$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa File: 71cc5532-c1b2-3518-8619-35ed150f79a1.roa (raw, json) Hash identifier: 0KYs/S2ABt7tlta5LsNiLhlFlql5toRHWqhc0MBT+ec= Subject key identifier: A4:C2:DC:24:A7:A3:4E:FB:F6:63:B5:C8:3D:A7:E9:AF:3A:6A:BC:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D44FA6EBB3C66217DC9B31980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 26134 IP address blocks: 72.13.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6e:bb:3c:66:21:7d:c9:b3:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=48a75ff2-fb0f-4a1b-ba9f-f8d2d30e1f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:8f:67:af:9d:ea:fa:a8:7a:d3:06:17:e9: d6:b1:20:25:c6:71:85:4a:76:e6:d2:11:87:26:39: fc:01:09:b2:06:f3:5e:35:94:4b:28:80:1b:14:e3: 4d:b3:3f:7b:6a:2c:06:46:06:33:48:6b:4c:37:cc: fe:84:ad:0f:c7:f9:5a:c4:5a:4c:e7:57:93:dd:f1: 18:5f:58:41:ef:50:25:0f:42:70:d8:47:3f:8d:0a: 3d:2f:a4:6b:b7:ba:56:1d:4f:c5:c2:d2:bf:76:ff: 9b:92:0b:9f:90:ef:6f:e5:c2:4b:87:c4:60:49:7e: b4:dd:6c:c8:40:65:d8:f1:3f:a5:dc:ab:b1:d5:c7: 25:89:f5:69:82:aa:e0:f0:69:77:cc:85:55:e6:08: e7:fa:fb:a5:71:d0:70:fa:74:66:94:5f:0b:12:88: 33:a5:c3:f5:c8:94:ad:6c:b8:0c:ee:78:24:01:ce: c2:3b:15:12:b0:af:ed:6a:30:8f:45:32:f9:ed:8e: 7f:c8:d5:99:26:70:b3:08:0c:0f:cc:ad:e8:dc:15: bc:53:8c:2e:15:08:b6:4c:13:f7:84:3e:49:c0:f0: b6:30:56:12:e8:35:87:89:77:00:48:bf:be:d4:0d: 77:09:fc:bf:e3:09:3e:b4:94:75:20:74:de:46:2d: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:DC:24:A7:A3:4E:FB:F6:63:B5:C8:3D:A7:E9:AF:3A:6A:BC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:a0:82:b9:7a:4a:fd:6d:97:ce:ae:3f:20:12:b8:ee:5e: b9:56:e3:9a:2b:8d:49:f9:ea:19:e2:52:a6:db:0e:4a:a2:db: ed:61:fb:f1:55:dc:d7:ea:46:96:47:ed:74:fe:94:55:19:a6: 9f:b8:f4:78:93:60:f5:d2:3d:bd:e3:0d:11:f6:ff:19:e6:f0: 07:01:d3:ae:f0:43:1c:00:b4:e8:c4:58:ec:62:9e:2f:4e:9e: 3f:df:8a:ef:a4:ff:e8:bb:3a:53:af:d9:f7:24:30:d0:b2:c2: d7:16:b5:c1:52:b1:ae:d1:b3:76:3f:79:8a:57:45:9f:d9:ca: 02:41:0d:40:36:c9:b3:42:74:34:98:7b:74:1b:25:29:2b:65: f9:ab:c4:9b:ca:8c:ca:ea:bf:bb:fd:d7:86:f9:d4:6d:09:2d: 67:a5:10:b3:9d:7f:9e:d1:e2:d6:19:7a:06:ea:c2:dd:c3:95: 6e:b5:0e:0a:f6:3e:23:e6:64:01:6f:44:7c:d5:1f:6f:a9:25: 72:b0:40:1a:e9:11:9a:76:13:85:5c:a5:88:30:78:7f:ae:c5: 37:4c:ff:b6:b9:19:a5:3c:53:45:89:85:16:6b:a5:57:d2:87: 75:a3:bb:96:cb:78:dd:a6:38:bc:9c:91:db:12:01:03:42:42: 90:c2:9b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m67PGYhfcmzGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDhhNzVmZjItZmIwZi00YTFiLWJhOWYtZjhkMmQzMGUxZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzKPZ6+d6vqoetMGF+nWsSAlxnGFSnbm0hGH Jjn8AQmyBvNeNZRLKIAbFONNsz97aiwGRgYzSGtMN8z+hK0Px/laxFpM51eT3fEY X1hB71AlD0Jw2Ec/jQo9L6Rrt7pWHU/FwtK/dv+bkgufkO9v5cJLh8RgSX603WzI QGXY8T+l3Kux1cclifVpgqrg8Gl3zIVV5gjn+vulcdBw+nRmlF8LEogzpcP1yJSt bLgM7ngkAc7COxUSsK/tajCPRTL57Y5/yNWZJnCzCAwPzK3o3BW8U4wuFQi2TBP3 hD5JwPC2MFYS6DWHiXcASL++1A13Cfy/4wk+tJR1IHTeRi2A1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTC3CSno0779mO1yD2n6a86arzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzFjYzU1MzItYzFiMi0z NTE4LTg2MTktMzVlZDE1MGY3OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtaoIK5ekr9bZfOrj8gErjuXrlW45orjUn56hniUqbbDkqi2+1h+/FV 3NfqRpZH7XT+lFUZpp+49HiTYPXSPb3jDRH2/xnm8AcB067wQxwAtOjEWOxini9O nj/fiu+k/+i7OlOv2fckMNCywtcWtcFSsa7Rs3Y/eYpXRZ/ZygJBDUA2ybNCdDSY e3QbJSkrZfmrxJvKjMrqv7v914b51G0JLWelELOdf57R4tYZegbqwt3DlW61Dgr2 PiPmZAFvRHzVH2+pJXKwQBrpEZp2E4VcpYgweH+uxTdM/7a5GaU8U0WJhRZrpVfS h3Wju5bLeN2mOLyckdsSAQNCQpDCm/M= -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:08 2026 by rpki-client