$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa File: ca9bc5f1-24ad-377d-a175-235bd349420c.roa (raw, json) Hash identifier: 6sRx9SZS2b1aW8VFRDNSHXWi3TKilPFaEIQsMDNRcms= Subject key identifier: D0:62:85:D5:53:98:37:13:D3:40:8E:BA:96:E8:AC:A9:27:38:79:E9 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584D0A77C2B8280A216016B47B00 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 40934 IP address blocks: 72.1.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:c2:b8:28:0a:21:60:16:b4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=f3d21262-4cb0-45d7-84e9-1e08f1a5f61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:52:47:d0:b9:24:65:24:5b:59:3b:d2:bc: b7:8e:de:e4:14:e7:fe:26:8d:b7:d7:88:a8:2c:71: f7:f6:ec:af:c5:cf:5b:bd:04:a8:4c:9a:40:da:70: 0b:f0:4b:f1:c0:52:f2:fe:e1:31:36:0a:37:ef:66: 40:a8:e0:25:ee:37:44:19:8a:3b:5b:d2:ce:e3:97: 46:5d:37:3d:bb:68:ec:e0:10:57:fe:9e:a8:e4:10: 8d:d7:b3:1c:28:87:eb:fa:28:bf:b5:df:1a:6d:fa: 5f:39:9b:51:b3:64:9e:db:e6:ae:e6:40:9f:d3:21: 26:6a:cd:14:f0:1f:2c:4f:7b:77:f7:9c:77:7f:47: 16:1b:54:0a:e1:0e:f3:9d:8f:c5:5e:ba:3d:51:ef: 67:e2:61:44:63:4c:bb:c5:85:4f:df:ad:0e:8a:59: 64:ef:de:74:29:81:8a:9a:d9:e3:72:c3:ac:6e:c5: 32:81:b1:f0:5f:5b:ae:32:0b:4d:a0:05:dc:80:99: ae:1d:b7:28:5f:0b:7b:4f:29:96:8a:ed:03:60:27: d6:e6:64:45:dc:87:c7:15:c4:4d:e1:64:4a:ae:e5: 34:a4:c2:32:6e:fd:22:63:49:a5:3c:b6:c6:af:e2: 83:ea:ce:ca:e9:a0:28:24:20:49:d5:81:57:30:90: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:62:85:D5:53:98:37:13:D3:40:8E:BA:96:E8:AC:A9:27:38:79:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/ca9bc5f1-24ad-377d-a175-235bd349420c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 72.1.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8e:2a:9c:b4:67:17:39:73:1f:a3:34:48:93:f5:a6:8b:0b: 17:1e:29:85:96:0d:29:90:5d:2f:8d:54:71:3c:d0:d4:71:50: a8:19:52:8b:38:6c:57:de:cf:cd:cc:d5:a5:31:71:15:6f:d7: ba:bd:b3:e8:54:02:17:d3:61:8b:fb:71:ce:47:14:81:e8:e0: bf:76:25:ae:7e:ec:1c:b8:1e:ca:a0:22:b8:5a:a5:21:72:4a: 9c:04:30:db:f0:52:fd:32:9d:5c:20:5f:d3:28:da:b3:f2:fd: 05:a5:03:2d:d2:20:b0:a5:ee:fc:89:83:f2:c3:6a:e7:0a:92: db:a9:9f:4d:29:1a:3e:76:f7:0a:95:44:9c:e0:3d:41:13:dc: f3:fe:eb:10:e1:2e:f7:08:90:1b:99:1c:8e:c4:6d:8b:9e:9f: 2c:fa:02:9c:61:74:a1:61:8b:90:12:95:f1:71:20:73:c4:67: 7a:11:bc:07:da:88:56:24:84:63:f4:75:c2:c9:65:e3:0d:6b: 0a:35:2a:ec:78:1c:96:14:51:a5:0a:f9:21:fd:bc:b3:fb:96: 70:c4:5f:88:a0:87:10:d8:9a:b4:71:22:4d:17:f8:64:7f:bc: ef:d4:cf:17:a8:10:87:72:92:1f:2c:46:84:19:c4:bf:a4:16: 4a:b8:a9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd8K4KAohYBa0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNkMjEyNjItNGNiMC00NWQ3LTg0ZTktMWUwOGYxYTVmNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PVSR9C5JGUkW1k70ry3jt7kFOf+Jo2314io LHH39uyvxc9bvQSoTJpA2nAL8EvxwFLy/uExNgo372ZAqOAl7jdEGYo7W9LO45dG XTc9u2js4BBX/p6o5BCN17McKIfr+ii/td8abfpfOZtRs2Se2+au5kCf0yEmas0U 8B8sT3t395x3f0cWG1QK4Q7znY/FXro9Ue9n4mFEY0y7xYVP360Oillk7950KYGK mtnjcsOsbsUygbHwX1uuMgtNoAXcgJmuHbcoXwt7TymWiu0DYCfW5mRF3IfHFcRN 4WRKruU0pMIybv0iY0mlPLbGr+KD6s7K6aAoJCBJ1YFXMJBHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBihdVTmDcT00COupborKknOHnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2E5YmM1ZjEtMjRhZC0z NzdkLWExNzUtMjM1YmQzNDk0MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOOKpy0Zxc5cx+jNEiT9aaLCxceKYWWDSmQXS+NVHE80NRxUKgZUos4 bFfez83M1aUxcRVv17q9s+hUAhfTYYv7cc5HFIHo4L92Ja5+7By4HsqgIrhapSFy SpwEMNvwUv0ynVwgX9Mo2rPy/QWlAy3SILCl7vyJg/LDaucKktupn00pGj529wqV RJzgPUET3PP+6xDhLvcIkBuZHI7EbYuenyz6ApxhdKFhi5ASlfFxIHPEZ3oRvAfa iFYkhGP0dcLJZeMNawo1Kux4HJYUUaUK+SH9vLP7lnDEX4ighxDYmrRxIk0X+GR/ vO/UzxeoEIdykh8sRoQZxL+kFkq4qVE= -----END CERTIFICATE-----Generated at Fri Mar 27 03:07:19 2026 by rpki-client