$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e91da531-60ee-3bc6-9e24-cca658cb9ee3.roa File: e91da531-60ee-3bc6-9e24-cca658cb9ee3.roa (raw, json) Hash identifier: hbk5lsYwSpHyUQ30Cdiu7/inw85SNoJdHXgpZN2KkFk= Subject key identifier: 6D:72:94:A6:60:8A:82:86:FF:18:95:66:D8:F2:A0:DD:D4:22:18:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FC4666A1E483848056B2F6C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e91da531-60ee-3bc6-9e24-cca658cb9ee3.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 11840 IP address blocks: 72.13.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:6a:1e:48:38:48:05:6b:2f:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=e46a3fca-a827-4bb1-8677-133ec8ce3c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:91:bb:17:74:dd:ba:1a:b8:97:0d:ee:df: 24:63:a9:28:f6:67:a6:87:64:dd:78:2c:aa:ba:ce: 65:76:46:78:62:83:6f:f9:3c:5a:a6:ec:a8:d9:c2: d9:b9:f9:48:40:61:a4:47:60:e8:d4:46:3d:06:8f: 8c:8d:48:fb:8c:46:a1:22:e1:28:59:23:e4:0a:c6: 1e:08:3b:3d:b1:d5:98:61:a9:90:ea:6e:53:e7:06: f2:f7:81:8d:6a:e8:d1:11:cd:e6:7b:68:00:04:39: 87:f8:2f:a6:30:93:f8:bd:67:ef:e4:5e:d5:ca:0b: 68:49:97:38:5a:0e:5e:c5:c9:b6:d2:a3:b8:b0:6f: 7d:a2:00:bb:f8:b3:0e:80:01:33:31:b7:0f:e3:74: 25:e5:7a:09:3e:dc:b0:bb:3a:83:57:4c:e9:d7:aa: e1:d7:20:aa:b4:4f:1b:88:c2:d4:58:c7:e0:46:25: 54:53:d9:3d:75:d6:38:4c:96:2d:15:5e:05:e1:c9: 6a:c3:98:59:b5:7c:8c:1c:a1:1a:22:2b:00:4f:18: d6:ab:7f:59:19:ad:46:5d:84:a8:9a:36:8b:f5:c1: 4c:a1:45:c8:ad:5a:2f:11:14:7a:8e:99:48:45:b9: e2:f0:7a:90:3f:76:3b:f2:7d:47:03:f8:27:c1:ce: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:72:94:A6:60:8A:82:86:FF:18:95:66:D8:F2:A0:DD:D4:22:18:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e91da531-60ee-3bc6-9e24-cca658cb9ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9c:13:2b:83:1a:5d:f3:b1:48:33:64:c2:5c:f7:f9:63:c7: 00:f9:8c:5c:85:7c:ff:ab:5d:80:ba:29:07:6f:fd:c6:d4:fa: 8d:fc:5f:1b:a4:cf:25:97:d0:1d:f0:d4:ae:74:af:e1:44:84: 29:cc:78:fd:6a:cb:bc:18:26:f2:ec:14:98:22:ea:30:84:84: ec:f6:b5:62:22:f6:d1:f8:81:61:ba:11:22:7e:c1:98:87:70: 53:93:b6:24:49:b0:8b:d4:b9:d6:5c:15:79:48:6c:d8:39:10: 44:da:e0:e4:5a:74:e2:85:1e:74:32:3d:be:ea:04:21:8a:78: 48:bb:c2:50:cc:64:69:11:08:44:0f:df:f4:20:79:86:21:12: 37:9f:40:30:c1:40:c9:2f:be:f0:73:41:b8:2b:b4:ec:4c:3d: c7:f1:d9:75:c2:62:3c:f8:29:7b:60:9c:36:d2:3f:ee:af:ce: b4:94:1b:65:ce:75:61:13:7c:92:18:40:3c:a6:7f:5e:31:e7: 67:7e:01:57:fb:50:6f:cf:b0:da:40:00:9f:89:7b:42:25:3d: 67:cb:e3:ef:ef:1a:5f:ad:ed:e0:b0:21:ad:5e:f1:dd:51:05: 76:68:1f:cf:67:be:d9:02:36:ea:96:e7:6a:d2:b9:12:10:ce: 69:2a:2b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZmoeSDhIBWsvbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk ZTQ2YTNmY2EtYTgyNy00YmIxLTg2NzctMTMzZWM4Y2UzYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowCRuxd03boauJcN7t8kY6ko9memh2TdeCyq us5ldkZ4YoNv+Txapuyo2cLZuflIQGGkR2Do1EY9Bo+MjUj7jEahIuEoWSPkCsYe CDs9sdWYYamQ6m5T5wby94GNaujREc3me2gABDmH+C+mMJP4vWfv5F7VygtoSZc4 Wg5excm20qO4sG99ogC7+LMOgAEzMbcP43Ql5XoJPtywuzqDV0zp16rh1yCqtE8b iMLUWMfgRiVUU9k9ddY4TJYtFV4F4clqw5hZtXyMHKEaIisATxjWq39ZGa1GXYSo mjaL9cFMoUXIrVovERR6jplIRbni8HqQP3Y78n1HA/gnwc6c5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1ylKZgioKG/xiVZtjyoN3UIhh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTkxZGE1MzEtNjBlZS0z YmM2LTllMjQtY2NhNjU4Y2I5ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGcEyuDGl3zsUgzZMJc9/ljxwD5jFyFfP+rXYC6KQdv/cbU+o38Xxuk zyWX0B3w1K50r+FEhCnMeP1qy7wYJvLsFJgi6jCEhOz2tWIi9tH4gWG6ESJ+wZiH cFOTtiRJsIvUudZcFXlIbNg5EETa4ORadOKFHnQyPb7qBCGKeEi7wlDMZGkRCEQP 3/QgeYYhEjefQDDBQMkvvvBzQbgrtOxMPcfx2XXCYjz4KXtgnDbSP+6vzrSUG2XO dWETfJIYQDymf14x52d+AVf7UG/PsNpAAJ+Je0IlPWfL4+/vGl+t7eCwIa1e8d1R BXZoH89nvtkCNuqW52rSuRIQzmkqKxU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:33 2026 by rpki-client