$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa File: 884535ac-cbd9-3781-9ac7-5008b4e6206a.roa (raw, json) Hash identifier: 7KgmG75oX3B/LfmVphLCWP0/qHATma9I+bNhdrnEsBg= Subject key identifier: 73:99:35:BC:95:2E:83:4F:25:BA:84:65:E7:B9:50:D6:3E:DD:1A:72 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CB1EF32FA4FC56E177A500 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11351 IP address blocks: 72.231.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:1e:f3:2f:a4:fc:56:e1:77:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=45a1a1be-f426-4ce1-8307-c951c0d8809d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:5e:ba:74:6d:02:56:88:33:0b:bf:65:06: 85:ad:ec:ab:02:06:95:e6:a5:ed:2b:00:8d:bc:ee: 20:a2:4f:5f:89:cd:ee:cd:6e:65:6a:82:4c:f1:59: 7a:37:78:b8:c3:a1:71:ac:fc:0e:21:25:37:47:ec: 4f:4f:f9:1c:fa:1e:89:7c:fc:95:ba:a3:a2:68:37: e7:e4:21:d3:3f:b3:30:ee:50:4d:f0:e4:79:2f:7b: a3:52:0a:4c:d6:2a:b7:d5:af:3e:73:d8:24:78:85: f6:dc:c0:ee:ce:db:e4:00:01:5d:7e:83:49:18:be: 52:6a:08:ad:59:62:f5:94:7a:81:4b:ce:4b:7c:91: 4f:a0:ee:a7:0c:7c:d8:e6:60:d6:35:b8:07:f9:d0: 07:f1:63:4d:f6:5a:db:c5:cc:95:0f:62:85:4f:b2: 76:aa:d4:f4:a9:e4:12:8e:72:a5:e9:ae:c5:37:d0: 2e:19:b2:ae:ec:b4:96:14:ff:b2:b4:9a:69:f2:41: 6a:72:99:7c:88:b6:f7:10:c4:97:d4:4a:c6:d9:5f: 4e:ef:c9:b5:3f:2e:b6:1b:b7:95:9b:7d:1d:5f:e1: 18:c4:0a:f5:ba:fd:9f:3c:d8:71:7e:79:7b:07:b0: 9f:1a:28:d4:ab:1f:21:ce:a8:61:33:a7:c2:be:38: e6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:35:BC:95:2E:83:4F:25:BA:84:65:E7:B9:50:D6:3E:DD:1A:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/884535ac-cbd9-3781-9ac7-5008b4e6206a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 72.231.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b7:66:b3:05:0d:01:7c:d7:27:da:cf:e3:c1:6c:4d:5c:46: 25:29:34:14:51:c9:c6:f6:6f:9f:e1:03:c6:7d:a0:37:05:0e: 50:77:ed:99:cd:6d:d4:c9:7c:cf:41:94:e4:a0:aa:ee:36:fd: 6d:5c:ba:b5:73:fc:cc:01:c3:25:41:0a:25:60:50:59:a3:bc: 37:1f:93:95:1a:2b:32:b4:e8:bb:b9:b0:f9:ab:b5:3a:06:7e: ee:17:34:91:82:8c:58:e4:f3:31:bd:6d:a6:82:1d:7b:dd:3b: 77:80:11:32:e9:c0:de:34:74:2d:6a:66:52:4b:00:22:da:24: 0d:40:79:3d:3d:fa:18:25:5d:77:9b:04:01:27:fb:81:80:73: 74:7d:ed:47:b7:e2:88:00:ba:ee:34:a6:da:91:30:90:5d:f2: 84:e3:82:dc:41:34:b7:92:97:78:61:8d:ca:ba:d8:ed:81:98: a0:4c:e2:70:2f:2a:70:a5:99:fb:8b:b6:cb:21:82:88:97:a9: 08:84:58:c2:7c:07:bb:ee:45:a1:66:87:28:dd:f5:55:9f:7d: 01:bc:5c:70:fd:25:48:4c:81:cf:ed:0f:1f:1f:f6:d1:78:a2: 71:aa:f4:0a:1f:40:18:4e:3d:5a:85:d2:52:3c:dd:10:89:9c: be:7d:70:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayx7zL6T8VuF3pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDVhMWExYmUtZjQyNi00Y2UxLTgzMDctYzk1MWMwZDg4MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL9eunRtAlaIMwu/ZQaFreyrAgaV5qXtKwCN vO4gok9fic3uzW5laoJM8Vl6N3i4w6FxrPwOISU3R+xPT/kc+h6JfPyVuqOiaDfn 5CHTP7Mw7lBN8OR5L3ujUgpM1iq31a8+c9gkeIX23MDuztvkAAFdfoNJGL5Sagit WWL1lHqBS85LfJFPoO6nDHzY5mDWNbgH+dAH8WNN9lrbxcyVD2KFT7J2qtT0qeQS jnKl6a7FN9AuGbKu7LSWFP+ytJpp8kFqcpl8iLb3EMSX1ErG2V9O78m1Py62G7eV m30dX+EYxAr1uv2fPNhxfnl7B7CfGijUqx8hzqhhM6fCvjjmnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOZNbyVLoNPJbqEZee5UNY+3RpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODg0NTM1YWMtY2JkOS0z NzgxLTlhYzctNTAwOGI0ZTYyMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu3ZrMFDQF81yfaz+PBbE1cRiUpNBRRycb2b5/hA8Z9oDcFDlB37ZnN bdTJfM9BlOSgqu42/W1curVz/MwBwyVBCiVgUFmjvDcfk5UaKzK06Lu5sPmrtToG fu4XNJGCjFjk8zG9baaCHXvdO3eAETLpwN40dC1qZlJLACLaJA1AeT09+hglXXeb BAEn+4GAc3R97Ue34ogAuu40ptqRMJBd8oTjgtxBNLeSl3hhjcq62O2BmKBM4nAv KnClmfuLtsshgoiXqQiEWMJ8B7vuRaFmhyjd9VWffQG8XHD9JUhMgc/tDx8f9tF4 onGq9AofQBhOPVqF0lI83RCJnL59cJU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:12 2026 by rpki-client