$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa File: a233d918-3ab6-3819-82aa-baa5dd33fee5.roa (raw, json) Hash identifier: 1oSj3b3QjupQLCRfGobFwvm0QVg0PYgLln1r1KgpMRk= Subject key identifier: 0F:2D:5C:73:F7:4D:61:14:71:F1:9C:81:60:E3:02:EA:1E:5B:E8:83 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB580EBBD70813BF1D37AA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.106.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:80:eb:bd:70:81:3b:f1:d3:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=d08c7a8a-8d8c-46d2-92fd-8bae87d4b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fb:c4:cd:10:1a:0c:3d:40:7f:68:4b:e1:15: bf:80:0f:36:85:89:5d:e5:e3:6c:8d:1c:42:d2:88: 00:17:28:ec:80:95:33:cd:f4:9e:d6:4d:03:ae:56: 18:f1:5d:1b:6e:95:7d:0a:1e:47:4e:6e:7e:c5:c9: bc:83:b5:2f:6e:d9:25:e0:37:6c:cd:88:a0:28:aa: 61:fb:cc:6f:4e:29:2f:89:a1:6e:01:97:97:28:d1: c9:a4:ca:60:4e:2b:79:f1:58:2c:c3:ba:70:c8:55: 3d:4c:c7:30:6d:2e:38:29:83:9c:e3:51:33:fb:b5: 60:47:ad:43:d0:9b:c8:c4:76:f7:31:c8:64:34:b0: 1e:a3:28:88:e6:92:85:22:ab:b9:e4:6d:7d:ce:31: 9c:e3:9a:1e:7f:a4:11:e3:42:ff:bd:9f:ad:8c:09: 11:76:b4:95:b3:7a:98:c6:34:71:d9:f3:0d:b7:77: 13:39:7f:47:57:a6:fd:05:55:96:3b:99:bc:a5:08: 4e:ee:68:da:ae:2f:c6:8b:ed:bc:93:48:37:24:ec: 22:57:0a:31:2d:46:18:d3:88:50:b2:ef:9d:16:63: f6:85:fa:d5:77:6f:76:0e:55:b4:40:7e:9d:e3:97: 3f:8d:b2:4a:8b:65:f8:f5:46:b5:ac:39:16:96:c0: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2D:5C:73:F7:4D:61:14:71:F1:9C:81:60:E3:02:EA:1E:5B:E8:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a233d918-3ab6-3819-82aa-baa5dd33fee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c8:a2:56:28:4b:a0:11:57:df:9a:04:95:2f:7a:e1:64:46: 23:84:e4:fe:bc:ee:44:36:5f:e1:66:3d:4e:ee:2a:be:0f:c0: 31:a4:4d:e4:0e:87:dc:bc:dd:58:58:f5:4d:8a:fb:a9:62:98: 6c:5e:3a:a4:25:cd:07:af:43:1a:0c:23:e5:65:6e:2e:c7:2d: 4b:0d:87:56:8e:06:74:88:06:19:84:16:42:c2:99:46:89:05: f6:ec:e7:e8:47:d9:83:c3:21:6d:41:a5:55:b7:43:6e:3d:bc: ec:0d:b9:33:5e:4b:15:0d:aa:f9:6b:c4:20:41:08:55:bc:cd: a4:13:af:c0:88:e2:25:ef:a7:c1:03:82:95:31:ad:b7:f6:ef: c3:73:6a:c4:c2:c7:5e:03:1e:49:87:da:d2:f3:4d:d0:0c:8b: e0:85:93:22:c7:ba:15:d2:0d:05:de:11:c1:4d:ac:08:8f:fc: 2a:87:e4:c7:01:35:85:8d:3a:0b:3d:21:f4:46:65:20:58:18: 64:13:f4:f3:42:2c:b0:47:dd:81:b5:cc:e4:5f:8e:b6:ab:d7: bd:68:64:82:e5:fd:8a:bf:88:8b:da:24:96:30:bb:08:96:7b: de:95:df:a4:24:46:fa:80:0d:04:28:a7:92:c9:b5:f9:2e:3d: 9f:5f:30:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYDrvXCBO/HTeqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ZDA4YzdhOGEtOGQ4Yy00NmQyLTkyZmQtOGJhZTg3ZDRiNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPvEzRAaDD1Af2hL4RW/gA82hYld5eNsjRxC 0ogAFyjsgJUzzfSe1k0DrlYY8V0bbpV9Ch5HTm5+xcm8g7Uvbtkl4DdszYigKKph +8xvTikviaFuAZeXKNHJpMpgTit58Vgsw7pwyFU9TMcwbS44KYOc41Ez+7VgR61D 0JvIxHb3MchkNLAeoyiI5pKFIqu55G19zjGc45oef6QR40L/vZ+tjAkRdrSVs3qY xjRx2fMNt3cTOX9HV6b9BVWWO5m8pQhO7mjari/Gi+28k0g3JOwiVwoxLUYY04hQ su+dFmP2hfrVd292DlW0QH6d45c/jbJKi2X49Ua1rDkWlsD8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8tXHP3TWEUcfGcgWDjAuoeW+iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIzM2Q5MTgtM2FiNi0z ODE5LTgyYWEtYmFhNWRkMzNmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDIolYoS6ARV9+aBJUveuFkRiOE5P687kQ2X+FmPU7uKr4PwDGkTeQO h9y83VhY9U2K+6limGxeOqQlzQevQxoMI+Vlbi7HLUsNh1aOBnSIBhmEFkLCmUaJ Bfbs5+hH2YPDIW1BpVW3Q249vOwNuTNeSxUNqvlrxCBBCFW8zaQTr8CI4iXvp8ED gpUxrbf278NzasTCx14DHkmH2tLzTdAMi+CFkyLHuhXSDQXeEcFNrAiP/CqH5McB NYWNOgs9IfRGZSBYGGQT9PNCLLBH3YG1zORfjrar171oZILl/Yq/iIvaJJYwuwiW e96V36QkRvqADQQop5LJtfkuPZ9fMCo= -----END CERTIFICATE-----Generated at Wed May 13 13:16:07 2026 by rpki-client