$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa File: 5a72f703-fbe8-361c-ba27-9625ee1622a2.roa (raw, json) Hash identifier: nAhT1vnDoBgWH8QiBTEYCQ3Jqre15YKqCVoTzECWIfE= Subject key identifier: 3C:48:EF:94:35:9B:65:73:F6:43:70:04:A8:5A:DC:DB:AE:68:1A:4E Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F4328584D3B34E65BA055AD6D06B6FAC0 Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 393457 IP address blocks: 64.191.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e6:5b:a0:55:ad:6d:06:b6:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=f247d164-e86f-4a5c-8297-46e6cbf239b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:52:72:87:b3:0b:63:4b:ba:b0:4f:08:f1: 3d:a6:a7:b0:29:0f:7a:2b:79:ec:ee:59:75:c0:71: c0:ce:11:2f:55:24:13:e2:0b:8c:cf:83:c4:3c:de: 40:33:bb:07:44:f7:07:07:44:2a:c4:85:8c:ca:67: de:ae:5e:7d:04:12:c3:ea:25:2a:9f:00:39:2f:44: 23:2a:1e:75:7b:d2:d6:ce:f9:62:1c:bd:15:c0:e6: 59:cb:a3:3c:b9:21:3a:8f:97:ea:a8:6e:3b:a1:c6: 9e:0a:1d:c7:94:c0:f0:42:16:5d:c3:d7:28:9b:74: 7a:6f:3f:bc:be:f2:4d:f7:e4:a0:fa:7c:c4:e9:56: 78:e8:a3:11:a4:f3:d7:51:e9:5b:69:89:5b:94:75: 40:cc:b6:45:7d:c6:36:55:7a:6b:12:57:0e:2c:0d: 24:2f:45:7f:5b:95:4d:4a:f3:8d:52:fa:95:2a:e6: 7b:ef:e8:3c:aa:a4:d3:70:f8:2f:f3:88:b2:33:d4: 70:82:22:c6:42:b4:62:61:67:e9:2c:7a:01:a8:61: a8:05:b1:20:cb:90:bc:86:f7:dc:c5:14:eb:24:45: 37:98:82:b1:eb:14:dc:6f:dc:d9:36:4e:9d:9e:be: 9a:b8:26:35:5e:0b:ce:95:c6:dd:f8:eb:5c:8a:c6: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:EF:94:35:9B:65:73:F6:43:70:04:A8:5A:DC:DB:AE:68:1A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5a72f703-fbe8-361c-ba27-9625ee1622a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 64.191.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:80:0e:b2:c2:df:f3:c9:9c:05:07:4e:72:be:ca:43:43:77: 7b:56:63:32:07:1a:05:7f:4f:34:d2:d0:56:22:2b:17:48:a5: d2:d4:eb:24:ea:cf:86:c6:1a:5a:c1:f0:1e:13:57:52:a0:60: 7e:db:a6:d0:cf:0b:d5:8e:c9:2e:85:38:7f:03:07:87:f3:0b: 5c:f7:e9:76:9b:29:e5:ad:53:f4:81:1f:e8:60:5a:85:d1:e5: db:a7:6f:72:30:94:da:df:a5:5c:79:d6:15:9b:83:b3:e1:75: 7c:b5:cf:e4:61:62:9d:b8:c9:bb:eb:c1:eb:6d:5e:3d:b4:78: 12:60:57:51:cb:5f:e7:a5:cc:1e:d3:79:ec:98:08:6d:73:3a: 44:2c:1c:bb:97:dd:9c:2d:d2:15:b0:ee:e2:09:c4:24:18:e0: 84:63:d4:7f:05:96:c6:cc:c5:82:ea:06:84:4b:f4:ca:c5:75: 4c:4f:e8:5a:69:9a:6c:1a:f3:83:99:ad:34:fc:b1:c7:80:59: 4f:58:97:64:e2:89:ac:83:e9:f0:23:55:17:e4:e7:a7:18:35: 46:f3:fe:0f:be:c8:f2:57:2f:cd:93:2d:10:ed:5a:68:3b:48: e5:96:ed:53:b9:d9:a0:07:38:1d:71:79:6d:87:f3:05:a2:0c: 0e:42:6f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOZboFWtbQa2+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ZjI0N2QxNjQtZTg2Zi00YTVjLTgyOTctNDZlNmNiZjIzOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6dScoezC2NLurBPCPE9pqewKQ96K3ns7ll1 wHHAzhEvVSQT4guMz4PEPN5AM7sHRPcHB0QqxIWMymferl59BBLD6iUqnwA5L0Qj Kh51e9LWzvliHL0VwOZZy6M8uSE6j5fqqG47ocaeCh3HlMDwQhZdw9com3R6bz+8 vvJN9+Sg+nzE6VZ46KMRpPPXUelbaYlblHVAzLZFfcY2VXprElcOLA0kL0V/W5VN SvONUvqVKuZ77+g8qqTTcPgv84iyM9RwgiLGQrRiYWfpLHoBqGGoBbEgy5C8hvfc xRTrJEU3mIKx6xTcb9zZNk6dnr6auCY1XgvOlcbd+OtcisYuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxI75Q1m2Vz9kNwBKha3NuuaBpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvNWE3MmY3MDMtZmJlOC0z NjFjLWJhMjctOTYyNWVlMTYyMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQL8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESADrLC3/PJnAUHTnK+ykNDd3tWYzIHGgV/TzTS0FYiKxdIpdLU6yTq z4bGGlrB8B4TV1KgYH7bptDPC9WOyS6FOH8DB4fzC1z36XabKeWtU/SBH+hgWoXR 5dunb3IwlNrfpVx51hWbg7PhdXy1z+RhYp24ybvrwettXj20eBJgV1HLX+elzB7T eeyYCG1zOkQsHLuX3Zwt0hWw7uIJxCQY4IRj1H8FlsbMxYLqBoRL9MrFdUxP6Fpp mmwa84OZrTT8sceAWU9Yl2TiiayD6fAjVRfk56cYNUbz/g++yPJXL82TLRDtWmg7 SOWW7VO52aAHOB1xeW2H8wWiDA5Cb3M= -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:08 2026 by rpki-client