$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f6fcf9-2bbf-3f6f-a097-668073304d6a.roa File: d1f6fcf9-2bbf-3f6f-a097-668073304d6a.roa (raw, json) Hash identifier: 4UoFQbdpyCDG6wW01eUj9hLy8LEUjPB+tCL4epzwwGU= Subject key identifier: EF:B6:67:B2:51:45:D8:3E:2F:A4:26:A9:2A:01:B7:53:6C:79:2F:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F323790F924F9FA9FB4D81490 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f6fcf9-2bbf-3f6f-a097-668073304d6a.roa Signing time: Wed 16 Sep 2026 17:17:50 +0000 ROA not before: Wed 16 Sep 2026 17:17:50 +0000 ROA not after: Tue 15 Dec 2026 18:17:50 +0000 asID: 6167 IP address blocks: 72.96.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:32:37:90:f9:24:f9:fa:9f:b4:d8:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 16 17:17:50 2026 GMT Not After : Dec 15 18:17:50 2026 GMT Subject: CN=0667cafc-6081-4b76-a7a4-10a13ff9aaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:7e:fd:95:fc:df:f9:63:7e:10:af:c5:12: 87:91:82:ea:25:f6:ce:6d:64:26:11:8f:51:5c:ec: ff:d3:50:ae:67:6a:43:b1:35:99:61:3b:7b:b4:3d: 65:79:00:df:41:1a:ba:91:6a:6e:a3:22:f6:7c:72: af:a9:d0:3d:74:1a:1c:f8:a2:f3:3a:58:d7:a0:da: 00:7d:67:83:bc:bd:18:43:ea:fd:46:89:bb:7f:cd: b8:9b:65:9e:89:d0:f5:26:95:42:1b:81:1d:b1:47: 55:60:57:27:8f:2f:6e:74:43:a1:67:0a:47:57:44: 4b:69:d7:e1:3c:86:2c:61:9b:44:14:a4:f9:20:12: a6:e4:25:55:58:eb:f0:9b:17:ef:e6:2b:79:3b:02: 1b:51:68:f7:31:db:7f:56:c0:6e:14:19:bb:3e:67: 05:89:36:87:04:ff:27:4e:91:0c:3d:17:5f:18:28: 1b:85:26:fa:7d:31:59:2a:7c:6f:6e:eb:b6:43:5c: 19:c3:6c:1a:bf:7d:87:fb:b8:83:04:1a:99:bd:f0: 3a:a9:09:e1:9e:cb:a3:39:91:57:bc:5c:00:f9:6d: 5b:9b:d7:6b:51:c3:52:78:26:51:86:ea:b9:91:6f: 8f:12:a4:74:f1:b8:61:de:e0:a6:9b:f9:de:ed:63: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:67:B2:51:45:D8:3E:2F:A4:26:A9:2A:01:B7:53:6C:79:2F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d1f6fcf9-2bbf-3f6f-a097-668073304d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.96.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ce:9b:12:0b:51:21:dc:9b:30:8c:27:b9:43:07:0a:9f:46: 32:9a:e0:70:15:b8:35:26:70:5c:40:7b:ee:f4:30:f0:e2:e1: 75:e2:36:03:7c:17:20:d4:a0:92:7b:47:c2:3b:4e:28:cd:60: 8e:8e:ec:ad:a7:ec:09:8b:2d:c9:3d:40:8b:4e:f7:53:47:af: 7f:7b:f6:f5:be:49:a1:a7:c4:c8:9d:58:31:07:7e:71:9f:2d: e9:a9:97:58:e4:73:c5:95:96:10:43:60:7f:e5:9a:53:0b:8e: f2:eb:7d:1f:69:f8:1e:cf:f8:a4:2b:86:a6:fe:cb:b5:e4:78: 30:e1:13:6d:97:b2:db:9d:c4:5b:93:74:23:69:b3:f6:65:59: 88:6a:39:2a:83:10:20:bc:60:82:54:c0:4a:29:1d:ea:2e:90: 2f:ff:43:cd:b2:78:a7:8a:1e:52:a5:25:1e:14:9b:0c:10:c4: 50:4e:c3:e9:ad:d8:77:7b:6a:74:2f:9c:70:e7:87:71:e5:ff: d2:65:e3:57:76:1f:01:10:cb:6e:35:98:42:f5:ea:2e:df:93: 35:cc:a1:12:48:ed:07:d2:c2:1b:9d:d4:d5:5c:21:15:e4:e8: a2:be:6c:7d:b5:88:ce:d3:77:6b:d0:ff:a3:15:e1:16:32:38: 25:2b:2a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8yN5D5JPn6n7TYFJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkxNjE3MTc1MFoXDTI2MTIxNTE4MTc1MFowLzEtMCsGA1UEAxMk MDY2N2NhZmMtNjA4MS00Yjc2LWE3YTQtMTBhMTNmZjlhYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx5+/ZX83/ljfhCvxRKHkYLqJfbObWQmEY9R XOz/01CuZ2pDsTWZYTt7tD1leQDfQRq6kWpuoyL2fHKvqdA9dBoc+KLzOljXoNoA fWeDvL0YQ+r9Rom7f824m2WeidD1JpVCG4EdsUdVYFcnjy9udEOhZwpHV0RLadfh PIYsYZtEFKT5IBKm5CVVWOvwmxfv5it5OwIbUWj3Mdt/VsBuFBm7PmcFiTaHBP8n TpEMPRdfGCgbhSb6fTFZKnxvbuu2Q1wZw2wav32H+7iDBBqZvfA6qQnhnsujOZFX vFwA+W1bm9drUcNSeCZRhuq5kW+PEqR08bhh3uCmm/ne7WO6swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+2Z7JRRdg+L6QmqSoBt1NseS9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDFmNmZjZjktMmJiZi0z ZjZmLWEwOTctNjY4MDczMzA0ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTOmxILUSHcmzCMJ7lDBwqfRjKa4HAVuDUmcFxAe+70MPDi4XXiNgN8 FyDUoJJ7R8I7TijNYI6O7K2n7AmLLck9QItO91NHr3979vW+SaGnxMidWDEHfnGf Lempl1jkc8WVlhBDYH/lmlMLjvLrfR9p+B7P+KQrhqb+y7XkeDDhE22XstudxFuT dCNps/ZlWYhqOSqDECC8YIJUwEopHeoukC//Q82yeKeKHlKlJR4UmwwQxFBOw+mt 2Hd7anQvnHDnh3Hl/9Jl41d2HwEQy241mEL16i7fkzXMoRJI7QfSwhud1NVcIRXk 6KK+bH21iM7Td2vQ/6MV4RYyOCUrKio= -----END CERTIFICATE-----Generated at Sun Sep 20 16:17:03 2026 by rpki-client