$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c353cbe5-5788-3721-8934-1c077ac50fa2.roa File: c353cbe5-5788-3721-8934-1c077ac50fa2.roa (raw, json) Hash identifier: NIfpZ/FuiwipM/W2QPgESDc+neM3/4KXBwJV8Wo8WMA= Subject key identifier: DE:12:57:79:9A:35:AD:D4:E0:89:9F:AF:9C:05:74:AA:D3:A7:A4:3B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F225D0EC91EA2CDBDC434F880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c353cbe5-5788-3721-8934-1c077ac50fa2.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 72.107.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:0e:c9:1e:a2:cd:bd:c4:34:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=66b9a4c9-9387-4efc-94e8-bed39097f033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:1b:88:9b:d2:e6:89:44:a2:d9:18:bd:c3: 7d:41:11:56:f6:cd:d2:9a:64:37:1d:d7:56:c1:fb: 25:38:0a:40:8f:a7:ab:d3:f9:47:39:f4:7c:27:90: e7:f9:89:d1:69:43:8f:2e:10:30:75:d0:32:3d:fe: 0d:56:98:0c:51:b7:f8:48:92:a8:e4:f6:0d:2e:84: cf:dc:e7:bc:52:85:03:33:b3:06:b0:62:6d:51:9f: b3:2f:90:ea:ba:e6:87:fd:1b:89:1a:58:e0:06:8e: 98:c9:3f:e5:ef:94:bc:41:36:08:1f:c4:07:70:66: 7b:2b:6d:9d:b3:e4:14:00:ed:9b:d4:36:dc:13:85: 0e:90:51:4b:93:2f:48:cd:30:f9:c4:ee:06:ee:22: 17:84:55:52:49:ea:b0:aa:a5:1a:35:a8:a9:5d:28: 39:47:ff:84:b4:02:1b:b4:37:c1:e9:28:0c:7f:99: a4:17:4a:ba:3c:a0:4b:6c:e8:0c:54:e4:cc:56:45: 3b:d2:2f:7c:5a:27:75:52:0f:6f:0e:88:5a:7d:57: 22:d7:d9:82:29:e1:a4:48:89:34:47:ae:3b:00:8d: 5f:ab:3e:13:af:76:83:e4:75:f3:04:37:29:14:80: eb:34:9a:7d:e6:d5:8e:d3:58:84:e4:b1:3e:d7:bd: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:12:57:79:9A:35:AD:D4:E0:89:9F:AF:9C:05:74:AA:D3:A7:A4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c353cbe5-5788-3721-8934-1c077ac50fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.107.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:11:73:42:c2:76:0c:8b:c8:ce:04:1d:27:6f:38:77:0d:5e: dc:02:7f:21:7a:fe:78:2e:c6:ff:f4:9b:0d:de:10:49:87:05: ca:c2:33:17:82:4f:73:49:99:b9:0b:3c:b0:a5:68:e7:72:b0: f4:65:eb:d7:a9:ca:55:3e:9e:d9:5f:61:bb:20:f5:7e:4b:b7: 14:45:fc:83:e4:9d:ae:f3:34:81:d6:f2:10:3f:41:01:38:8c: 5c:a8:d3:c6:36:83:30:7a:f1:a8:b8:2a:58:03:68:c2:2a:5d: 02:83:7a:9e:16:e1:19:4c:4a:85:79:88:40:5c:b1:f3:93:3e: d7:a4:e4:09:68:84:18:17:27:88:44:28:66:62:7b:63:9f:64: 33:e1:81:95:fe:51:dc:77:f7:87:6c:e5:2d:63:eb:33:2a:1b: e8:17:85:aa:e4:15:a0:de:f1:1a:37:00:78:5d:96:cc:72:80: c6:3c:eb:d5:05:d9:d0:16:73:72:3f:e1:a2:3c:43:cc:5b:03: 2d:dc:40:45:c0:ed:a9:8c:9a:00:4d:bd:fb:32:06:ed:56:f8: 08:63:cb:37:d7:91:86:d9:64:9a:bb:44:11:b9:20:e2:f6:f1: fe:08:7a:8e:b5:c8:68:0b:ab:63:b0:12:6c:84:5c:2f:7f:d1: 80:5e:8d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQ7JHqLNvcQ0+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NjZiOWE0YzktOTM4Ny00ZWZjLTk0ZTgtYmVkMzkwOTdmMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAbiJvS5olEotkYvcN9QRFW9s3SmmQ3HddW wfslOApAj6er0/lHOfR8J5Dn+YnRaUOPLhAwddAyPf4NVpgMUbf4SJKo5PYNLoTP 3Oe8UoUDM7MGsGJtUZ+zL5DquuaH/RuJGljgBo6YyT/l75S8QTYIH8QHcGZ7K22d s+QUAO2b1DbcE4UOkFFLky9IzTD5xO4G7iIXhFVSSeqwqqUaNaipXSg5R/+EtAIb tDfB6SgMf5mkF0q6PKBLbOgMVOTMVkU70i98Wid1Ug9vDohafVci19mCKeGkSIk0 R647AI1fqz4Tr3aD5HXzBDcpFIDrNJp95tWO01iE5LE+170yLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4SV3maNa3U4Imfr5wFdKrTp6Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM1M2NiZTUtNTc4OC0z NzIxLTg5MzQtMWMwNzdhYzUwZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACARc0LCdgyLyM4EHSdvOHcNXtwCfyF6/nguxv/0mw3eEEmHBcrCMxeC T3NJmbkLPLClaOdysPRl69epylU+ntlfYbsg9X5LtxRF/IPkna7zNIHW8hA/QQE4 jFyo08Y2gzB68ai4KlgDaMIqXQKDep4W4RlMSoV5iEBcsfOTPtek5AlohBgXJ4hE KGZie2OfZDPhgZX+Udx394ds5S1j6zMqG+gXharkFaDe8Ro3AHhdlsxygMY869UF 2dAWc3I/4aI8Q8xbAy3cQEXA7amMmgBNvfsyBu1W+AhjyzfXkYbZZJq7RBG5IOL2 8f4Ieo61yGgLq2OwEmyEXC9/0YBejTI= -----END CERTIFICATE-----Generated at Mon Oct 12 23:35:16 2026 by rpki-client