$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa File: b38fa417-68e2-35fd-be67-57faa973b58f.roa (raw, json) Hash identifier: gJ7fwZV1UnAwT75ywZugN7KbxD1q2Hg7+AL6RB7ICts= Subject key identifier: 89:4C:0A:E8:5B:1E:21:D9:0B:50:BB:03:5E:3E:E1:83:1B:63:7D:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F225D10240B677788E84CCD60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 72.111.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:10:24:0b:67:77:88:e8:4c:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=311c36d7-04b7-40be-bed5-8e4789684e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:b0:23:67:20:6d:9d:89:bd:a3:10:a9:71: 79:68:46:4d:e9:e2:9d:c2:1f:8f:6b:63:cb:ba:db: 18:11:0b:72:76:1a:7d:60:3f:4c:71:d5:45:14:f4: 2b:f0:5c:2d:78:2a:91:74:34:ec:29:ad:8e:c1:e7: 07:d2:89:e1:92:fb:c6:13:62:be:64:35:9b:36:81: f2:69:99:83:8b:35:9e:88:3b:60:c5:25:03:ba:95: ba:75:10:3d:fb:20:f2:6e:44:55:70:97:88:80:de: dd:8a:61:65:d6:a1:6a:00:24:7c:75:68:09:ba:f4: fb:e1:c6:31:24:4b:2d:7d:8e:fb:03:5a:fb:5b:a7: ef:0f:45:e0:2a:55:95:7c:22:d9:d3:5c:3f:80:42: 28:31:d0:83:a8:d4:6a:7f:52:21:6d:17:75:1c:32: a8:d6:33:7b:7f:f0:b8:d7:2c:01:f4:87:5f:29:d1: c6:20:08:9d:58:ef:17:4e:2c:e0:06:10:6c:b3:b9: d6:ae:2f:92:2b:be:47:e1:e3:ba:af:d1:1b:0b:11: 2d:84:ae:1f:e1:91:9d:32:44:78:14:97:f2:e5:c1: a5:e1:bc:6b:4b:a2:39:f3:29:81:2c:45:2e:6d:4b: 9c:5e:6d:e9:3c:4d:27:ff:d7:32:10:2d:2f:c7:66: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:0A:E8:5B:1E:21:D9:0B:50:BB:03:5E:3E:E1:83:1B:63:7D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b38fa417-68e2-35fd-be67-57faa973b58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.111.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c2:6d:df:62:cd:1f:06:a6:bd:47:69:d0:48:ae:59:5c:69: dc:3f:a1:91:43:51:77:f5:f8:7d:5b:4f:c1:4e:66:99:4d:73: f9:7b:a0:5a:be:9f:b5:a8:eb:87:93:c3:b4:c6:6d:90:07:68: 6a:d4:4b:16:68:7b:ad:2e:54:38:75:24:72:67:1e:f2:70:56: 94:73:14:80:8c:ad:1c:3b:f8:3f:ca:2f:d6:94:25:d7:4a:18: 4f:ad:97:24:f1:37:f6:cb:10:24:2b:5b:b5:fa:e7:cf:34:e7: 95:b6:26:c0:ec:de:f5:cd:c0:2e:ba:60:a8:77:31:0e:28:99: 83:74:66:08:b0:5e:f5:0b:c5:f0:79:06:1c:1b:29:ca:35:8a: c4:96:3e:73:c1:f4:a8:0c:3e:84:f3:e2:37:9e:1f:5d:a0:9f: 9f:5e:20:29:c1:b4:37:22:3d:a9:a7:fd:9d:b2:8e:48:50:c8: 9a:14:88:7b:cc:ce:d5:19:c9:66:98:35:55:cb:7e:23:b6:20: 46:b3:53:5a:d9:3d:f2:e1:0c:94:ea:e9:56:de:90:ae:a9:62: a2:58:53:27:91:09:e2:b0:c4:16:eb:07:e9:42:07:d7:a3:7b: 68:f7:65:33:4a:23:bd:91:11:3e:69:ba:d0:38:f6:6c:ff:f4: 31:b0:17:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXRAkC2d3iOhMzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MzExYzM2ZDctMDRiNy00MGJlLWJlZDUtOGU0Nzg5Njg0ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5awI2cgbZ2JvaMQqXF5aEZN6eKdwh+Pa2PL utsYEQtydhp9YD9McdVFFPQr8FwteCqRdDTsKa2OwecH0onhkvvGE2K+ZDWbNoHy aZmDizWeiDtgxSUDupW6dRA9+yDybkRVcJeIgN7dimFl1qFqACR8dWgJuvT74cYx JEstfY77A1r7W6fvD0XgKlWVfCLZ01w/gEIoMdCDqNRqf1IhbRd1HDKo1jN7f/C4 1ywB9IdfKdHGIAidWO8XTizgBhBss7nWri+SK75H4eO6r9EbCxEthK4f4ZGdMkR4 FJfy5cGl4bxrS6I58ymBLEUubUucXm3pPE0n/9cyEC0vx2Yi8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlMCuhbHiHZC1C7A14+4YMbY33XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM4ZmE0MTctNjhlMi0z NWZkLWJlNjctNTdmYWE5NzNiNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATCbd9izR8Gpr1HadBIrllcadw/oZFDUXf1+H1bT8FOZplNc/l7oFq+ n7Wo64eTw7TGbZAHaGrUSxZoe60uVDh1JHJnHvJwVpRzFICMrRw7+D/KL9aUJddK GE+tlyTxN/bLECQrW7X6588055W2JsDs3vXNwC66YKh3MQ4omYN0ZgiwXvULxfB5 BhwbKco1isSWPnPB9KgMPoTz4jeeH12gn59eICnBtDciPamn/Z2yjkhQyJoUiHvM ztUZyWaYNVXLfiO2IEazU1rZPfLhDJTq6VbekK6pYqJYUyeRCeKwxBbrB+lCB9ej e2j3ZTNKI72RET5putA49mz/9DGwFwg= -----END CERTIFICATE-----Generated at Sun Sep 27 10:43:58 2026 by rpki-client