$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa File: 08c7fe30-f46e-3d87-bbed-69071caf4413.roa (raw, json) Hash identifier: n90oy/YLo5fGzydIeruC79pT2cftZvxrT9nwpOD1lRM= Subject key identifier: CF:F3:35:60:87:3E:27:47:74:BF:54:41:F1:F7:9E:8D:B7:89:71:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FCC640FAD024B9F722000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 72.68.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:cc:64:0f:ad:02:4b:9f:72:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=645639b6-75ac-426a-8b61-6e18ef0f51e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:61:d3:a8:0d:d2:c7:6b:70:c3:79:d3:6e: ab:03:c0:6d:03:61:29:c5:bb:78:12:d8:1a:7e:5e: 46:fa:a0:19:af:00:5a:0a:99:f2:52:ec:30:b4:43: 9f:d5:25:9d:e4:c8:50:d5:4a:93:0a:b0:b7:e6:0e: 40:03:e2:c0:74:68:ba:89:1e:d8:ff:1b:dd:70:a4: f5:ab:55:ad:a1:a6:1f:28:59:56:e0:cd:bc:26:06: 36:96:15:c6:a9:31:5d:19:3d:05:f0:55:c2:34:2e: 91:8b:36:f0:1a:d6:6c:9c:24:53:ef:42:24:74:7b: 1a:88:87:b5:1f:42:d3:95:d9:b0:2f:48:99:bb:16: b9:d9:79:56:be:c8:d7:d5:b0:f0:c4:a0:be:65:cf: 70:e9:97:0b:08:b5:fe:19:ab:db:b5:ed:ae:88:01: f7:e9:50:a3:52:07:18:3a:84:a2:6b:56:3b:e2:a1: 3c:32:4b:5d:b7:c9:79:8d:e8:98:5b:e6:13:d5:1e: 5b:05:35:09:ef:41:42:e8:12:c9:dd:b4:be:e0:71: 00:30:c6:1e:32:a9:5f:b6:7d:fe:69:1d:15:01:fa: 3d:47:cd:51:bd:f3:d7:7b:9c:5e:30:38:a6:c4:ae: be:f8:c5:82:24:8b:dd:9d:4d:4d:2d:98:29:aa:92: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:35:60:87:3E:27:47:74:BF:54:41:F1:F7:9E:8D:B7:89:71:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c7fe30-f46e-3d87-bbed-69071caf4413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.68.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ae:5d:1e:26:ca:58:c2:df:46:db:6c:70:9d:31:95:0b:53: c5:f5:21:41:92:32:18:4c:5d:93:48:e1:42:7a:2f:32:70:fe: 49:4f:38:98:f2:6f:6e:96:63:44:2b:f6:d0:51:d7:43:2b:63: da:e5:34:e8:b6:e3:7b:52:3f:90:58:29:31:18:f7:13:2e:97: 8e:30:92:29:a7:42:2a:d8:1b:93:3a:ee:6c:fd:fa:b1:f6:8c: 85:ff:1a:be:66:ba:b7:4a:9b:91:ed:78:55:44:fe:11:a8:1a: 24:1a:72:2f:fe:17:85:d2:aa:34:9a:21:60:05:14:bd:94:13: 74:b2:7e:3e:d0:7b:33:43:1b:90:83:93:81:8c:54:d0:40:8d: ff:0a:75:19:46:11:9e:b0:21:ae:d5:3b:e8:26:29:9d:58:56: 09:de:3c:81:5c:f7:8e:02:f6:9d:0c:07:d8:d1:6f:16:f0:6e: 05:21:db:0d:4a:c5:31:23:9c:49:43:11:15:9f:04:6e:47:ec: e7:54:71:e6:e3:57:11:0f:c0:6a:07:52:1d:19:c2:fc:04:53: 14:3e:74:b6:21:1d:e6:02:ea:41:3e:59:e5:9e:1a:c4:ba:5d: 01:d1:79:0d:9d:0e:5f:e5:d1:45:1f:f4:e1:d7:71:1d:f5:dd: 6f:71:ab:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8xkD60CS59yIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NjQ1NjM5YjYtNzVhYy00MjZhLThiNjEtNmUxOGVmMGY1MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX9h06gN0sdrcMN5026rA8BtA2Epxbt4Etga fl5G+qAZrwBaCpnyUuwwtEOf1SWd5MhQ1UqTCrC35g5AA+LAdGi6iR7Y/xvdcKT1 q1WtoaYfKFlW4M28JgY2lhXGqTFdGT0F8FXCNC6RizbwGtZsnCRT70IkdHsaiIe1 H0LTldmwL0iZuxa52XlWvsjX1bDwxKC+Zc9w6ZcLCLX+Gavbte2uiAH36VCjUgcY OoSia1Y74qE8Mktdt8l5jeiYW+YT1R5bBTUJ70FC6BLJ3bS+4HEAMMYeMqlftn3+ aR0VAfo9R81RvfPXe5xeMDimxK6++MWCJIvdnU1NLZgpqpL63QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/zNWCHPidHdL9UQfH3no23iXHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhjN2ZlMzAtZjQ2ZS0z ZDg3LWJiZWQtNjkwNzFjYWY0NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSuXR4myljC30bbbHCdMZULU8X1IUGSMhhMXZNI4UJ6LzJw/klPOJjy b26WY0Qr9tBR10MrY9rlNOi243tSP5BYKTEY9xMul44wkimnQirYG5M67mz9+rH2 jIX/Gr5murdKm5HteFVE/hGoGiQaci/+F4XSqjSaIWAFFL2UE3Syfj7QezNDG5CD k4GMVNBAjf8KdRlGEZ6wIa7VO+gmKZ1YVgnePIFc944C9p0MB9jRbxbwbgUh2w1K xTEjnElDERWfBG5H7OdUcebjVxEPwGoHUh0ZwvwEUxQ+dLYhHeYC6kE+WeWeGsS6 XQHReQ2dDl/l0UUf9OHXcR313W9xq0A= -----END CERTIFICATE-----Generated at Mon Apr 13 17:20:25 2026 by rpki-client