$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa File: c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa (raw, json) Hash identifier: Dz2D/gcYpgErkvCgxk4LmRcrr3tThcwkr0K3vL22yxM= Subject key identifier: B3:D3:8B:D4:DF:71:D5:FD:01:57:24:B9:C8:7C:13:1E:F6:04:D4:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FC92EC5595BB24D292460 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 72.86.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c9:2e:c5:59:5b:b2:4d:29:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=da3a97a2-c1c8-44b6-ae61-27bedd7d827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:25:36:41:69:7a:54:6f:4b:3d:6a:07:c7: ca:2c:49:10:4c:3f:38:99:f9:f6:c8:e4:5d:75:a8: 9b:d5:d5:7d:f3:59:aa:3f:7c:9d:4c:03:3f:4a:11: 7f:4e:59:24:81:d1:23:e1:0e:68:9a:3a:08:e4:44: 5c:ce:5b:96:e6:60:db:4e:32:7e:ff:3c:d6:c6:53: 3d:3e:1f:fb:49:57:b9:05:aa:d3:ab:3b:67:a1:5b: 07:c0:a2:bb:e4:40:5f:cd:3d:83:25:06:05:7d:dc: 34:70:91:59:9d:6c:85:bf:f4:e1:dd:1e:0d:78:e6: c3:d1:cb:d2:b0:33:97:7b:cf:ec:35:bb:54:3e:a8: f7:69:7f:89:f8:40:71:13:06:54:5b:03:24:e2:7a: fd:f3:5b:50:5d:16:91:20:7a:d1:e1:9c:36:96:3c: 8e:bb:ed:53:bf:61:3e:d6:3f:a3:35:61:7e:ea:19: 17:64:9a:55:1e:29:5e:64:fa:6f:8d:7d:89:3f:7a: f9:7d:3a:9d:e3:db:86:f9:b5:9a:76:ae:89:38:f1: b9:85:94:58:45:54:5e:89:d9:6c:56:ac:45:8b:15: dd:5a:03:15:93:bb:c7:17:01:dc:44:c7:d1:15:74: 5a:f6:24:b9:3d:5f:74:e1:05:5b:75:3f:ed:32:2c: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D3:8B:D4:DF:71:D5:FD:01:57:24:B9:C8:7C:13:1E:F6:04:D4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c45dc53d-8d01-3255-a08c-4428fbb9a8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.86.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5f:94:d5:df:d7:33:fb:9c:dc:9a:00:5b:43:05:f9:6d:82: 1e:d1:2a:ec:39:d7:5c:1b:fb:c3:ea:95:1d:ac:3f:b0:50:65: 8c:b7:a3:e2:9b:4e:c5:b7:86:08:01:0a:bc:7d:6b:6e:7e:fb: 06:75:ed:8c:ba:9b:69:a8:82:1e:f0:28:7c:e3:d4:3b:ae:e7: 4d:15:96:91:de:3e:b8:13:bd:c0:b9:f9:c1:4f:71:32:af:72: 09:b9:27:5c:0e:09:8e:ff:4e:35:80:15:de:35:37:81:6c:fe: 7b:75:2f:a5:a2:92:f0:8b:f2:7e:53:55:83:a5:de:78:ee:c9: 33:c2:ce:f4:b3:b7:8e:51:a9:fc:42:32:c8:ac:44:07:ac:84: 6a:bd:f8:ef:a0:87:61:77:82:19:46:9c:23:f3:44:73:74:2e: 9a:f2:9d:7d:39:43:65:12:e2:93:8b:2e:bb:c3:8f:a2:7f:a1: 15:08:ce:3b:7a:96:4a:ff:68:4b:14:29:7a:2a:18:3c:c5:ee: 40:cb:77:69:02:57:f9:29:1d:f7:ea:95:a2:0a:38:6b:75:91: e1:0d:ee:48:7a:b8:60:29:ba:fd:2d:f7:23:4d:fb:71:87:39: 20:ca:b3:71:ba:b3:bb:6a:d3:9c:be:be:61:a7:40:6c:8f:78: d0:24:08:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8kuxVlbsk0pJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZGEzYTk3YTItYzFjOC00NGI2LWFlNjEtMjdiZWRkN2Q4MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+4lNkFpelRvSz1qB8fKLEkQTD84mfn2yORd daib1dV981mqP3ydTAM/ShF/TlkkgdEj4Q5omjoI5ERczluW5mDbTjJ+/zzWxlM9 Ph/7SVe5BarTqztnoVsHwKK75EBfzT2DJQYFfdw0cJFZnWyFv/Th3R4NeObD0cvS sDOXe8/sNbtUPqj3aX+J+EBxEwZUWwMk4nr981tQXRaRIHrR4Zw2ljyOu+1Tv2E+ 1j+jNWF+6hkXZJpVHileZPpvjX2JP3r5fTqd49uG+bWadq6JOPG5hZRYRVReidls VqxFixXdWgMVk7vHFwHcRMfRFXRa9iS5PV904QVbdT/tMiw45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPTi9TfcdX9AVckuch8Ex72BNRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzQ1ZGM1M2QtOGQwMS0z MjU1LWEwOGMtNDQyOGZiYjlhOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESFYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZflNXf1zP7nNyaAFtDBfltgh7RKuw511wb+8PqlR2sP7BQZYy3o+Kb TsW3hggBCrx9a25++wZ17Yy6m2mogh7wKHzj1Duu500VlpHePrgTvcC5+cFPcTKv cgm5J1wOCY7/TjWAFd41N4Fs/nt1L6WikvCL8n5TVYOl3njuyTPCzvSzt45RqfxC MsisRAeshGq9+O+gh2F3ghlGnCPzRHN0LprynX05Q2US4pOLLrvDj6J/oRUIzjt6 lkr/aEsUKXoqGDzF7kDLd2kCV/kpHffqlaIKOGt1keEN7kh6uGApuv0t9yNN+3GH OSDKs3G6s7tq05y+vmGnQGyPeNAkCLg= -----END CERTIFICATE-----Generated at Fri Apr 17 04:04:03 2026 by rpki-client