$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/57aa35ca-2073-34f0-b7e9-dd233601bbc1.roa File: 57aa35ca-2073-34f0-b7e9-dd233601bbc1.roa (raw, json) Hash identifier: j0Pq0dAHhRyKIEnNGEc888Bb2te/9+HVRTIdSsYKzB0= Subject key identifier: 05:70:DA:09:99:51:DD:90:B5:81:C8:7A:6A:AC:D7:42:4A:E8:1B:40 Certificate issuer: /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb Certificate serial: 010D0C9F4328584D40CA3A74DD9040E666DC4C80 Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/57aa35ca-2073-34f0-b7e9-dd233601bbc1.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 15149 IP address blocks: 72.9.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:3a:74:dd:90:40:e6:66:dc:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=cdd486bf-ae83-49e7-a035-73b76d08efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:8f:a7:15:a6:d4:ed:e1:ff:87:6a:c7:e4: a3:2f:23:ed:0a:21:52:a5:be:45:d9:93:4e:ce:e9: a6:bd:d7:e3:cf:13:b3:6d:4f:3c:c2:78:36:86:16: ef:f9:f3:e7:22:45:2b:21:1c:c5:81:04:f3:6b:c6: 06:e8:01:87:94:5b:cb:4b:09:26:39:da:4c:81:4f: cb:47:94:1f:15:f2:54:94:3d:d6:2f:d1:01:6c:15: c2:7c:52:d1:c7:42:df:56:11:4a:d5:76:c8:d5:be: e1:87:7b:63:c9:6b:4e:a5:b0:fd:db:1c:d9:9c:41: 07:56:2d:7b:03:e4:4f:ab:d4:00:73:3b:32:c7:90: 7f:1f:39:7a:64:ed:20:db:3b:85:76:d7:15:0e:49: e4:1e:3a:8f:25:6b:f1:17:4b:1b:34:8c:7b:59:f8: 85:da:33:a6:82:b1:8b:10:5b:71:9a:19:6e:ee:8a: 37:ae:5d:94:f2:50:69:41:79:9b:97:fd:17:a1:7a: 7e:02:f2:00:93:30:95:d8:32:63:6b:cb:89:bf:f4: f9:ea:eb:9e:2d:78:31:b4:da:25:b8:e7:9f:f1:b0: de:08:3b:93:e7:e6:80:6a:09:64:8e:bf:c6:b7:0f: 44:31:77:62:22:3f:4e:ca:57:de:84:1f:14:41:ee: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:70:DA:09:99:51:DD:90:B5:81:C8:7A:6A:AC:D7:42:4A:E8:1B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/57aa35ca-2073-34f0-b7e9-dd233601bbc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl X509v3 Authority Key Identifier: keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer sbgp-ipAddrBlock: critical IPv4: 72.9.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f2:f1:a4:87:23:f9:df:85:0e:ff:fa:f3:fd:60:26:13:94: a6:94:fe:b6:8d:d7:97:a1:eb:3a:d8:b1:29:48:70:5b:49:1b: 90:c8:d0:47:5d:19:bd:26:be:7b:fc:35:13:1c:b1:d8:ee:fe: 89:1c:09:ad:98:88:b3:9e:af:c2:20:80:b0:74:db:48:fc:4f: 76:07:44:8b:3a:de:07:4d:45:dd:cd:27:c2:89:32:1f:04:f5: 2a:06:ec:5b:7c:58:e2:0b:ad:30:b4:50:f5:ef:cc:6e:85:cc: a5:3d:26:dd:84:9b:7c:89:f0:e9:5e:d0:11:be:cf:50:a8:4e: 78:0c:3a:a8:12:72:8f:1b:0f:df:9d:8b:22:ac:0d:46:fd:73: 84:b0:78:58:df:51:7a:31:1d:39:3d:70:05:46:8e:44:b4:23: c0:df:bf:83:13:b5:06:35:7b:4f:6e:8e:85:51:ad:b3:0f:5a: f1:8d:c9:62:3b:4d:c6:b2:d5:31:92:5e:de:d1:53:64:92:9f: b6:62:00:f6:2f:92:5d:13:91:4c:f3:a0:d7:f0:fa:43:9e:72: f4:b9:ae:80:e1:d4:4f:35:40:a9:ae:34:2c:cb:4c:2e:c8:99: dc:a2:3b:32:e5:de:7f:00:47:44:b8:c8:0c:ec:f8:75:4d:a1: 34:c7:0d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayjp03ZBA5mbcTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkzNWY4NDEtZWQ4My00Yjk5LWJiOWQtNDgzN2RlOGVj OGNiMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Y2RkNDg2YmYtYWU4My00OWU3LWEwMzUtNzNiNzZkMDhlZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolWPpxWm1O3h/4dqx+SjLyPtCiFSpb5F2ZNO zummvdfjzxOzbU88wng2hhbv+fPnIkUrIRzFgQTza8YG6AGHlFvLSwkmOdpMgU/L R5QfFfJUlD3WL9EBbBXCfFLRx0LfVhFK1XbI1b7hh3tjyWtOpbD92xzZnEEHVi17 A+RPq9QAczsyx5B/Hzl6ZO0g2zuFdtcVDknkHjqPJWvxF0sbNIx7WfiF2jOmgrGL EFtxmhlu7oo3rl2U8lBpQXmbl/0XoXp+AvIAkzCV2DJja8uJv/T56uueLXgxtNol uOef8bDeCDuT5+aAaglkjr/Gtw9EMXdiIj9OylfehB8UQe5r8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVw2gmZUd2QtYHIemqs10JK6BtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM1 Zjg0MS1lZDgzLTRiOTktYmI5ZC00ODM3ZGU4ZWM4Y2IvNTdhYTM1Y2EtMjA3My0z NGYwLWI3ZTktZGQyMzM2MDFiYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTkzNWY4NDEtZWQ4My00Yjk5LWJi OWQtNDgzN2RlOGVjOGNiL2E5MzVmODQxLWVkODMtNGI5OS1iYjlkLTQ4MzdkZThl YzhjYi5jcmwwHwYDVR0jBBgwFoAU7KWggLG+qHAEBuynzkFq0vZontUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOTM1Zjg0MS1lZDgzLTRiOTktYmI5ZC00ODM3 ZGU4ZWM4Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3y8aSHI/nfhQ7/+vP9YCYTlKaU/raN15eh6zrYsSlIcFtJG5DI0Edd Gb0mvnv8NRMcsdju/okcCa2YiLOer8IggLB020j8T3YHRIs63gdNRd3NJ8KJMh8E 9SoG7Ft8WOILrTC0UPXvzG6FzKU9Jt2Em3yJ8Ole0BG+z1CoTngMOqgSco8bD9+d iyKsDUb9c4SweFjfUXoxHTk9cAVGjkS0I8Dfv4MTtQY1e09ujoVRrbMPWvGNyWI7 Tcay1TGSXt7RU2SSn7ZiAPYvkl0TkUzzoNfw+kOecvS5roDh1E81QKmuNCzLTC7I mdyiOzLl3n8AR0S4yAzs+HVNoTTHDd0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:34 2026 by rpki-client