$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30174a94-867a-3b7b-a34b-fb9323eec468.roa File: 30174a94-867a-3b7b-a34b-fb9323eec468.roa (raw, json) Hash identifier: xRFVzcWdxtjVzad1g4/dCwR5yVfczfy55VvCo4PIaN0= Subject key identifier: C6:85:49:25:49:2C:FA:D4:6E:BD:21:41:6D:FC:36:0F:80:70:B3:DE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D7A053585055165BF58DA1D20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30174a94-867a-3b7b-a34b-fb9323eec468.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 6167 IP address blocks: 72.97.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:35:85:05:51:65:bf:58:da:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=ab86e34e-c95c-41d2-a57a-8333d5dcbfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:cc:e5:7a:fb:2a:06:09:62:63:68:26:40: 5e:55:68:e1:ed:1b:df:c1:e9:02:bc:5c:16:82:23: 53:9d:43:98:53:0f:9c:6e:6c:3c:77:2e:4c:5a:bb: 6c:85:d5:54:c1:30:ba:1a:f2:30:5f:21:ac:47:da: ff:1c:dd:ac:12:42:eb:c9:05:a7:1e:86:aa:22:2d: 5b:f6:7b:d8:32:5d:2b:cf:3f:7e:fa:32:4a:c2:59: b6:6d:c4:1c:97:58:b0:52:6c:15:9d:a8:ae:12:b6: c1:00:eb:44:d1:d2:7c:38:67:67:34:e4:e9:d9:df: 75:b0:20:08:42:51:e5:cf:f9:ef:cf:f3:16:aa:0d: 07:c1:46:98:84:f7:59:f5:ad:cc:18:00:8f:ce:a8: 2f:7e:a2:dd:50:4e:69:f0:88:0f:52:40:49:f3:49: 9e:3a:ae:c7:ee:1e:ed:15:a2:a3:f9:17:62:6a:57: e4:87:2c:b4:d8:1d:ae:31:ea:bb:b2:31:e1:e2:31: bc:52:de:7e:71:61:33:71:d3:e9:4d:bf:c1:89:08: 15:1d:3c:1b:07:5b:fc:e6:db:a8:63:94:cd:17:0e: 31:32:00:bb:8e:84:1d:f7:86:ed:35:2e:10:4b:4b: e2:ce:cf:e1:96:ff:c6:0e:5c:96:e0:90:91:27:02: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:85:49:25:49:2C:FA:D4:6E:BD:21:41:6D:FC:36:0F:80:70:B3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30174a94-867a-3b7b-a34b-fb9323eec468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.97.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:20:8b:c9:e0:e0:26:43:c0:19:0e:5b:e2:27:d8:35:42:3d: 89:36:2a:17:fc:af:76:77:29:34:34:21:f0:d0:89:9b:ae:2e: f2:db:e0:40:34:7b:e9:e0:fe:7a:71:13:74:4d:e9:40:b2:8f: 1b:fb:9e:8f:9e:e7:18:9d:ca:43:7f:2c:88:82:c6:5a:71:9e: cb:91:6c:c9:d2:eb:df:6d:8e:4a:23:36:7a:33:16:0f:b1:d9: e1:d3:40:34:78:56:49:ca:ea:b6:98:0e:f9:95:43:1d:7e:05: 2f:09:be:a7:a1:d8:8c:30:9b:8a:dc:c2:59:2b:ef:a9:b4:2a: 25:c2:e2:02:47:86:89:13:48:75:ed:8a:35:6a:c4:c4:d6:cc: 8b:50:6f:5a:31:9e:6b:29:fb:09:6d:6b:d2:f4:42:37:ae:74: 1d:70:aa:91:37:b4:da:8b:fa:d3:51:b5:04:ee:4c:96:a6:d3: e1:bf:30:d3:d5:cb:8a:d8:74:16:27:0e:2f:ba:4f:56:99:2f: 4a:fc:ca:70:55:c1:08:e4:ad:27:b3:ef:d1:8d:63:14:13:fb: c4:e2:c1:68:f7:d0:09:1f:22:4d:a3:0c:a1:da:b6:60:7c:9b: 20:11:4f:3c:d9:47:a0:2c:a3:92:a3:fe:14:a0:48:08:55:38: f4:bc:1b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTWFBVFlv1jaHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YWI4NmUzNGUtYzk1Yy00MWQyLWE1N2EtODMzM2Q1ZGNiZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP/M5Xr7KgYJYmNoJkBeVWjh7RvfwekCvFwW giNTnUOYUw+cbmw8dy5MWrtshdVUwTC6GvIwXyGsR9r/HN2sEkLryQWnHoaqIi1b 9nvYMl0rzz9++jJKwlm2bcQcl1iwUmwVnaiuErbBAOtE0dJ8OGdnNOTp2d91sCAI QlHlz/nvz/MWqg0HwUaYhPdZ9a3MGACPzqgvfqLdUE5p8IgPUkBJ80meOq7H7h7t FaKj+Rdialfkhyy02B2uMeq7sjHh4jG8Ut5+cWEzcdPpTb/BiQgVHTwbB1v85tuo Y5TNFw4xMgC7joQd94btNS4QS0vizs/hlv/GDlyW4JCRJwJAOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaFSSVJLPrUbr0hQW38Ng+AcLPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzAxNzRhOTQtODY3YS0z YjdiLWEzNGItZmI5MzIzZWVjNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSGEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQgi8ng4CZDwBkOW+In2DVCPYk2Khf8r3Z3KTQ0IfDQiZuuLvLb4EA0 e+ng/npxE3RN6UCyjxv7no+e5xidykN/LIiCxlpxnsuRbMnS699tjkojNnozFg+x 2eHTQDR4VknK6raYDvmVQx1+BS8Jvqeh2Iwwm4rcwlkr76m0KiXC4gJHhokTSHXt ijVqxMTWzItQb1oxnmsp+wlta9L0QjeudB1wqpE3tNqL+tNRtQTuTJam0+G/MNPV y4rYdBYnDi+6T1aZL0r8ynBVwQjkrSez79GNYxQT+8TiwWj30AkfIk2jDKHatmB8 myARTzzZR6Aso5Kj/hSgSAhVOPS8Gy8= -----END CERTIFICATE-----Generated at Mon Apr 13 17:20:03 2026 by rpki-client