$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa File: 7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa (raw, json) Hash identifier: CSw3U1FHogH+D9Nchhp55Il2GRpGO/czY6vufA4jyio= Subject key identifier: 1F:43:C7:7A:FF:8E:D9:B4:1B:90:EA:F1:3F:14:02:09:63:76:C0:CA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D7A053EE94232B47D0559D700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 6167 IP address blocks: 72.96.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3e:e9:42:32:b4:7d:05:59:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=3f29b8a0-97ac-4fa7-a98d-2c982443d9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:da:a0:3f:31:10:c7:5e:e8:37:a0:b9:f9: 38:4e:ac:f4:19:76:26:21:08:71:a3:e1:cb:9e:0c: a1:ba:08:13:c9:44:80:d7:06:37:1b:6b:66:43:53: e4:12:6f:e2:42:5a:e1:86:92:77:4c:33:85:9a:7f: 97:65:a6:1c:18:c0:d9:6c:00:5f:6c:2c:b3:f4:13: 12:54:8f:de:d8:6d:ad:d6:1a:4a:42:78:16:72:1a: 47:cd:7c:ca:5b:04:cd:7c:af:f5:81:43:04:ce:55: 27:17:37:fa:54:0c:30:5b:cb:f7:44:62:4f:31:88: f2:04:32:31:9b:aa:85:4f:35:80:b9:d9:08:83:f5: ea:06:b6:34:3b:ff:35:7e:ee:51:30:9a:0b:04:46: 4c:28:72:8b:ba:e0:10:e9:8b:e7:d3:75:74:fb:8e: aa:94:5a:6d:43:8d:04:1f:f1:88:58:ec:b6:b3:4e: 30:cf:b4:a4:f5:18:57:7a:40:d2:d6:8f:53:6d:16: 30:e7:f6:48:5e:74:5d:d3:07:36:66:aa:7a:e3:97: e1:24:8b:fa:bd:f4:c1:61:81:e9:ba:63:93:65:10: ed:b0:fd:e8:0f:d1:64:44:80:95:f8:d5:03:0a:cb: 09:0c:c2:84:57:b9:6f:8e:15:c2:b9:d2:21:f5:af: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:C7:7A:FF:8E:D9:B4:1B:90:EA:F1:3F:14:02:09:63:76:C0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7605e62e-ca82-37e2-a632-f1f3da89f2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:40:57:2b:9b:33:2f:cf:d7:4e:6e:0a:b5:bb:d9:f5:b3:60: 50:2e:38:78:1b:9a:cd:2d:bc:05:0b:72:5b:c4:72:2e:20:ca: ea:3f:45:09:f7:a1:3a:d9:b8:41:f1:40:87:0a:06:31:80:dc: cc:3f:5b:6a:7e:17:d6:d3:76:86:24:d3:28:23:43:a4:9b:d7: 54:38:44:20:97:fd:8e:33:cc:98:ed:2e:be:7f:49:d2:82:2d: e3:f9:21:9b:ef:7b:b5:3f:91:04:9e:de:7f:1c:09:2b:64:f7: 28:01:69:34:80:9a:11:cd:14:ab:a3:8a:2d:9c:ed:65:38:44: 27:c8:b0:f6:cb:8a:62:e2:96:30:b3:53:e1:2e:f4:44:bd:98: af:41:ab:e4:17:38:13:61:43:fc:df:1f:17:a0:09:c9:c4:5a: b6:c3:9f:3b:ae:fb:44:35:4d:14:a3:4d:db:70:01:8b:fa:23: e4:a7:41:c3:22:dd:38:0c:9c:f9:ef:57:06:04:0f:d9:1a:ef: 6e:ba:de:3b:4b:1c:c5:f0:77:b8:be:19:f1:04:12:37:07:d1: 74:67:7e:2c:58:3f:ce:29:31:c9:0a:ec:51:cc:04:74:53:7f: 10:1b:7b:88:50:0b:1c:f2:38:89:77:d4:1b:f4:72:aa:68:b2: 85:1b:ad:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BT7pQjK0fQVZ1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk M2YyOWI4YTAtOTdhYy00ZmE3LWE5OGQtMmM5ODI0NDNkOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHTaoD8xEMde6Degufk4Tqz0GXYmIQhxo+HL ngyhuggTyUSA1wY3G2tmQ1PkEm/iQlrhhpJ3TDOFmn+XZaYcGMDZbABfbCyz9BMS VI/e2G2t1hpKQngWchpHzXzKWwTNfK/1gUMEzlUnFzf6VAwwW8v3RGJPMYjyBDIx m6qFTzWAudkIg/XqBrY0O/81fu5RMJoLBEZMKHKLuuAQ6Yvn03V0+46qlFptQ40E H/GIWOy2s04wz7Sk9RhXekDS1o9TbRYw5/ZIXnRd0wc2Zqp645fhJIv6vfTBYYHp umOTZRDtsP3oD9FkRICV+NUDCssJDMKEV7lvjhXCudIh9a9SYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Dx3r/jtm0G5Dq8T8UAgljdsDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzYwNWU2MmUtY2E4Mi0z N2UyLWE2MzItZjFmM2RhODlmMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJAVyubMy/P105uCrW72fWzYFAuOHgbms0tvAULclvEci4gyuo/RQn3 oTrZuEHxQIcKBjGA3Mw/W2p+F9bTdoYk0ygjQ6Sb11Q4RCCX/Y4zzJjtLr5/SdKC LeP5IZvve7U/kQSe3n8cCStk9ygBaTSAmhHNFKujii2c7WU4RCfIsPbLimLiljCz U+Eu9ES9mK9Bq+QXOBNhQ/zfHxegCcnEWrbDnzuu+0Q1TRSjTdtwAYv6I+SnQcMi 3TgMnPnvVwYED9ka72663jtLHMXwd7i+GfEEEjcH0XRnfixYP84pMckK7FHMBHRT fxAbe4hQCxzyOIl31Bv0cqposoUbrbg= -----END CERTIFICATE-----Generated at Mon Apr 13 18:26:00 2026 by rpki-client