$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa File: aa02fca3-26d8-3669-8782-539da2332fb0.roa (raw, json) Hash identifier: 2RUjMOFUGNG/bLVKgpoCrHOqw9U2wNxa5OyvpZ4319M= Subject key identifier: 22:EF:02:76:AC:37:6C:20:44:2D:98:24:74:F9:C0:2C:23:EA:A9:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F225D166114BD0A591DA96400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 72.107.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:16:61:14:bd:0a:59:1d:a9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=a971147b-f77c-4a35-870e-ee122efe08df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:60:21:d4:0e:ad:6b:02:fa:98:c0:9c:37: 72:e2:b5:25:9c:ad:3c:1e:ff:1b:ef:6e:c0:43:de: dd:26:a0:e4:03:55:8a:cf:40:5f:a7:a8:49:5c:63: 79:b8:ba:6b:83:e9:94:bc:0a:a4:62:32:ed:df:1b: 7f:d2:b7:60:d0:f9:7d:f6:37:6f:fc:d8:ec:c9:d1: 5f:7c:69:1f:c6:7f:11:27:9e:3d:cc:1c:65:c5:2f: 04:b8:5c:c3:78:06:e3:e6:32:bb:78:07:a3:c8:45: a3:95:09:9a:d6:78:56:19:97:67:ec:b5:8c:3e:24: 31:03:9e:5d:4a:a6:c2:a5:14:bc:54:83:ff:02:23: 48:6b:9f:e3:50:16:73:40:17:60:48:b1:0c:ad:f5: 43:8c:61:19:68:d5:83:4f:ad:f3:74:12:a5:a2:d9: 29:b6:6f:02:03:84:ac:46:19:91:78:55:36:0f:f2: 57:b2:35:ff:9e:48:e9:a8:39:39:d7:7d:ca:b9:be: 10:df:61:5d:ad:41:e2:49:61:f4:03:a3:fc:47:46: e5:09:62:e2:c9:20:f4:c2:c0:9f:fe:ad:67:f0:cf: 9c:46:b2:13:43:0b:07:c0:79:c4:de:84:27:11:4c: f7:78:2e:0c:d6:ae:86:49:a0:f0:f1:75:c1:cf:a2: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:02:76:AC:37:6C:20:44:2D:98:24:74:F9:C0:2C:23:EA:A9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa02fca3-26d8-3669-8782-539da2332fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bd:3a:f3:0a:7f:f6:e6:6c:a1:41:40:c8:1f:86:18:78:c5: c2:ab:40:3c:8d:3c:53:40:11:3c:7a:f6:5c:2f:70:1d:0f:62: b0:13:47:0e:b2:50:48:31:f7:2c:d6:97:28:26:5d:16:de:64: f8:f5:cd:a5:fd:0a:0a:a7:8f:36:c4:b2:56:d1:d2:04:49:4b: 72:4d:0a:78:a1:01:6a:8a:cf:61:4b:bf:ac:08:c7:d4:71:46: 3a:67:0d:dd:c8:b0:93:35:06:63:d7:09:d9:b5:4b:66:c5:0b: 1b:9a:49:98:4f:b3:7d:92:17:c5:bf:5c:99:a0:47:94:3a:75: 3d:7d:7b:0d:93:16:1d:c5:d7:38:2c:7a:41:62:e8:03:56:a6: 16:5a:0e:2b:d0:f2:0b:47:38:bb:2a:a4:06:33:bf:a1:40:4c: 6e:01:c8:83:77:58:2d:bb:2a:7f:84:69:3b:d3:b9:f8:e9:62: 0a:6f:8d:8b:b9:60:b2:de:b3:87:04:46:3c:6e:49:b4:a0:cc: 1d:79:0b:1a:d6:c2:36:bc:4e:5e:04:95:8c:e8:eb:e2:db:4d: 00:20:50:48:5f:77:b1:ee:51:1e:13:fb:ae:24:6e:dc:ac:ed: 4c:24:a2:88:36:1a:39:6c:03:78:06:40:21:91:e7:7f:c5:9c: f2:fc:de:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXRZhFL0KWR2pZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk YTk3MTE0N2ItZjc3Yy00YTM1LTg3MGUtZWUxMjJlZmUwOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQFgIdQOrWsC+pjAnDdy4rUlnK08Hv8b727A Q97dJqDkA1WKz0Bfp6hJXGN5uLprg+mUvAqkYjLt3xt/0rdg0Pl99jdv/NjsydFf fGkfxn8RJ549zBxlxS8EuFzDeAbj5jK7eAejyEWjlQma1nhWGZdn7LWMPiQxA55d SqbCpRS8VIP/AiNIa5/jUBZzQBdgSLEMrfVDjGEZaNWDT63zdBKlotkptm8CA4Ss RhmReFU2D/JXsjX/nkjpqDk5133Kub4Q32FdrUHiSWH0A6P8R0blCWLiySD0wsCf /q1n8M+cRrITQwsHwHnE3oQnEUz3eC4M1q6GSaDw8XXBz6IyEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLvAnasN2wgRC2YJHT5wCwj6qlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEwMmZjYTMtMjZkOC0z NjY5LTg3ODItNTM5ZGEyMzMyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq9OvMKf/bmbKFBQMgfhhh4xcKrQDyNPFNAETx69lwvcB0PYrATRw6y UEgx9yzWlygmXRbeZPj1zaX9CgqnjzbEslbR0gRJS3JNCnihAWqKz2FLv6wIx9Rx RjpnDd3IsJM1BmPXCdm1S2bFCxuaSZhPs32SF8W/XJmgR5Q6dT19ew2TFh3F1zgs ekFi6ANWphZaDivQ8gtHOLsqpAYzv6FATG4ByIN3WC27Kn+EaTvTufjpYgpvjYu5 YLLes4cERjxuSbSgzB15CxrWwja8Tl4ElYzo6+LbTQAgUEhfd7HuUR4T+64kbtys 7Uwkoog2GjlsA3gGQCGR53/FnPL83iw= -----END CERTIFICATE-----Generated at Thu Oct 1 16:04:35 2026 by rpki-client