$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json) Hash identifier: d9uIpmr25+YFF5p9PGCNMKawxEMo/13cseM2FSGDd6U= Subject key identifier: A1:A3:64:60:D0:70:7F:9E:DC:5D:72:5A:01:B8:71:4E:83:DC:47:55 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB579BBE11A037D3B746800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.107.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:79:bb:e1:1a:03:7d:3b:74:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=9aa7d995-7644-46ab-9364-ac2500eb6ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:f6:0c:33:31:eb:bf:f1:70:92:b5:43:92: 04:4c:76:d9:a1:2d:96:bc:da:17:30:07:01:07:18: c3:42:c2:db:8f:31:ae:41:a7:6d:c0:02:db:df:f0: 60:20:9c:c7:a3:c6:a4:c7:49:04:d7:7a:22:9d:1c: 1c:e3:56:df:46:d8:15:29:74:e7:a2:e0:0b:9b:ce: d8:8d:4e:1e:b4:f9:d2:aa:5c:3d:de:b1:62:80:5a: 9e:b3:46:4f:d4:70:7f:ec:ef:fb:69:2c:f6:6d:af: db:31:a5:3f:eb:54:43:c2:93:4c:e9:46:ea:73:cf: cb:d9:f9:07:d6:26:37:25:d0:dc:2e:6b:df:c2:18: 87:1f:93:d5:c4:65:84:1b:3e:97:67:02:3c:07:c5: 28:19:eb:61:2c:14:5c:6b:d6:b5:0c:3e:5d:72:42: 10:6d:f4:5c:b9:5c:f8:fd:c1:a8:6c:17:16:2c:e6: f5:39:69:84:d8:a9:3b:bf:50:5b:eb:82:f5:0e:8f: 11:1a:91:ed:5a:a8:7e:d9:53:15:cb:ed:b2:19:bb: 37:0f:34:c9:5a:44:7f:1d:06:3b:1e:29:8c:59:17: a4:79:a7:d8:94:b7:5c:6a:64:52:8a:8f:f8:80:73: 1c:bc:ed:ab:ab:26:28:c6:39:dc:e6:69:05:3f:e4: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A3:64:60:D0:70:7F:9E:DC:5D:72:5A:01:B8:71:4E:83:DC:47:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:44:db:04:e3:87:6b:08:b4:f4:c2:28:93:d0:23:f6:c8:ef: cd:c4:9d:28:c7:0d:be:55:6e:8b:a7:97:33:fb:be:56:d3:56: 3c:de:68:0a:ed:cf:f4:74:15:75:49:bb:ba:05:c0:5f:cc:97: 9b:28:a0:97:29:48:58:bb:32:c6:b3:15:90:28:e4:44:7e:d8: c2:6f:0a:f9:42:6e:79:28:c8:8a:05:6d:37:a1:fe:40:90:84: d7:a3:0b:f9:0c:ea:fd:53:65:e1:da:b4:75:48:8d:e0:2d:27: f7:ef:51:fb:d1:6b:ca:44:5e:45:32:b8:f5:c8:89:1c:2c:f1: 8b:30:a4:bc:c5:87:a7:57:fe:0b:ab:f4:db:0d:c0:dc:7f:fd: d3:d7:ac:85:91:e1:8e:b7:53:bb:34:bb:1f:01:20:6f:8d:76: 22:cd:7c:8a:9f:5f:e1:89:95:8e:50:5a:8b:b0:c6:60:f6:65: c8:44:3f:ba:39:d8:8b:af:c7:d6:41:04:c1:ba:50:9c:81:d5: 72:0b:1d:a0:08:1f:22:7f:6f:e8:01:91:0e:46:86:53:65:9c: 70:d0:20:33:d2:86:d0:8a:a4:bd:64:73:8a:76:a0:ce:02:23: ed:6f:12:49:83:2b:16:49:41:88:cf:4a:9a:27:6a:c5:2a:bb: 4a:e8:42:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXm74RoDfTt0aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk OWFhN2Q5OTUtNzY0NC00NmFiLTkzNjQtYWMyNTAwZWI2ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEb2DDMx67/xcJK1Q5IETHbZoS2WvNoXMAcB BxjDQsLbjzGuQadtwALb3/BgIJzHo8akx0kE13oinRwc41bfRtgVKXTnouALm87Y jU4etPnSqlw93rFigFqes0ZP1HB/7O/7aSz2ba/bMaU/61RDwpNM6Ubqc8/L2fkH 1iY3JdDcLmvfwhiHH5PVxGWEGz6XZwI8B8UoGethLBRca9a1DD5dckIQbfRcuVz4 /cGobBcWLOb1OWmE2Kk7v1Bb64L1Do8RGpHtWqh+2VMVy+2yGbs3DzTJWkR/HQY7 HimMWRekeafYlLdcamRSio/4gHMcvO2rqyYoxjnc5mkFP+QdTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGjZGDQcH+e3F1yWgG4cU6D3EdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEyYTM0MzUtMGYxYy0z YmMyLTljMDQtYmFiN2JkMjdlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJE2wTjh2sItPTCKJPQI/bI783EnSjHDb5VbounlzP7vlbTVjzeaArt z/R0FXVJu7oFwF/Ml5sooJcpSFi7MsazFZAo5ER+2MJvCvlCbnkoyIoFbTeh/kCQ hNejC/kM6v1TZeHatHVIjeAtJ/fvUfvRa8pEXkUyuPXIiRws8YswpLzFh6dX/gur 9NsNwNx//dPXrIWR4Y63U7s0ux8BIG+NdiLNfIqfX+GJlY5QWouwxmD2ZchEP7o5 2Iuvx9ZBBMG6UJyB1XILHaAIHyJ/b+gBkQ5GhlNlnHDQIDPShtCKpL1kc4p2oM4C I+1vEkmDKxZJQYjPSponasUqu0roQgw= -----END CERTIFICATE-----Generated at Wed May 13 07:47:15 2026 by rpki-client