$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa File: 9d4a5872-06fd-3b49-9181-214a58a6db46.roa (raw, json) Hash identifier: BHTEr6q7pFtsdgKo2UTw2FiUh9nMzflj7bj1e0d3v7g= Subject key identifier: B6:87:5E:79:C1:BF:E3:99:47:A9:E1:83:61:4B:23:E7:8D:EE:2C:30 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB57AB64BE273CFD5AD7DA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.109.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:7a:b6:4b:e2:73:cf:d5:ad:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=96924178-4f7e-4ccf-8ef8-cc5f9cd71d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8f:32:ab:50:2a:a4:5d:a1:a3:6b:ec:13:c5: 1c:54:df:16:8c:a5:79:7c:7b:44:fa:8f:cb:51:6d: a2:7c:38:48:1d:f7:dc:47:53:5c:76:62:7c:ce:57: b4:17:21:67:94:26:70:af:f1:e2:05:a9:e1:a0:04: 35:61:63:96:e7:31:90:9a:88:e9:99:3f:25:5e:f3: c4:ab:07:83:06:d3:53:0b:d3:3a:e9:c5:ad:c8:fb: 78:44:3f:5c:ca:01:b4:6e:d8:89:37:51:ce:35:b2: 76:e5:87:ef:25:b6:eb:15:d3:2b:2c:52:f2:c2:97: f3:e4:10:8f:3e:8f:b3:be:e9:7e:14:8e:2f:1f:d8: 4d:17:6e:e0:ab:90:61:8e:1c:a6:70:4b:92:f6:67: 2c:bd:b1:7f:ed:fd:4e:93:95:f8:0f:04:31:34:97: 48:a5:74:39:68:cd:d7:04:89:39:5a:2c:5d:af:87: fc:3d:7c:7c:16:8b:9c:78:44:e8:33:1c:5e:d3:bf: 41:55:59:92:ef:6c:3b:51:04:4b:a1:ac:88:79:8e: 1a:78:ff:72:99:79:c2:e9:cb:9f:2d:ce:ca:59:d2: 19:cb:3e:21:db:74:9c:f6:d3:9e:a9:91:39:c1:fb: 48:6d:6a:9e:eb:39:b9:05:e2:bc:20:5c:b8:23:30: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:5E:79:C1:BF:E3:99:47:A9:E1:83:61:4B:23:E7:8D:EE:2C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d4a5872-06fd-3b49-9181-214a58a6db46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.109.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:25:2b:a2:4f:d5:84:e4:44:bc:7c:00:15:a0:c2:2e:fe:21: ad:77:56:24:e0:5c:83:6d:66:4c:f1:c3:d2:59:7d:21:a2:ba: 53:d9:a3:db:2e:fa:75:0e:7f:06:04:21:16:4e:c5:c1:9c:c2: 28:d1:75:f3:14:3e:4c:81:1c:68:c5:e9:62:53:d9:e8:2c:65: 71:aa:f7:63:fc:b6:e0:fc:97:96:0d:b2:f8:36:8f:6c:0f:a4: 9f:56:76:cd:7e:e6:d4:8a:d3:b8:d6:b0:e6:9a:60:70:a1:89: 76:55:c3:52:d2:f5:f9:91:3e:e2:e8:a2:34:c5:19:6e:68:10: ff:5f:18:f1:60:83:8f:d6:35:b8:a9:d3:c2:63:9b:5c:69:75: 2d:36:98:19:aa:50:6b:37:60:71:83:6f:0b:35:8c:20:44:2d: ad:95:c5:7c:04:af:23:b0:67:0f:f7:1a:4b:29:00:dc:87:fe: 72:f0:b8:a4:ad:b0:f3:d1:07:33:8c:b0:f2:e4:3c:c5:91:90: 9d:71:b2:28:e4:e6:a7:f2:a9:0c:e1:3a:1e:74:97:86:bf:6c: 7f:97:2a:6b:7d:66:02:f6:f1:96:14:67:39:79:b4:b4:0a:6c: 2f:48:45:9c:ac:81:a1:93:d4:99:3b:5a:8d:4e:b3:44:16:18: b9:5e:24:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXq2S+Jzz9WtfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk OTY5MjQxNzgtNGY3ZS00Y2NmLThlZjgtY2M1ZjljZDcxZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y8yq1AqpF2ho2vsE8UcVN8WjKV5fHtE+o/L UW2ifDhIHffcR1NcdmJ8zle0FyFnlCZwr/HiBanhoAQ1YWOW5zGQmojpmT8lXvPE qweDBtNTC9M66cWtyPt4RD9cygG0btiJN1HONbJ25YfvJbbrFdMrLFLywpfz5BCP Po+zvul+FI4vH9hNF27gq5BhjhymcEuS9mcsvbF/7f1Ok5X4DwQxNJdIpXQ5aM3X BIk5Wixdr4f8PXx8FouceEToMxxe079BVVmS72w7UQRLoayIeY4aeP9ymXnC6cuf Lc7KWdIZyz4h23Sc9tOeqZE5wftIbWqe6zm5BeK8IFy4IzAejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaHXnnBv+OZR6nhg2FLI+eN7iwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWQ0YTU4NzItMDZmZC0z YjQ5LTkxODEtMjE0YTU4YTZkYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8lK6JP1YTkRLx8ABWgwi7+Ia13ViTgXINtZkzxw9JZfSGiulPZo9su +nUOfwYEIRZOxcGcwijRdfMUPkyBHGjF6WJT2egsZXGq92P8tuD8l5YNsvg2j2wP pJ9Wds1+5tSK07jWsOaaYHChiXZVw1LS9fmRPuLoojTFGW5oEP9fGPFgg4/WNbip 08Jjm1xpdS02mBmqUGs3YHGDbws1jCBELa2VxXwEryOwZw/3GkspANyH/nLwuKSt sPPRBzOMsPLkPMWRkJ1xsijk5qfyqQzhOh50l4a/bH+XKmt9ZgL28ZYUZzl5tLQK bC9IRZysgaGT1Jk7Wo1Os0QWGLleJLc= -----END CERTIFICATE-----Generated at Wed May 13 14:01:27 2026 by rpki-client