$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa File: ff976497-83f8-3a22-b4cb-ed1503be34e8.roa (raw, json) Hash identifier: 45BqLKDOaS51tFslLudUXxg4IKlHAKX/rz/QoFBEWWg= Subject key identifier: 55:A9:65:2A:D6:EC:E9:34:33:92:F7:E1:D3:42:A2:C5:A7:66:DE:88 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9E988E9227C7A7770F8A1700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 72.104.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:8e:92:27:c7:a7:77:0f:8a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=ab88a69a-3295-424d-beda-a2b689b211fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:c6:58:b7:d4:6a:a1:16:c4:55:19:e0:34: 39:37:39:d8:42:8f:84:82:b3:cf:20:95:b3:0c:e0: 08:3a:05:05:fb:da:42:4b:e0:a3:57:4c:d6:41:60: da:50:7c:64:99:4f:fa:af:82:dd:18:75:27:d0:4a: 2c:1c:1f:76:3d:c9:d9:02:9c:39:39:f7:1e:a2:8a: b7:b6:bb:21:8c:fa:02:75:b4:5c:50:53:4e:5d:9d: 40:27:a4:e2:7c:9d:2b:2a:2f:11:50:d1:fa:f7:a9: 72:e3:b4:f0:5d:4b:fe:25:01:05:b3:f6:c5:24:e8: b8:1c:34:06:af:b7:2b:a1:f0:bf:d6:74:e8:74:77: 33:53:31:b3:c1:17:a3:22:5a:74:35:e0:93:e4:c8: 3c:f5:72:5e:26:16:7c:ea:f1:74:98:37:f5:00:93: a4:2b:65:c7:0a:6a:c2:4f:21:e3:47:54:07:f9:3d: ac:95:85:8e:00:c8:5b:fd:9e:07:1c:43:12:1c:d1: 46:47:51:e4:9d:06:0e:10:aa:d4:88:be:29:05:48: 86:54:c6:7b:78:98:d4:ca:a1:f9:e2:bb:b0:8e:1f: a5:00:cf:12:a4:3b:29:79:7b:65:63:c3:84:07:ea: a6:84:33:49:d5:d1:94:db:55:35:6c:f2:c5:d1:d3: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A9:65:2A:D6:EC:E9:34:33:92:F7:E1:D3:42:A2:C5:A7:66:DE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff976497-83f8-3a22-b4cb-ed1503be34e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.104.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:01:13:79:db:62:de:90:73:bc:d5:e3:f0:6f:58:c7:d1:e1: 36:3b:db:9d:1d:27:10:0c:f1:99:5c:3b:5d:23:05:a0:88:55: 17:ae:dd:bf:65:02:d8:56:68:c9:cb:9e:fd:ee:8b:63:3b:c3: 78:9c:0b:2d:49:37:d1:f5:ce:17:c4:6a:f9:71:31:0c:17:8e: f9:d3:58:be:51:b5:08:b0:7a:b7:44:43:e0:14:e9:d1:00:9b: 5d:60:8f:19:55:fb:d5:c9:45:a5:4e:ff:7d:da:53:30:29:59: 5c:a9:f5:d6:d2:fc:be:0c:e5:f6:75:32:13:45:ac:94:5b:48: 90:3c:db:d2:27:ff:41:f5:a3:f0:dd:79:1d:4f:1f:f7:57:6a: 48:07:70:3f:8f:5a:74:4c:83:7b:b5:fd:13:3c:22:06:e1:b3: 59:9f:90:0c:c7:34:a8:88:d2:01:6c:3d:12:e5:e4:c9:53:d5: 0f:c2:b8:54:11:8e:07:ec:db:45:17:1d:02:ea:29:25:02:95: 9e:88:36:de:20:92:49:9f:fe:00:60:08:e7:da:7c:71:00:a6: 98:62:71:79:60:be:38:9f:c7:89:b6:93:c8:8e:73:60:36:e8: 2f:d3:78:7d:f9:ac:91:a1:bd:ab:32:03:38:e7:9d:73:d2:f5: c1:57:30:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emI6SJ8endw+KFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk YWI4OGE2OWEtMzI5NS00MjRkLWJlZGEtYTJiNjg5YjIxMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc/GWLfUaqEWxFUZ4DQ5NznYQo+EgrPPIJWz DOAIOgUF+9pCS+CjV0zWQWDaUHxkmU/6r4LdGHUn0EosHB92PcnZApw5Ofceooq3 trshjPoCdbRcUFNOXZ1AJ6TifJ0rKi8RUNH696ly47TwXUv+JQEFs/bFJOi4HDQG r7crofC/1nTodHczUzGzwRejIlp0NeCT5Mg89XJeJhZ86vF0mDf1AJOkK2XHCmrC TyHjR1QH+T2slYWOAMhb/Z4HHEMSHNFGR1HknQYOEKrUiL4pBUiGVMZ7eJjUyqH5 4ruwjh+lAM8SpDspeXtlY8OEB+qmhDNJ1dGU21U1bPLF0dNP2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWpZSrW7Ok0M5L34dNCosWnZt6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY5NzY0OTctODNmOC0z YTIyLWI0Y2ItZWQxNTAzYmUzNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSGh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUBE3nbYt6Qc7zV4/BvWMfR4TY7250dJxAM8ZlcO10jBaCIVReu3b9l AthWaMnLnv3ui2M7w3icCy1JN9H1zhfEavlxMQwXjvnTWL5RtQiwerdEQ+AU6dEA m11gjxlV+9XJRaVO/33aUzApWVyp9dbS/L4M5fZ1MhNFrJRbSJA829In/0H1o/Dd eR1PH/dXakgHcD+PWnRMg3u1/RM8Igbhs1mfkAzHNKiI0gFsPRLl5MlT1Q/CuFQR jgfs20UXHQLqKSUClZ6INt4gkkmf/gBgCOfafHEApphicXlgvjifx4m2k8iOc2A2 6C/TeH35rJGhvasyAzjnnXPS9cFXMHQ= -----END CERTIFICATE-----Generated at Thu Nov 5 14:58:04 2026 by rpki-client