$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa File: ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa (raw, json) Hash identifier: 6IrA9fxn9ZnHQmfvcf30dRu6LD+TVDVBs4wiPcabXWI= Subject key identifier: E9:2A:1C:D8:A1:45:6F:82:37:2B:26:D9:A0:F4:1D:F0:B1:55:31:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FBE6D748CA3220F6D8780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 72.70.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:be:6d:74:8c:a3:22:0f:6d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=d73ff9f4-880d-4294-81f9-c4086e26d01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:87:4f:ca:9e:cb:d2:15:2b:7d:32:2d:ec: 08:4d:e5:c6:82:66:a4:d1:e9:99:2c:0e:5f:77:c7: 2d:ab:87:c7:10:45:b6:1f:f3:4a:77:3c:af:e4:67: 4a:f6:55:c5:46:5e:cb:44:ee:4b:cc:30:ba:a5:15: e4:e6:69:3b:6d:48:b1:20:95:19:d7:b9:3b:d4:4b: 63:aa:08:9b:38:a9:ea:42:1e:27:af:14:38:a4:79: 7f:52:16:4f:3e:de:e1:8d:eb:67:8f:b4:f8:7c:16: 9c:06:46:f8:25:d4:90:47:d8:ea:08:be:4c:32:22: 6a:21:7e:f6:4a:07:a8:ea:10:4e:46:71:6e:ac:e9: 20:8d:d4:4a:a1:db:4a:02:67:fe:13:cb:bf:4a:0c: 7f:14:32:b7:4f:15:2b:57:74:6c:52:74:60:97:7d: 71:c1:ac:84:3e:93:0c:2f:27:47:c5:67:d4:ad:f7: fd:40:38:87:c5:37:c5:81:23:b2:38:80:db:84:22: fc:c9:1a:12:77:5d:9c:73:c6:9b:c0:77:8d:2d:3a: 9c:ef:90:41:b9:d3:b5:76:6b:89:3f:6c:a8:c9:8f: d0:8f:8d:24:20:5f:ed:8c:63:4e:e7:dd:30:b4:f6: e6:3e:e7:76:1c:f7:d8:36:a3:f1:13:b0:bc:d4:6a: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:1C:D8:A1:45:6F:82:37:2B:26:D9:A0:F4:1D:F0:B1:55:31:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:d0:0b:16:cb:d8:b2:2a:61:14:f1:fc:04:27:a4:95:c8: 03:1e:76:ec:fe:0b:3b:29:0e:f3:10:5b:48:e4:e8:8a:df:2c: 92:da:c5:42:f1:55:99:92:f6:d7:38:aa:95:f8:e0:33:0a:ea: 2e:91:ec:52:d2:8b:64:d3:c4:37:38:b7:1d:62:35:5f:74:12: e8:5a:38:ea:36:1f:9c:d2:0b:3d:c6:6f:f7:e4:c6:e7:20:ae: d7:ac:d2:63:5d:46:1e:2d:8c:f1:c0:8f:8a:ef:8e:e5:b2:f2: fd:dd:06:c2:d0:0e:d6:af:db:4d:00:95:d2:5b:63:f0:1d:87: 3b:76:75:3e:62:07:95:db:67:33:bd:81:76:aa:6f:47:bb:9c: 69:28:fe:32:b3:6c:de:40:ac:ab:29:e4:6a:96:30:90:d6:56: f2:1d:fe:cc:2c:3f:50:37:d8:6b:fe:ad:1a:a4:22:6a:60:07: b7:20:30:5c:c2:a1:ac:15:a9:cd:41:c0:8e:a2:0c:a0:cc:42: 3c:d8:13:9b:d1:16:02:d6:ba:80:4a:16:ad:84:61:fb:43:f9: 48:8a:c1:dc:ea:93:a8:db:10:46:07:79:ac:75:42:78:80:4c: 1b:f4:d3:39:1f:07:04:7d:e9:7e:7c:34:d0:03:93:58:a2:30: 9f:5c:67:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD75tdIyjIg9th4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZDczZmY5ZjQtODgwZC00Mjk0LTgxZjktYzQwODZlMjZkMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuqHT8qey9IVK30yLewITeXGgmak0emZLA5f d8ctq4fHEEW2H/NKdzyv5GdK9lXFRl7LRO5LzDC6pRXk5mk7bUixIJUZ17k71Etj qgibOKnqQh4nrxQ4pHl/UhZPPt7hjetnj7T4fBacBkb4JdSQR9jqCL5MMiJqIX72 Sgeo6hBORnFurOkgjdRKodtKAmf+E8u/Sgx/FDK3TxUrV3RsUnRgl31xwayEPpMM LydHxWfUrff9QDiHxTfFgSOyOIDbhCL8yRoSd12cc8abwHeNLTqc75BBudO1dmuJ P2yoyY/Qj40kIF/tjGNO590wtPbmPud2HPfYNqPxE7C81GpppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkqHNihRW+CNysm2aD0HfCxVTHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EyYWU5NWMtYTc3ZC0z Mjk0LTk1MmEtMGEzYTEwMjNkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRC0AsWy9iyKmEU8fwEJ6SVyAMeduz+CzspDvMQW0jk6IrfLJLaxULx VZmS9tc4qpX44DMK6i6R7FLSi2TTxDc4tx1iNV90EuhaOOo2H5zSCz3Gb/fkxucg rtes0mNdRh4tjPHAj4rvjuWy8v3dBsLQDtav200AldJbY/Adhzt2dT5iB5XbZzO9 gXaqb0e7nGko/jKzbN5ArKsp5GqWMJDWVvId/swsP1A32Gv+rRqkImpgB7cgMFzC oawVqc1BwI6iDKDMQjzYE5vRFgLWuoBKFq2EYftD+UiKwdzqk6jbEEYHeax1QniA TBv00zkfBwR96X58NNADk1iiMJ9cZ7A= -----END CERTIFICATE-----Generated at Fri Apr 17 14:36:43 2026 by rpki-client