$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa File: 82a310ab-4fc3-33b8-b133-f7cf904aa294.roa (raw, json) Hash identifier: esonruDlTiRx2ueHMPX5jMqtWcBrKN3BEDmgBVny0qU= Subject key identifier: D9:72:D6:C1:73:CF:74:37:D9:45:ED:A0:1D:7F:62:D7:18:14:7E:53 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584D143D73672FC766AE8059F500 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 400688 IP address blocks: 23.172.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:73:67:2f:c7:66:ae:80:59:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e639e2a2-3753-4fa5-b2a3-48255aeba1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:c9:b2:82:21:c7:31:a9:34:10:33:9b:e0: 25:7b:26:12:8b:ec:74:94:ce:63:ff:35:c5:16:34: d3:85:d8:63:99:09:af:0f:63:d1:e8:a3:76:e8:f6: ab:04:dc:12:b6:3d:39:24:1b:81:3f:05:a8:c1:54: 9f:94:fc:2b:08:c7:9d:7b:0a:6a:2b:4c:7d:81:65: 98:b6:1a:be:9e:39:46:07:ab:b9:c7:f8:f8:c0:32: 5c:45:34:7e:9d:d1:1d:64:21:da:aa:1d:0c:01:16: 73:ca:f3:3e:07:12:34:48:e2:a0:6e:0b:3c:25:89: 41:f4:54:68:81:c4:18:b2:f1:0e:1d:24:c4:a4:5d: 13:32:0a:11:3b:54:d9:ae:c1:b2:e2:c8:1a:25:e0: 90:39:a9:32:68:40:69:0d:5d:46:cf:33:f2:5c:df: cd:34:45:d6:01:82:93:0c:91:f8:be:52:58:49:69: 0f:ee:04:9e:14:ae:d3:61:50:ce:b9:23:00:4c:75: c6:b1:f0:e3:8c:3c:ef:32:bd:3d:7e:73:16:86:19: 6c:68:81:7f:41:db:a1:f0:fc:98:c4:01:59:20:fc: 5a:aa:bc:36:10:90:b7:45:b4:5c:c9:a7:3e:7b:b6: 19:ae:b8:04:2e:57:c2:89:55:78:30:0b:d8:86:a9: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:D6:C1:73:CF:74:37:D9:45:ED:A0:1D:7F:62:D7:18:14:7E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/82a310ab-4fc3-33b8-b133-f7cf904aa294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv4: 23.172.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4f:a3:6c:00:ea:e3:72:11:98:7a:e9:3e:61:9f:dc:16:c1: 1a:25:f3:c0:28:c7:dd:f0:f0:73:09:00:ea:c7:28:1b:17:07: 47:c5:c1:8e:fc:80:59:26:fb:f2:56:f2:87:01:d1:78:5e:77: 6a:d0:f1:df:fa:aa:05:92:e5:70:e3:9d:41:dc:8d:fe:ba:27: fd:13:81:da:52:8e:43:76:3f:d0:5c:42:5c:dd:9a:e9:59:2f: 9b:03:6b:e1:e7:b4:34:0c:c0:15:79:37:b0:02:51:f0:e9:53: c0:23:2f:e3:0b:6a:c5:f0:9c:41:2b:0a:04:3c:62:c3:5d:34: fc:ab:43:f6:fc:e4:e8:0f:31:dc:65:b2:13:ab:4a:96:9b:7a: 8f:d6:7a:dd:f4:1a:e0:9b:0b:b5:70:d1:e9:34:8f:b8:c1:92: 73:8f:bc:e4:53:0f:1f:6d:a0:b0:62:e9:e5:f4:69:50:79:fb: 57:00:8c:9f:cc:c3:75:29:6f:02:86:23:fd:63:e8:0f:b7:99: 92:99:68:29:7f:03:39:c7:b3:62:9e:fe:81:fe:c1:47:d6:a0: ac:c1:1d:5a:83:ec:e4:df:76:bc:04:a0:e2:b9:65:59:6b:a6: a8:3a:e9:3f:be:cc:b6:c9:85:70:9a:48:3f:00:a0:44:92:fc: cd:c8:ec:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPXNnL8dmroBZ9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTYzOWUyYTItMzc1My00ZmE1LWIyYTMtNDgyNTVhZWJhMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRfJsoIhxzGpNBAzm+AleyYSi+x0lM5j/zXF FjTThdhjmQmvD2PR6KN26ParBNwStj05JBuBPwWowVSflPwrCMedewpqK0x9gWWY thq+njlGB6u5x/j4wDJcRTR+ndEdZCHaqh0MARZzyvM+BxI0SOKgbgs8JYlB9FRo gcQYsvEOHSTEpF0TMgoRO1TZrsGy4sgaJeCQOakyaEBpDV1GzzPyXN/NNEXWAYKT DJH4vlJYSWkP7gSeFK7TYVDOuSMATHXGsfDjjDzvMr09fnMWhhlsaIF/Qduh8PyY xAFZIPxaqrw2EJC3RbRcyac+e7YZrrgELlfCiVV4MAvYhqnb7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNly1sFzz3Q32UXtoB1/YtcYFH5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvODJhMzEwYWItNGZjMy0z M2I4LWIxMzMtZjdjZjkwNGFhMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVPo2wA6uNyEZh66T5hn9wWwRol88Aox93w8HMJAOrHKBsXB0fFwY78 gFkm+/JW8ocB0Xhed2rQ8d/6qgWS5XDjnUHcjf66J/0TgdpSjkN2P9BcQlzdmulZ L5sDa+HntDQMwBV5N7ACUfDpU8AjL+MLasXwnEErCgQ8YsNdNPyrQ/b85OgPMdxl shOrSpabeo/Wet30GuCbC7Vw0ek0j7jBknOPvORTDx9toLBi6eX0aVB5+1cAjJ/M w3UpbwKGI/1j6A+3mZKZaCl/AznHs2Ke/oH+wUfWoKzBHVqD7OTfdrwEoOK5ZVlr pqg66T++zLbJhXCaSD8AoESS/M3I7D8= -----END CERTIFICATE-----Generated at Fri Mar 27 04:13:43 2026 by rpki-client