$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa File: d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa (raw, json) Hash identifier: g/1/kr0jvmwXNPm4a6bHLUcN6MedNYCNqA0YM1C9bGg= Subject key identifier: B8:94:60:BA:5A:57:F4:4D:C6:CA:63:CC:7E:4C:B7:83:A8:69:5D:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB5819A566535CE748F4680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.106.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:81:9a:56:65:35:ce:74:8f:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=3d8c41a3-fc9a-43d1-ae80-421028ab2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:53:9a:49:ca:c3:83:98:6f:98:c7:67:3a: 05:3e:4c:96:08:ac:4c:e1:60:ef:93:38:47:ea:6e: cc:66:82:e5:5b:6a:25:df:9a:5a:5b:b7:d4:7b:96: 37:41:ca:47:20:1b:31:85:d0:79:fc:cc:ab:db:dc: bc:de:1e:b7:57:5b:41:74:36:0b:bf:b4:4d:0f:42: ac:59:d5:95:58:a7:86:f1:95:42:9f:d1:6c:e9:17: ac:12:9c:2d:ea:fb:a2:b8:d7:19:28:a0:ad:21:b0: 22:89:ab:ee:cc:1f:b7:69:42:ea:5f:4d:c2:71:29: 34:3e:95:fa:36:ba:56:4d:73:5e:01:83:d1:27:07: 9a:a4:f2:c4:a4:bc:c0:95:1f:98:d5:33:eb:a2:04: 80:09:84:bb:06:b2:a0:67:16:6f:ea:40:04:a7:76: 4c:20:df:8e:12:37:dc:d5:fe:97:be:dc:64:6c:4f: 12:d1:54:9c:7e:29:6e:e7:65:d2:76:3e:24:04:0e: 11:5c:09:9c:a0:e9:ee:59:18:6f:6c:53:78:5b:09: 8c:88:bb:b3:31:0c:06:da:44:af:98:36:7f:ed:25: ad:85:fb:56:71:f3:6f:5a:06:4b:29:70:00:5a:2f: 35:1f:56:0d:24:17:65:2d:14:ac:7d:99:b1:cd:a3: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:60:BA:5A:57:F4:4D:C6:CA:63:CC:7E:4C:B7:83:A8:69:5D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5f9b34f-e85a-344c-bcec-e25de400cc5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.106.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:76:ea:6c:33:66:fb:c4:2d:f5:59:11:9a:22:2f:e7:db:cf: 7d:87:b5:d6:e1:c2:e8:ed:ed:be:0f:82:e8:72:7e:b4:b7:21: 16:b4:f5:85:2b:d1:da:29:e5:7a:12:77:20:64:a8:01:cd:21: 17:4f:2f:2a:09:76:30:3a:da:14:52:d7:b4:2a:5e:e5:07:c7: ad:89:9d:e9:bc:e8:64:5b:e7:88:e4:3e:41:e4:ca:2b:aa:52: 57:7c:21:ce:90:1c:5a:e6:8f:63:e1:5d:2b:f8:cb:ff:3b:68: fa:8b:15:29:1a:3d:c3:46:79:61:02:5a:c4:0a:23:41:33:d2: d0:bc:5a:59:e3:bd:19:cc:35:8d:c4:9d:a2:13:c3:92:10:db: f0:42:82:2a:8b:88:3f:14:5b:65:47:46:19:5e:6c:c1:03:34: 95:ee:aa:5e:73:27:0c:c1:4f:bc:c7:1e:8b:4c:30:16:10:f4: 15:fe:60:76:a7:79:22:7d:b2:6b:20:93:51:42:cd:60:9e:38: a1:88:13:ba:55:4b:38:ef:4c:8e:27:4b:9b:9c:54:b6:2a:0e: fe:72:80:89:ba:66:d3:b9:44:66:2c:69:ae:ec:8d:25:a1:01: c3:c3:3b:52:ee:35:05:1c:53:fa:03:10:b2:ca:ac:74:2e:aa: 9c:cc:93:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYGaVmU1znSPRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk M2Q4YzQxYTMtZmM5YS00M2QxLWFlODAtNDIxMDI4YWIyZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kdTmknKw4OYb5jHZzoFPkyWCKxM4WDvkzhH 6m7MZoLlW2ol35paW7fUe5Y3QcpHIBsxhdB5/Myr29y83h63V1tBdDYLv7RND0Ks WdWVWKeG8ZVCn9Fs6ResEpwt6vuiuNcZKKCtIbAiiavuzB+3aULqX03CcSk0PpX6 NrpWTXNeAYPRJweapPLEpLzAlR+Y1TProgSACYS7BrKgZxZv6kAEp3ZMIN+OEjfc 1f6XvtxkbE8S0VScfilu52XSdj4kBA4RXAmcoOnuWRhvbFN4WwmMiLuzMQwG2kSv mDZ/7SWthftWcfNvWgZLKXAAWi81H1YNJBdlLRSsfZmxzaNKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiUYLpaV/RNxspjzH5Mt4OoaV0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVmOWIzNGYtZTg1YS0z NDRjLWJjZWMtZTI1ZGU0MDBjYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESGqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALN26mwzZvvELfVZEZoiL+fbz32Htdbhwujt7b4PguhyfrS3IRa09YUr 0dop5XoSdyBkqAHNIRdPLyoJdjA62hRS17QqXuUHx62Jnem86GRb54jkPkHkyiuq Uld8Ic6QHFrmj2PhXSv4y/87aPqLFSkaPcNGeWECWsQKI0Ez0tC8WlnjvRnMNY3E naITw5IQ2/BCgiqLiD8UW2VHRhlebMEDNJXuql5zJwzBT7zHHotMMBYQ9BX+YHan eSJ9smsgk1FCzWCeOKGIE7pVSzjvTI4nS5ucVLYqDv5ygIm6ZtO5RGYsaa7sjSWh AcPDO1LuNQUcU/oDELLKrHQuqpzMk4U= -----END CERTIFICATE-----Generated at Wed May 13 05:06:33 2026 by rpki-client