$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa File: fac4595a-40a4-39c1-bd5c-b7209f740889.roa (raw, json) Hash identifier: E8Y+enFEjOeTiIg3vnB00rQXXqMvqg3myXU6k27W7k4= Subject key identifier: F3:A8:78:2F:2A:37:61:97:20:85:4E:47:D2:24:FE:5F:21:F5:6F:0A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9FB579333B6A7186C3A66A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 6167 IP address blocks: 72.108.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:79:33:3b:6a:71:86:c3:a6:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=d8cc54af-c2b9-424f-8823-713ed8e2ea2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:b8:3f:0d:b1:92:f1:5a:21:28:3d:24:cf: a3:da:cb:ee:6e:51:4b:0e:cb:e3:94:fa:cc:00:0f: 5a:4f:e6:49:81:d8:c0:94:53:19:a2:79:25:66:21: 49:76:c1:ae:54:6d:80:e5:69:9b:5b:52:47:7d:8c: 24:b8:97:84:82:29:3d:fa:b9:0f:ed:47:be:42:07: 74:7b:ae:cc:85:4c:10:c0:4e:ed:de:f5:43:11:d8: 81:22:2c:84:7e:4d:50:61:ac:bd:00:67:83:da:c8: 08:c7:ba:f7:90:ba:34:e6:6c:40:d1:d2:44:81:dc: ec:11:72:0c:a4:c2:25:28:49:cf:7c:00:b7:40:70: c8:66:9c:2d:2a:31:a7:09:55:f4:6e:14:63:3c:43: 78:dd:86:eb:19:4f:1d:4b:df:9e:fe:2c:d7:29:a0: 46:d1:53:68:6f:71:3c:b2:a0:d9:a5:b1:b9:ae:57: 38:34:96:87:37:58:d7:60:be:2c:86:65:13:89:0a: f0:5a:14:3a:ae:e5:bd:93:63:b2:0c:f8:03:25:08: 21:ec:3f:fd:dd:8d:97:d8:c6:73:f5:71:b7:cf:78: 98:50:ef:b0:68:e1:39:55:a0:a9:75:71:6e:6c:8a: 4b:66:cd:d6:af:9a:b9:36:46:a8:c1:9c:d5:2d:09: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A8:78:2F:2A:37:61:97:20:85:4E:47:D2:24:FE:5F:21:F5:6F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fac4595a-40a4-39c1-bd5c-b7209f740889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.108.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f4:ec:d8:ba:68:5e:05:c7:c3:eb:ec:76:a6:be:96:3d:94: 60:27:a6:1d:b8:2b:69:69:07:df:03:d5:5f:93:5d:21:d0:f1: 58:51:33:89:7f:8a:66:5e:2e:d9:23:f1:41:c6:4c:06:92:dd: 00:48:65:07:ec:fe:3b:15:e2:b2:f5:fd:c3:6d:70:56:c1:1d: 69:ad:ec:7e:ba:a0:08:f4:55:5e:f9:50:b1:9c:d3:4b:bc:b1: 10:24:07:45:fd:52:85:b6:6c:07:63:a2:c7:1f:b6:03:9a:1e: 59:d8:7b:27:5e:03:16:1d:f5:8e:41:b9:36:40:b5:e2:fa:9e: ae:e3:10:06:84:28:76:10:cf:95:38:e3:fc:db:ff:75:f1:49: 0b:77:47:88:1a:d5:cd:04:8a:67:44:32:8a:6e:4a:a2:d6:f3: 13:a2:d2:5b:77:5a:f3:11:61:63:d6:34:80:a2:36:cd:8b:6f: 14:04:78:1c:5c:88:74:bc:99:68:b6:85:8d:f7:5f:41:a6:09: 3a:9f:e9:a1:b8:5f:4d:90:ae:e3:42:d1:ea:ea:1e:9a:d5:0f: ea:df:61:8d:69:03:9e:83:c3:fc:94:3c:10:4e:76:a7:44:0b: bb:cb:59:64:fd:6c:0f:8a:7a:30:ff:5c:80:a5:09:37:89:21: 5a:a2:32:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXkzO2pxhsOmakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ZDhjYzU0YWYtYzJiOS00MjRmLTg4MjMtNzEzZWQ4ZTJlYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKW4Pw2xkvFaISg9JM+j2svublFLDsvjlPrM AA9aT+ZJgdjAlFMZonklZiFJdsGuVG2A5WmbW1JHfYwkuJeEgik9+rkP7Ue+Qgd0 e67MhUwQwE7t3vVDEdiBIiyEfk1QYay9AGeD2sgIx7r3kLo05mxA0dJEgdzsEXIM pMIlKEnPfAC3QHDIZpwtKjGnCVX0bhRjPEN43YbrGU8dS9+e/izXKaBG0VNob3E8 sqDZpbG5rlc4NJaHN1jXYL4shmUTiQrwWhQ6ruW9k2OyDPgDJQgh7D/93Y2X2MZz 9XG3z3iYUO+waOE5VaCpdXFubIpLZs3Wr5q5NkaowZzVLQmJcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOoeC8qN2GXIIVOR9Ik/l8h9W8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFjNDU5NWEtNDBhNC0z OWMxLWJkNWMtYjcyMDlmNzQwODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP07Ni6aF4Fx8Pr7HamvpY9lGAnph24K2lpB98D1V+TXSHQ8VhRM4l/ imZeLtkj8UHGTAaS3QBIZQfs/jsV4rL1/cNtcFbBHWmt7H66oAj0VV75ULGc00u8 sRAkB0X9UoW2bAdjoscftgOaHlnYeydeAxYd9Y5BuTZAteL6nq7jEAaEKHYQz5U4 4/zb/3XxSQt3R4ga1c0EimdEMopuSqLW8xOi0lt3WvMRYWPWNICiNs2LbxQEeBxc iHS8mWi2hY33X0GmCTqf6aG4X02QruNC0erqHprVD+rfYY1pA56Dw/yUPBBOdqdE C7vLWWT9bA+KejD/XIClCTeJIVqiMrQ= -----END CERTIFICATE-----Generated at Wed May 13 14:01:49 2026 by rpki-client