$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa File: aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa (raw, json) Hash identifier: OYfX5qYrNSI4en0tjw1qsgQaLQQGMBetyW7xwET5qKk= Subject key identifier: 40:9A:41:DF:A2:1B:A2:80:87:A2:F3:D3:1F:30:39:85:CC:57:14:52 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F225D0ED593924A624A8C0CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 72.107.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:0e:d5:93:92:4a:62:4a:8c:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=82bb8a5e-edee-425f-9cac-d7923f752e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1c:84:2e:73:c4:13:38:d8:aa:ec:df:94:3d: ff:bf:41:6d:81:04:8b:2f:f5:ff:3d:85:12:38:39: 39:6a:11:38:82:1e:7f:cf:a7:26:32:9a:dc:a9:37: 0d:d4:9c:b2:a7:2b:cf:57:98:23:4b:2a:89:83:dc: c6:1b:2c:92:12:c1:ee:78:48:2a:56:32:d1:2f:30: 28:2e:69:16:82:c6:d9:0b:ce:da:8b:4c:4b:77:cb: 62:5e:2a:93:50:e2:e2:c7:ec:0f:27:1a:de:e7:19: 7d:b9:0f:ce:1a:09:92:f1:ea:bf:a6:5d:f3:4e:48: 72:b9:96:27:e3:89:0d:06:6b:96:6f:af:d3:08:3f: 68:b8:25:b2:a2:b5:fe:8c:49:f8:47:46:af:6f:75: 60:07:b1:b8:3c:cb:fc:9d:45:fd:a3:0a:35:bd:89: 68:71:54:7c:0c:ba:ec:f6:4c:cd:43:b4:7d:21:a0: c4:cf:7a:a3:76:0f:8e:bd:b5:4e:88:24:5f:fa:71: b1:cc:7c:9a:7b:c8:f1:d3:fd:a6:86:0c:51:91:bb: f7:0e:c2:43:81:10:eb:d9:be:03:85:82:53:11:ba: 2e:1d:41:a0:30:db:a0:03:7f:45:58:3c:48:09:df: 51:69:72:f3:de:f7:f7:17:bb:f2:65:e3:39:59:03: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:41:DF:A2:1B:A2:80:87:A2:F3:D3:1F:30:39:85:CC:57:14:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa2a3435-0f1c-3bc2-9c04-bab7bd27ea0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:47:df:46:c7:cf:5e:cb:43:52:7e:6d:c1:7a:a9:3e:3b:e4: d8:56:80:9c:00:6c:75:da:2b:a5:20:c3:55:f1:b0:c0:03:f9: 4f:e1:7d:b9:f7:10:a8:c3:ee:ac:08:0a:b7:07:22:1d:1b:4c: 1f:78:04:27:77:5a:85:72:a9:13:b6:a4:ff:ce:e1:a1:1d:a2: 8d:33:ea:a6:c8:4b:fd:6a:7d:30:74:9b:ee:2e:fe:4f:7c:35: 44:95:38:d3:1c:2a:d0:69:b6:28:71:52:f3:84:e8:41:49:a2: 59:ad:ff:06:3e:3b:fe:d9:c0:52:e0:2d:3c:a9:0c:8d:6e:6c: 7f:99:8d:86:4a:ca:a6:b9:fb:76:62:83:0c:8c:64:a7:20:e6: 68:9b:11:23:2e:5e:4e:2f:e6:1f:b1:54:8e:02:57:cd:57:c1: b6:71:14:c6:88:c0:b6:ae:b6:ac:64:06:8d:78:3b:db:0d:73: 0a:14:a2:3b:2f:ea:60:4e:66:f4:7d:ad:9a:d6:3a:5d:c2:10: 50:52:d0:8c:88:5c:6c:87:ec:4d:fa:2c:f1:c6:9e:8e:df:b6: 55:07:0b:4c:c4:26:c4:24:d5:bf:88:d2:d2:5e:12:9d:2c:d5: c8:4c:e6:94:da:d6:d3:79:1e:d2:1a:08:60:55:a2:12:2a:d2: 8d:62:0f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQ7Vk5JKYkqMDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ODJiYjhhNWUtZWRlZS00MjVmLTljYWMtZDc5MjNmNzUyZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxyELnPEEzjYquzflD3/v0FtgQSLL/X/PYUS ODk5ahE4gh5/z6cmMprcqTcN1JyypyvPV5gjSyqJg9zGGyySEsHueEgqVjLRLzAo LmkWgsbZC87ai0xLd8tiXiqTUOLix+wPJxre5xl9uQ/OGgmS8eq/pl3zTkhyuZYn 44kNBmuWb6/TCD9ouCWyorX+jEn4R0avb3VgB7G4PMv8nUX9owo1vYlocVR8DLrs 9kzNQ7R9IaDEz3qjdg+OvbVOiCRf+nGxzHyae8jx0/2mhgxRkbv3DsJDgRDr2b4D hYJTEbouHUGgMNugA39FWDxICd9RaXLz3vf3F7vyZeM5WQN/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECaQd+iG6KAh6Lz0x8wOYXMVxRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWEyYTM0MzUtMGYxYy0z YmMyLTljMDQtYmFiN2JkMjdlYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5H30bHz17LQ1J+bcF6qT475NhWgJwAbHXaK6Ugw1XxsMAD+U/hfbn3 EKjD7qwICrcHIh0bTB94BCd3WoVyqRO2pP/O4aEdoo0z6qbIS/1qfTB0m+4u/k98 NUSVONMcKtBptihxUvOE6EFJolmt/wY+O/7ZwFLgLTypDI1ubH+ZjYZKyqa5+3Zi gwyMZKcg5mibESMuXk4v5h+xVI4CV81XwbZxFMaIwLautqxkBo14O9sNcwoUojsv 6mBOZvR9rZrWOl3CEFBS0IyIXGyH7E36LPHGno7ftlUHC0zEJsQk1b+I0tJeEp0s 1chM5pTa1tN5HtIaCGBVohIq0o1iD/8= -----END CERTIFICATE-----Generated at Thu Sep 24 15:53:55 2026 by rpki-client