$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa File: e15131cc-650e-3c36-9991-f449603d4fc4.roa (raw, json) Hash identifier: HWkmlu6Sowdy9jpox9Y1Rb3RXgr2WQNNjO+0PtJ0/6U= Subject key identifier: B0:EA:41:42:20:46:20:A5:ED:B2:C6:63:EE:8F:94:F2:34:6A:61:B9 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584D3F64F3E3BDD3F07EFD212980 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 21547 IP address blocks: 72.12.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f3:e3:bd:d3:f0:7e:fd:21:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=11f5066b-4009-4274-92ac-f94fad12a00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:2b:55:0a:a8:de:b3:cf:da:8e:9d:b2:af: f9:96:47:b1:26:fc:f8:5e:14:34:9f:89:d2:94:2e: 8a:81:c6:46:2d:85:1d:8d:eb:aa:32:b5:7a:12:f6: 47:ca:28:bc:f7:9a:4c:78:e2:15:ee:98:a1:f2:0a: 92:60:99:76:b7:3c:07:a2:2b:9d:ed:91:bd:45:f7: 67:b6:10:dc:9b:a5:6b:64:7f:a2:55:c8:92:c4:b4: b6:2b:7f:c7:39:26:80:ee:3d:03:e0:44:0f:72:69: d0:af:3b:36:d2:a9:0c:9d:e0:e1:5c:86:4e:d9:3e: db:ef:1f:c5:ec:dd:f0:c6:e5:33:22:9f:9d:2f:86: 3c:31:8b:3d:04:ba:71:2f:aa:33:b9:cd:0e:00:c1: 9b:0d:0e:79:fa:be:b0:02:e0:59:ab:2d:ae:2e:f3: 5c:09:ab:6b:cd:6b:0a:0b:c7:22:4c:f7:ba:7f:f2: ba:4a:98:b7:d1:2d:98:80:55:fa:22:3f:ac:ef:47: f5:ef:c0:ea:8f:36:f1:e6:39:33:b9:d5:11:1f:de: 6b:7f:7c:e5:78:17:ca:d0:44:65:e3:19:7b:fa:71: 05:ec:04:b4:02:7c:1d:10:02:36:b2:81:2c:26:9e: 21:48:3d:28:df:ad:f9:2a:bc:cc:4b:fe:69:4b:a6: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EA:41:42:20:46:20:A5:ED:B2:C6:63:EE:8F:94:F2:34:6A:61:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 72.12.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0c:e7:c1:91:2f:da:c7:c0:65:1b:91:5d:9a:ac:80:38:c5: 1a:e5:11:79:a7:1f:36:96:ed:4b:66:be:09:33:9d:1f:8c:60: fb:c3:4e:b7:3c:4c:48:11:b8:65:6d:a8:9e:e8:e4:1b:b6:df: 85:1c:7a:92:67:5f:80:2c:45:df:4b:5f:8f:9c:db:37:79:b3: 38:e2:9b:24:50:a9:da:de:f7:cf:81:ee:d6:9d:4e:eb:d4:53: 31:d1:cd:e4:d6:e1:ad:c9:85:e9:ed:c7:e2:d4:cb:33:b2:b4: de:ce:e8:31:f0:e2:e1:2a:76:1d:84:87:1e:da:bc:b5:95:b9: 67:22:18:ba:ac:55:41:14:3a:ad:3f:89:ee:93:ef:86:4c:b7: 77:d9:31:f5:bd:1b:52:69:be:71:7e:a8:f0:52:35:b4:04:8e: ab:c9:53:41:45:bd:f5:c9:5d:b1:94:f8:ea:8b:73:f9:cd:d1: f7:b8:42:12:39:88:c7:2a:77:c1:21:e3:ba:a3:85:10:a9:a1: e6:da:f2:b4:e6:4a:02:d3:66:df:68:9b:7f:af:d7:dd:96:70: 86:fa:46:c8:43:d4:82:3d:93:fa:78:2f:5a:3b:3a:1c:9c:52: ba:73:5c:e9:b3:df:12:ae:3c:d6:b6:f4:44:24:c0:5c:e2:4e: fa:dd:55:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPPjvdPwfv0hKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MTFmNTA2NmItNDAwOS00Mjc0LTkyYWMtZjk0ZmFkMTJhMDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9crVQqo3rPP2o6dsq/5lkexJvz4XhQ0n4nS lC6KgcZGLYUdjeuqMrV6EvZHyii895pMeOIV7pih8gqSYJl2tzwHoiud7ZG9Rfdn thDcm6VrZH+iVciSxLS2K3/HOSaA7j0D4EQPcmnQrzs20qkMneDhXIZO2T7b7x/F 7N3wxuUzIp+dL4Y8MYs9BLpxL6ozuc0OAMGbDQ55+r6wAuBZqy2uLvNcCatrzWsK C8ciTPe6f/K6Spi30S2YgFX6Ij+s70f178Dqjzbx5jkzudURH95rf3zleBfK0ERl 4xl7+nEF7AS0AnwdEAI2soEsJp4hSD0o3635KrzMS/5pS6aFLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDqQUIgRiCl7bLGY+6PlPI0amG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTE1MTMxY2MtNjUwZS0z YzM2LTk5OTEtZjQ0OTYwM2Q0ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUM58GRL9rHwGUbkV2arIA4xRrlEXmnHzaW7UtmvgkznR+MYPvDTrc8 TEgRuGVtqJ7o5Bu234UcepJnX4AsRd9LX4+c2zd5szjimyRQqdre98+B7tadTuvU UzHRzeTW4a3Jhentx+LUyzOytN7O6DHw4uEqdh2Ehx7avLWVuWciGLqsVUEUOq0/ ie6T74ZMt3fZMfW9G1JpvnF+qPBSNbQEjqvJU0FFvfXJXbGU+OqLc/nN0fe4QhI5 iMcqd8Eh47qjhRCpoeba8rTmSgLTZt9om3+v192WcIb6RshD1II9k/p4L1o7Ohyc UrpzXOmz3xKuPNa29EQkwFziTvrdVQ8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:01:10 2026 by rpki-client