$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb7f05c2-dccd-317b-8edf-6766560805f0.roa File: bb7f05c2-dccd-317b-8edf-6766560805f0.roa (raw, json) Hash identifier: aQ+KrXS3U1FZv+EooPRxArH8Dp27P/jQPxhmh16NN0o= Subject key identifier: 65:0A:48:D0:F4:D7:7F:32:F0:45:22:81:CC:10:8D:32:AE:B2:A0:83 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D948AA801C5645FA6B55B7400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb7f05c2-dccd-317b-8edf-6766560805f0.roa Signing time: Tue 21 Apr 2026 13:00:31 +0000 ROA not before: Tue 21 Apr 2026 13:00:31 +0000 ROA not after: Mon 20 Jul 2026 13:00:31 +0000 asID: 6167 IP address blocks: 72.122.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8a:a8:01:c5:64:5f:a6:b5:5b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 21 13:00:31 2026 GMT Not After : Jul 20 13:00:31 2026 GMT Subject: CN=8ca7dfa9-2f07-45c5-a34a-5ee718009b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:4f:3b:42:b3:7c:2b:66:ac:01:68:86:dc: bb:83:a9:c2:51:81:88:a3:27:c4:62:4a:2d:e6:44: a4:9b:37:b8:e6:d5:b0:44:78:3f:41:95:18:f6:93: e7:49:14:83:f2:21:4b:45:d7:cc:ad:5b:98:c1:f0: cd:21:25:fd:26:d7:bf:15:e3:af:3b:81:6d:0b:7a: 93:1f:c8:bc:bc:f4:83:21:13:14:ca:8e:95:02:e4: cb:d6:47:7c:2e:db:bb:eb:5e:d4:68:3e:33:4d:53: 97:cf:a6:e8:d6:6c:c0:15:7f:20:46:1e:24:f8:fd: ed:55:cd:3f:6c:c2:93:51:6f:22:3a:47:7d:62:07: 4f:b7:a4:b4:92:02:85:e4:0f:f1:91:6d:8d:4e:b0: 82:91:ba:50:b4:d1:1e:17:39:37:fc:ca:45:c7:9a: d0:5c:da:8b:0a:43:a9:8a:9c:59:aa:14:30:c4:07: ee:ad:98:20:5c:7a:b4:29:82:ed:3e:8f:24:03:2f: aa:34:1b:ca:03:f5:6d:90:44:11:a4:1f:3a:7b:c8: 3a:7c:b2:4a:de:61:b7:66:5c:c9:0a:ab:be:ac:28: 33:08:24:83:35:00:67:c4:b2:e3:29:07:5a:a9:8c: 44:16:65:24:23:6a:48:3f:b5:ec:cf:aa:6a:ee:e0: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:48:D0:F4:D7:7F:32:F0:45:22:81:CC:10:8D:32:AE:B2:A0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb7f05c2-dccd-317b-8edf-6766560805f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.122.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:46:1c:93:99:1f:e4:07:7c:de:17:b0:bb:58:e1:58:e9:f3: 04:0d:6c:bd:78:7c:3b:3c:1c:97:61:62:a1:71:a6:ef:47:21: 96:18:a5:e5:c7:f0:30:40:64:ca:33:75:ae:eb:4e:88:c7:37: 83:b4:c7:1e:2c:7c:60:ee:71:59:57:06:3a:6e:66:17:fe:29: cc:b7:ba:5c:11:a9:d2:c6:82:e6:35:bd:67:59:bd:60:f7:79: 58:84:ed:c2:41:96:13:cf:0f:81:bd:1d:0f:60:c8:c4:65:f5: a6:19:1d:97:53:ee:c4:4f:38:b5:02:50:fc:4c:91:9f:58:1b: e8:1d:97:11:e7:aa:5c:50:41:77:b3:de:a4:8a:0d:4f:e3:d0: 14:f5:d5:75:b4:c0:c2:05:1a:c3:28:28:fe:41:ed:32:96:6d: d7:ce:3c:2b:db:0c:c9:9e:38:92:5c:f6:ae:d0:e1:fe:c4:16: 9d:bf:3d:57:31:20:35:6e:a9:a1:22:4d:8b:95:25:f7:ac:a2: 11:27:78:cd:cb:a8:2b:70:7a:ce:64:01:b1:db:04:85:0a:3c: 71:cf:e2:25:09:84:83:80:27:0d:93:77:71:36:5a:60:8e:84: e5:f3:89:32:22:46:5f:3f:76:2f:37:b4:6c:e2:5d:82:12:11: 56:70:ec:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiqgBxWRfprVbdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk OGNhN2RmYTktMmYwNy00NWM1LWEzNGEtNWVlNzE4MDA5YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3FPO0KzfCtmrAFohty7g6nCUYGIoyfEYkot 5kSkmze45tWwRHg/QZUY9pPnSRSD8iFLRdfMrVuYwfDNISX9Jte/FeOvO4FtC3qT H8i8vPSDIRMUyo6VAuTL1kd8Ltu7617UaD4zTVOXz6bo1mzAFX8gRh4k+P3tVc0/ bMKTUW8iOkd9YgdPt6S0kgKF5A/xkW2NTrCCkbpQtNEeFzk3/MpFx5rQXNqLCkOp ipxZqhQwxAfurZggXHq0KYLtPo8kAy+qNBvKA/VtkEQRpB86e8g6fLJK3mG3ZlzJ Cqu+rCgzCCSDNQBnxLLjKQdaqYxEFmUkI2pIP7Xsz6pq7uA8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUKSND0138y8EUigcwQjTKusqCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmI3ZjA1YzItZGNjZC0z MTdiLThlZGYtNjc2NjU2MDgwNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSHrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExGHJOZH+QHfN4XsLtY4Vjp8wQNbL14fDs8HJdhYqFxpu9HIZYYpeXH 8DBAZMozda7rTojHN4O0xx4sfGDucVlXBjpuZhf+Kcy3ulwRqdLGguY1vWdZvWD3 eViE7cJBlhPPD4G9HQ9gyMRl9aYZHZdT7sRPOLUCUPxMkZ9YG+gdlxHnqlxQQXez 3qSKDU/j0BT11XW0wMIFGsMoKP5B7TKWbdfOPCvbDMmeOJJc9q7Q4f7EFp2/PVcx IDVuqaEiTYuVJfesohEneM3LqCtwes5kAbHbBIUKPHHP4iUJhIOAJw2Td3E2WmCO hOXziTIiRl8/di83tGziXYISEVZw7KE= -----END CERTIFICATE-----Generated at Wed May 13 12:15:06 2026 by rpki-client