$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa File: 046a18a1-9517-36d9-a0b7-47a264a808a9.roa (raw, json) Hash identifier: 0ZgKIGkGQ2v05y3s1stkqdxiCq9HiiiRXo2/ZCW+Cuc= Subject key identifier: 0E:88:72:E8:1A:9B:9B:C5:06:A1:C4:37:55:61:BC:63:DE:D5:88:51 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFF22EA5E74FA51CE8B2A0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.17.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:f2:2e:a5:e7:4f:a5:1c:e8:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=db87386c-2485-4b01-8217-bb568eb85c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ba:58:9b:4f:c2:05:c8:73:4b:c6:ff:e2:2c: 55:8b:09:eb:b4:7e:b5:f0:98:fd:fa:6b:e6:b3:66: 28:2e:2d:fc:3d:c5:48:aa:71:e2:c3:ba:22:e2:da: 00:3f:b4:ed:a0:86:3b:77:18:62:e5:5e:81:ee:37: eb:fc:3c:bb:3f:ac:eb:21:52:16:68:f7:e5:96:f4: ec:13:53:c0:54:a8:c8:85:4c:a7:de:c2:6a:fd:fb: 3f:fa:8f:35:e1:f0:8c:24:4d:44:85:db:2f:2d:4a: a0:88:77:3d:44:48:3c:54:cd:57:28:4d:34:fd:27: a2:ff:40:d4:fa:60:5e:86:e7:11:c6:8b:cd:66:0c: ff:5e:55:8e:d8:1e:18:d6:a9:93:54:2b:e3:62:af: 02:68:77:2a:d3:9c:03:9a:a3:2a:12:a4:54:a3:d7: 5f:fa:df:01:4e:bc:34:fb:a4:cd:cf:98:45:9d:60: 20:c6:c7:aa:8d:d7:ab:a5:2a:56:f4:15:5e:03:31: e3:b8:00:e6:e1:e0:95:65:12:64:e7:5e:52:96:22: cc:28:8a:18:09:13:2f:fc:1e:47:90:b4:ed:7b:0f: 09:96:04:ad:e2:39:8d:d7:09:3a:49:4b:f4:93:7d: 91:b3:3f:87:e2:73:72:57:38:63:35:31:04:00:76: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:88:72:E8:1A:9B:9B:C5:06:A1:C4:37:55:61:BC:63:DE:D5:88:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/046a18a1-9517-36d9-a0b7-47a264a808a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.17.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:69:36:86:44:c9:a2:ac:0f:9f:3b:2e:c5:03:f0:9a:d5:37: 0e:b2:26:94:ef:1c:70:f3:8a:5e:75:61:75:e4:ce:a9:b2:db: 84:f7:ae:fe:23:79:be:78:98:35:bc:18:ce:8d:bb:8b:74:3c: 56:fc:19:3b:28:19:35:63:5c:07:f2:83:aa:2d:72:00:3e:d9: cf:bd:98:6a:cd:9b:fa:60:a7:4f:70:3f:e5:c2:22:4f:e1:7d: ec:f4:0f:e9:2d:99:9e:ab:ea:62:ef:50:60:4b:ab:d7:47:34: 7c:c3:22:b6:b8:93:a4:0d:7f:f1:ee:48:51:64:a8:1d:72:e7: 0b:28:cb:5a:1e:44:51:a0:30:a6:8a:66:1c:45:dc:80:aa:ea: 91:c3:62:07:92:1c:6d:6f:01:29:87:85:f3:0b:eb:f1:b4:4f: fa:34:6d:38:6a:98:ff:d3:9e:84:d9:8b:2a:a6:6d:49:59:69: 33:43:de:3d:6e:4e:83:1d:a3:2b:7f:03:12:8b:96:a8:5b:66: 8b:5b:51:30:89:2a:27:8a:f1:f8:e8:48:9d:5b:ac:56:eb:8e: 2e:0f:ec:2c:6c:1e:fc:27:37:5d:25:89:97:60:5b:8e:ca:b1: 93:9c:88:07:3e:dc:b3:b3:6c:87:68:11:28:5f:28:d7:5a:3d: 5a:a0:35:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09//IupedPpRzosqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGI4NzM4NmMtMjQ4NS00YjAxLTgyMTctYmI1NjhlYjg1YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rpYm0/CBchzS8b/4ixViwnrtH618Jj9+mvm s2YoLi38PcVIqnHiw7oi4toAP7TtoIY7dxhi5V6B7jfr/Dy7P6zrIVIWaPfllvTs E1PAVKjIhUyn3sJq/fs/+o814fCMJE1EhdsvLUqgiHc9REg8VM1XKE00/Sei/0DU +mBehucRxovNZgz/XlWO2B4Y1qmTVCvjYq8CaHcq05wDmqMqEqRUo9df+t8BTrw0 +6TNz5hFnWAgxseqjderpSpW9BVeAzHjuADm4eCVZRJk515SliLMKIoYCRMv/B5H kLTtew8JlgSt4jmN1wk6SUv0k32Rsz+H4nNyVzhjNTEEAHYPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6Icugam5vFBqHEN1VhvGPe1YhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDQ2YTE4YTEtOTUxNy0z NmQ5LWEwYjctNDdhMjY0YTgwOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1pNoZEyaKsD587LsUD8JrVNw6yJpTvHHDzil51YXXkzqmy24T3rv4j eb54mDW8GM6Nu4t0PFb8GTsoGTVjXAfyg6otcgA+2c+9mGrNm/pgp09wP+XCIk/h fez0D+ktmZ6r6mLvUGBLq9dHNHzDIra4k6QNf/HuSFFkqB1y5wsoy1oeRFGgMKaK ZhxF3ICq6pHDYgeSHG1vASmHhfML6/G0T/o0bThqmP/TnoTZiyqmbUlZaTND3j1u ToMdoyt/AxKLlqhbZotbUTCJKieK8fjoSJ1brFbrji4P7CxsHvwnN10liZdgW47K sZOciAc+3LOzbIdoEShfKNdaPVqgNdQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:09 2026 by rpki-client