$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06af34d9-509f-3e9f-a915-d1d96ce41c31.roa File: 06af34d9-509f-3e9f-a915-d1d96ce41c31.roa (raw, json) Hash identifier: yer9CfvVgs5Ze0IVNCzE8E6Lu0yJ+EHSbQw+4NhiFf4= Subject key identifier: C7:BD:D8:51:3B:4A:41:B8:5A:7D:26:02:36:F2:3B:F9:27:82:36:ED Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F32378E7FFE2292EE88A43740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06af34d9-509f-3e9f-a915-d1d96ce41c31.roa Signing time: Wed 16 Sep 2026 17:17:48 +0000 ROA not before: Wed 16 Sep 2026 17:17:48 +0000 ROA not after: Tue 15 Dec 2026 18:17:48 +0000 asID: 6167 IP address blocks: 72.96.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:37:8e:7f:fe:22:92:ee:88:a4:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 16 17:17:48 2026 GMT Not After : Dec 15 18:17:48 2026 GMT Subject: CN=a5201e3e-7766-424d-83e6-0bf745546f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:fa:dc:13:61:a3:96:23:ba:9f:ce:c9:14: 0d:5a:2d:ba:1d:de:99:ea:5f:37:81:51:4f:b6:7d: ac:b7:66:48:90:2f:fa:21:1b:6e:44:41:83:d2:e4: 2e:c1:ba:95:76:a1:5b:52:32:47:f2:4d:5c:31:b1: 8b:4c:d5:86:1b:0e:57:e3:0a:6e:57:25:2b:75:e3: 72:a0:d0:78:d9:53:29:22:d0:9b:52:88:91:cc:6f: 69:5d:e3:29:f3:c8:4a:7d:a4:d5:3d:a3:77:e4:14: bb:29:97:1b:e0:ac:f0:89:ea:d2:b8:81:f7:93:7b: 07:4a:30:aa:8a:36:52:ad:20:56:18:42:a9:6c:7e: 3e:29:c9:3e:47:35:f1:9a:6d:96:00:a4:6d:d7:50: 8e:34:61:83:79:6b:d6:0d:d5:73:e6:e7:31:4a:82: e1:42:0d:0a:89:73:e8:39:37:dd:37:13:5a:a3:07: 67:d0:06:7f:d2:bb:ae:9a:15:01:3b:41:c3:24:23: 00:b3:38:6a:55:8d:f6:d1:1f:73:a8:24:db:01:a5: d4:6a:67:bf:98:80:e7:f7:86:82:62:91:a5:72:de: 21:35:9e:14:46:6a:62:a9:75:57:91:29:1a:d2:52: 4f:2a:a6:ee:b1:f5:aa:45:14:2c:b4:ed:89:ed:aa: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BD:D8:51:3B:4A:41:B8:5A:7D:26:02:36:F2:3B:F9:27:82:36:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/06af34d9-509f-3e9f-a915-d1d96ce41c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b2:9f:c4:4b:01:f3:0c:a9:be:18:9f:9f:40:39:cd:c3:96: c5:14:c7:87:e1:f7:c7:a3:a4:12:52:be:d4:f6:b6:c3:5a:59: 50:7f:56:ac:57:66:3c:5b:ee:45:12:f8:7c:40:1f:ac:18:9d: 04:bd:09:32:cd:a1:02:b9:91:f5:d8:03:c2:84:0b:f4:75:13: f7:d8:f0:5f:55:80:2d:b4:1a:a3:1d:b0:80:52:4d:d6:9b:cd: fd:3e:a3:68:72:b5:47:91:78:19:88:2c:0c:c5:1d:6d:d7:e1: 02:a8:16:f4:00:ea:f5:13:b9:c1:27:0e:24:1f:20:0f:96:40: db:71:0c:78:77:6f:24:bb:71:f6:f7:25:a4:f2:9e:e4:39:13: 97:58:16:20:cc:f6:e3:62:00:aa:50:4d:53:cd:e1:98:f6:63: d8:98:30:3a:2b:6e:8d:4f:f3:2d:4b:9b:41:e5:80:ce:d4:8e: 2f:a0:aa:ca:77:99:b0:d7:22:54:41:76:d5:2b:da:8b:30:67: ec:78:e8:80:5c:11:e3:75:89:e1:a8:27:b1:7e:40:07:cc:0a: 2f:ab:f0:86:74:83:86:80:26:71:c1:93:1b:ed:73:99:b8:7f: 8f:4c:e5:54:b0:ee:48:b6:7c:01:92:74:5f:e9:8b:ba:5a:14: 76:af:4b:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yN45//iKS7oikN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxNjE3MTc0OFoXDTI2MTIxNTE4MTc0OFowLzEtMCsGA1UEAxMk YTUyMDFlM2UtNzc2Ni00MjRkLTgzZTYtMGJmNzQ1NTQ2ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D363BNho5Yjup/OyRQNWi26Hd6Z6l83gVFP tn2st2ZIkC/6IRtuREGD0uQuwbqVdqFbUjJH8k1cMbGLTNWGGw5X4wpuVyUrdeNy oNB42VMpItCbUoiRzG9pXeMp88hKfaTVPaN35BS7KZcb4KzwierSuIH3k3sHSjCq ijZSrSBWGEKpbH4+Kck+RzXxmm2WAKRt11CONGGDeWvWDdVz5ucxSoLhQg0KiXPo OTfdNxNaowdn0AZ/0ruumhUBO0HDJCMAszhqVY320R9zqCTbAaXUame/mIDn94aC YpGlct4hNZ4URmpiqXVXkSka0lJPKqbusfWqRRQstO2J7ar7nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe92FE7SkG4Wn0mAjbyO/kngjbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDZhZjM0ZDktNTA5Zi0z ZTlmLWE5MTUtZDFkOTZjZTQxYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKayn8RLAfMMqb4Yn59AOc3DlsUUx4fh98ejpBJSvtT2tsNaWVB/VqxX Zjxb7kUS+HxAH6wYnQS9CTLNoQK5kfXYA8KEC/R1E/fY8F9VgC20GqMdsIBSTdab zf0+o2hytUeReBmILAzFHW3X4QKoFvQA6vUTucEnDiQfIA+WQNtxDHh3byS7cfb3 JaTynuQ5E5dYFiDM9uNiAKpQTVPN4Zj2Y9iYMDorbo1P8y1Lm0HlgM7Uji+gqsp3 mbDXIlRBdtUr2oswZ+x46IBcEeN1ieGoJ7F+QAfMCi+r8IZ0g4aAJnHBkxvtc5m4 f49M5VSw7ki2fAGSdF/pi7paFHavSww= -----END CERTIFICATE-----Generated at Sun Sep 20 16:27:47 2026 by rpki-client