$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa File: 0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa (raw, json) Hash identifier: lsUfIrFt6rMKsCtO2QrKzwl3U5ex3/hKNHP1q0JG+H8= Subject key identifier: 72:E2:A2:50:E8:84:ED:33:CF:6F:72:8D:26:AB:33:62:C3:23:C8:98 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFEDE71C6CBB0BDC9CE900 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 71.46.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ed:e7:1c:6c:bb:0b:dc:9c:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=38561acc-fa1d-47b3-bf54-bfe1da7141b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:f8:23:3a:54:46:4f:1e:43:b3:cf:80:13: 1a:7e:79:d8:47:9c:89:93:55:de:1f:95:c8:0c:2e: 05:cf:c5:e5:c2:76:00:7c:c9:f2:49:79:60:ad:8f: 9f:a4:e0:ad:cf:ad:3e:2e:e2:10:db:be:64:f5:f8: f7:23:04:5f:3e:1e:3a:3b:f2:47:13:6d:b1:6d:d6: b5:3b:ac:50:88:9a:27:7f:d0:ae:98:e3:4a:cd:b8: 3c:78:83:df:ef:ac:c7:0c:ce:1a:29:e0:ac:04:81: 94:47:7e:77:c7:13:9c:f4:48:31:b1:aa:91:78:19: ea:ac:19:18:d6:e0:d0:0a:35:04:c5:5c:4f:e5:38: 22:3a:f9:26:ce:87:61:1f:4a:9c:c2:96:bb:e7:8c: 34:a3:e6:80:79:3f:83:fb:83:24:27:82:7e:dd:dc: 1f:a9:e7:c4:eb:73:8f:91:32:48:13:55:bd:3e:23: 9a:ef:d7:fa:68:a9:ae:29:a4:90:57:b1:35:32:ea: cb:82:f1:48:e1:bc:ee:3b:b3:71:6b:eb:ca:e9:be: d5:ef:2a:fe:0e:8a:5a:bc:4e:9a:3d:73:93:18:3e: 59:bd:31:00:25:b3:14:56:29:f9:93:a0:62:e7:f4: 07:9d:5a:b6:cf:8f:17:f3:ce:df:cc:d4:91:46:9f: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E2:A2:50:E8:84:ED:33:CF:6F:72:8D:26:AB:33:62:C3:23:C8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0de2bde0-befe-3b5d-bbf4-7c7ea6fa5c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.46.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:bc:a2:7f:ee:9f:2d:fe:32:9d:60:91:e9:42:39:47:b5:eb: 8c:51:b7:88:d7:0d:2c:ad:ca:f6:97:b6:12:36:3f:69:f8:70: 99:6c:57:b2:e1:c4:8e:10:96:a9:cd:5b:94:98:55:60:cd:9a: 9d:a3:f7:07:fd:02:16:7f:81:a2:f6:68:6d:b0:45:1f:0a:21: a2:53:d7:9d:a0:33:77:a9:dc:34:0a:a8:24:18:99:df:f7:17: 8e:7b:fc:7c:19:19:2b:7c:56:34:e0:8d:e1:57:05:b0:b3:1d: 83:44:ce:d9:5e:e2:5e:ea:04:f6:37:0c:d5:65:c7:d1:c7:e9: a0:03:b0:71:bf:a3:11:6c:86:11:3e:ce:f9:46:0f:b5:4c:29: f4:51:1f:7e:e8:6a:3a:6d:0f:0a:76:57:34:00:ac:ce:77:9c: 07:c8:2a:50:28:1c:c4:51:97:55:9d:07:62:4c:3e:35:04:44: 82:17:48:4d:02:17:c5:ec:53:94:08:8e:2b:dd:e3:c8:eb:2c: 83:d2:f9:ec:95:f7:1f:7b:08:c5:06:c7:5c:db:1b:3f:f7:65: fb:36:09:27:29:6f:1f:25:c8:56:e0:12:a7:15:d2:0c:b7:44: 51:42:09:29:ad:15:9c:e1:a7:a9:6c:41:07:28:b6:15:67:62: fa:18:b3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+3nHGy7C9yc6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Mzg1NjFhY2MtZmExZC00N2IzLWJmNTQtYmZlMWRhNzE0MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnP4IzpURk8eQ7PPgBMafnnYR5yJk1XeH5XI DC4Fz8XlwnYAfMnySXlgrY+fpOCtz60+LuIQ275k9fj3IwRfPh46O/JHE22xbda1 O6xQiJonf9CumONKzbg8eIPf76zHDM4aKeCsBIGUR353xxOc9EgxsaqReBnqrBkY 1uDQCjUExVxP5TgiOvkmzodhH0qcwpa754w0o+aAeT+D+4MkJ4J+3dwfqefE63OP kTJIE1W9PiOa79f6aKmuKaSQV7E1MurLgvFI4bzuO7Nxa+vK6b7V7yr+DopavE6a PXOTGD5ZvTEAJbMUVin5k6Bi5/QHnVq2z48X887fzNSRRp8LOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLiolDohO0zz29yjSarM2LDI8iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGRlMmJkZTAtYmVmZS0z YjVkLWJiZjQtN2M3ZWE2ZmE1YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRy4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH68on/uny3+Mp1gkelCOUe164xRt4jXDSytyvaXthI2P2n4cJlsV7Lh xI4QlqnNW5SYVWDNmp2j9wf9AhZ/gaL2aG2wRR8KIaJT152gM3ep3DQKqCQYmd/3 F457/HwZGSt8VjTgjeFXBbCzHYNEztle4l7qBPY3DNVlx9HH6aADsHG/oxFshhE+ zvlGD7VMKfRRH37oajptDwp2VzQArM53nAfIKlAoHMRRl1WdB2JMPjUERIIXSE0C F8XsU5QIjivd48jrLIPS+eyV9x97CMUGx1zbGz/3Zfs2CScpbx8lyFbgEqcV0gy3 RFFCCSmtFZzhp6lsQQcothVnYvoYs50= -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:14 2026 by rpki-client