:46:ba:f7:c7:e0:3a:db:08:d0:ed:b3: c4:60:ef:10:9e:6f:a2:ed:25:76:5e:67:53:e9:99:dd:12:4d: 7b:eb:62:2b:86:f6:12:24:4e:ce:3d:51:09:4a:c1:80:ea:dc: 23:65:5b:13:51:2c:57:17:f5:6f:19:1d:5b:6c:03:eb:93:a6: 66:a0:89:1d:b4:4c:6c:ce:63:66:79:10:54:99:f3:68:dd:68: ed:cc:b7:bb:7f:ce:73:fb:6f:8d:0a:54:c9:66:fd:81:d9:d1: 99:e4:a7:cc:79:eb:cd:dc:b4:8b:3c:a8:33:0a:40:f9:77:37: be:2b:03:61:28:d1:04:e1:57:8f:f3:bd:11:20:0c:4d:15:12: cb:96:b7:53:1e:00:30:16:87:11:8c:8f:25:ea:5b:f4:19:f0: 3d:60:df:07:02:ea:86:ad:4b:65:48:7f:3b:59:31:e0:92:a2: 15:e1:b2:2c:54:1a:71:36:de:59:a3:ec:dc:77:b6:2c:d5:57: 58:a3:32:08:90:a0:45:c8:2e:90:4b:b3:1e:77:18:97:f7:41: 8d:16:bf:4f:85:c5:bc:05:67:9b:2f:d4:2e:76:df:4a:bd:12: 57:88:da:2b:48:3e:f1:9b:9b:7d:f3:f6:f4:76:92:84:5c:3e: 6d:da:88:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYBZYq9urQ9JhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk OTdhNGIwZWYtMzhiZC00ZTJmLWIxMjctMGFlMmRmYmQxMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptdn6lLJH8ljysbCXmx5SjM59zx8Xwb+4PNu asqRO/xsTizHUy2o9LKwjtMhl+nWpuOG/76/UQUPQDiC3d/vo7sqNesAEJygeunc 28FYKutRkwGtAiz/ffM41VBI2AgyObxGCBqF85JQDayaDau32ugukalOjL3qMXXd HAsmq/Oncmr9nUQIkmyuXNphVy8PXkvIm2lzUnxLIAJep2N0M1vzFM6DEo0bSVAi U6a+AdAA3Lpf1+CzryrZPvWXW+hB2aNpKmrtFXcdzsKi/6qlJ/Z7LqmUlTCJpXOi w7ClVp2t52ZczvzuDK4dGLAdwgNtWZ6yn2nSSyLSUDAb1dsHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBWqjBnBX8fi//lczNJSHCYyAVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWMyMjg0NWEtYzllYi0z ZjljLTgzMDMtZmMwMzRiZTFmMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQAT7WcFCVGuvfH4DrbCNDts8Rg7xCeb6LtJXZeZ1Ppmd0STXvrYiuG 9hIkTs49UQlKwYDq3CNlWxNRLFcX9W8ZHVtsA+uTpmagiR20TGzOY2Z5EFSZ82jd aO3Mt7t/znP7b40KVMlm/YHZ0Znkp8x5683ctIs8qDMKQPl3N74rA2Eo0QThV4/z vREgDE0VEsuWt1MeADAWhxGMjyXqW/QZ8D1g3wcC6oatS2VIfztZMeCSohXhsixU GnE23lmj7Nx3tizVV1ijMgiQoEXILpBLsx53GJf3QY0Wv0+FxbwFZ5sv1C5230q9 EleI2itIPvGbm33z9vR2koRcPm3aiE0= -----END CERTIFICATE-----Generated at Wed May 13 15:43:00 2026 by rpki-client