$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa File: 5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa (raw, json) Hash identifier: V2yXxKwGyoMgAL9PUk/lnbvkp4ed5QeiN4ofngDg5W8= Subject key identifier: 88:C3:4B:F8:18:01:3D:E5:5B:35:94:E1:47:9E:8D:23:6F:F4:B3:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E5A4A1162861B1A749880E580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 72.96.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:11:62:86:1b:1a:74:98:80:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=aa841e03-b855-4dca-8ce9-36c15ef2d9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f1:6c:d2:fc:4c:b6:83:7c:2c:4c:01:0d:e1: 20:5e:09:62:af:3e:35:a1:63:4e:48:de:61:f3:03: 14:a1:3c:db:21:3c:5a:cd:48:eb:44:65:81:fb:74: cd:5a:a4:72:7b:f0:12:56:00:b0:a8:1b:19:a5:ba: 9d:15:2e:cb:ce:aa:f1:62:06:83:0e:ba:69:9a:e6: ec:48:5b:31:cc:81:17:e5:a9:ad:50:7a:44:05:e7: ad:f8:8e:06:29:65:a6:80:20:87:5a:06:11:eb:e3: da:9d:cd:f3:27:7a:31:39:55:60:15:fd:f0:db:f8: ea:ab:81:1d:f4:4f:80:63:39:6c:f2:9c:1f:ec:94: 19:75:93:ff:21:c6:92:f7:80:6b:fb:2e:4b:0c:8a: 2b:9f:01:4e:d3:5e:07:14:bb:5b:ba:22:bc:ee:05: ff:2e:e1:54:36:b1:3f:c6:14:21:26:14:84:75:31: 97:52:b0:1b:30:6f:28:13:2e:03:50:c1:5f:df:fc: 70:36:f4:37:53:05:83:e9:6b:ce:83:a6:83:4b:5c: 51:09:32:8f:ba:40:7f:59:64:4e:b0:d3:2f:83:d9: c0:bc:81:14:04:ce:79:47:e4:07:a4:d9:98:17:4a: 1a:98:63:bb:a2:a9:68:24:c7:a9:bc:c8:50:ea:cb: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C3:4B:F8:18:01:3D:E5:5B:35:94:E1:47:9E:8D:23:6F:F4:B3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d38e374-351a-3312-9cb3-d3738c3bd1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c0:a5:58:b1:e0:01:09:de:47:c6:22:0d:5b:6a:80:11:7c: c8:8d:8d:99:4b:f6:24:51:f0:75:b4:6d:36:b3:3f:68:44:2f: 88:7f:dd:74:6f:d7:82:10:01:46:55:88:44:63:3d:5e:15:04: 74:aa:d3:f3:77:91:19:26:99:c6:2e:0b:43:e8:2b:2d:f0:73: c6:69:9f:ac:b2:75:97:fd:f5:28:67:95:b3:17:34:ea:89:34: 6a:d8:56:e8:65:02:cc:f3:7a:a7:a9:c9:b3:2a:03:1b:57:50: c9:34:78:52:98:21:56:88:bc:d0:79:d2:9a:11:a8:3f:01:13: 37:da:c2:97:bf:cc:d6:7c:f5:dd:3e:1a:1a:66:a0:cc:97:48: 3a:d6:eb:35:7a:2e:10:44:6c:e1:ab:51:55:ca:df:2d:17:6d: 01:56:81:26:fa:11:ec:74:4a:55:da:c2:28:8b:59:f2:bd:e1: 44:93:5e:e6:9a:20:b5:b4:a8:a7:66:f3:aa:d3:24:eb:b4:6a: 0d:02:df:af:c9:16:81:b8:b2:8f:dc:87:5a:0a:a4:47:29:c0: 5b:44:2e:3e:74:07:9c:f9:2c:e7:7a:11:eb:97:aa:aa:8f:66: a5:a7:15:5f:0a:11:f6:b5:d2:a1:da:55:d4:2b:01:2f:76:ef: c0:10:f8:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aShFihhsadJiA5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk YWE4NDFlMDMtYjg1NS00ZGNhLThjZTktMzZjMTVlZjJkOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fFs0vxMtoN8LEwBDeEgXglirz41oWNOSN5h 8wMUoTzbITxazUjrRGWB+3TNWqRye/ASVgCwqBsZpbqdFS7LzqrxYgaDDrppmubs SFsxzIEX5amtUHpEBeet+I4GKWWmgCCHWgYR6+Panc3zJ3oxOVVgFf3w2/jqq4Ed 9E+AYzls8pwf7JQZdZP/IcaS94Br+y5LDIornwFO014HFLtbuiK87gX/LuFUNrE/ xhQhJhSEdTGXUrAbMG8oEy4DUMFf3/xwNvQ3UwWD6WvOg6aDS1xRCTKPukB/WWRO sNMvg9nAvIEUBM55R+QHpNmYF0oamGO7oqloJMepvMhQ6surQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjDS/gYAT3lWzWU4UeejSNv9LPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQzOGUzNzQtMzUxYS0z MzEyLTljYjMtZDM3MzhjM2JkMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjApVix4AEJ3kfGIg1baoARfMiNjZlL9iRR8HW0bTazP2hEL4h/3XRv 14IQAUZViERjPV4VBHSq0/N3kRkmmcYuC0PoKy3wc8Zpn6yydZf99ShnlbMXNOqJ NGrYVuhlAszzeqepybMqAxtXUMk0eFKYIVaIvNB50poRqD8BEzfawpe/zNZ89d0+ GhpmoMyXSDrW6zV6LhBEbOGrUVXK3y0XbQFWgSb6Eex0SlXawiiLWfK94USTXuaa ILW0qKdm86rTJOu0ag0C36/JFoG4so/ch1oKpEcpwFtELj50B5z5LOd6EeuXqqqP ZqWnFV8KEfa10qHaVdQrAS9278AQ+L0= -----END CERTIFICATE-----Generated at Mon Jul 13 10:38:51 2026 by rpki-client