$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa File: 3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa (raw, json) Hash identifier: dZRBDIy7NE7UY9772cdWB21GmR0ZgGt/1kX3N0yma0U= Subject key identifier: D3:8E:4B:F8:44:BE:A1:BE:6E:34:22:F2:D2:7B:C6:B6:04:A9:C6:71 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFF05D0519EB39BB9EC480 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:f0:5d:05:19:eb:39:bb:9e:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=af7c864f-b89d-4c9f-8a32-faecca00ee0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:6d:74:9a:1e:5f:17:48:c8:0f:2e:a6:25: 81:10:2b:26:04:1e:c2:22:6c:ff:2a:ce:32:5b:34: 4e:67:f2:b6:8e:ce:6d:d0:54:54:3d:a9:79:37:f2: 84:d7:8c:7e:a7:e7:99:19:a6:67:3c:15:6c:da:43: 9e:0f:be:30:e6:5f:2b:2e:cd:cd:61:ad:16:17:ba: e4:3f:9d:47:e9:ec:fc:b9:fe:3d:b5:7c:b9:13:08: de:40:5a:a5:bc:83:31:7c:17:a0:c5:17:97:ce:1f: 1d:29:2e:bb:4f:1f:e1:aa:eb:cf:96:c7:ac:2b:99: 05:9e:07:af:f9:38:d7:d8:da:02:67:f4:0d:f0:c4: 44:4c:32:5a:ed:3f:78:af:d6:e8:55:b7:80:40:09: fe:d1:66:d6:c2:2e:6f:5f:d9:ac:80:5d:1b:e4:22: 28:cd:4a:53:b8:22:09:8c:c1:27:bc:19:5f:6a:1f: ac:cb:60:ca:de:42:c1:74:9f:b5:78:62:6f:60:02: ff:93:ec:07:c4:ae:67:1e:c9:57:a1:a5:54:a9:70: d1:d6:f5:25:f4:2d:b1:87:4c:1a:3c:30:f1:1a:28: c0:00:80:03:6d:b1:31:03:4a:cb:4a:8f:ae:62:28: 2a:60:66:54:21:db:f5:80:a7:d3:20:ad:d9:85:b5: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8E:4B:F8:44:BE:A1:BE:6E:34:22:F2:D2:7B:C6:B6:04:A9:C6:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d0c08cc-605a-3f8e-8e09-fa5fda8f5445.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b2:36:37:3e:dd:94:e7:2d:4a:cd:37:3b:55:ff:34:9e:e1: 14:37:02:6b:cf:a6:31:a5:dd:65:b0:d7:3c:55:13:44:5f:1b: 26:26:19:b1:89:b2:b7:ef:8d:54:5c:f6:9c:6b:d3:25:28:0b: 55:19:ee:f2:6d:03:1b:0e:2c:1a:90:61:87:d9:aa:ce:c9:d8: ca:07:72:55:ff:12:44:b8:51:5b:18:db:38:60:ae:8d:5e:a0: af:45:73:c0:13:89:62:de:29:01:94:89:ef:71:bb:68:34:ff: 0b:f7:d4:4b:b7:e1:b4:75:4b:89:31:67:5f:d4:5f:7e:d6:42: e7:94:fc:f3:82:2f:97:f6:17:dc:87:8a:47:e3:c1:75:70:da: 25:b0:19:03:0f:b6:7b:ac:89:b8:24:7f:de:fc:b0:2f:7a:40: d2:7e:ff:d0:50:45:48:eb:4a:c6:d9:6f:3c:68:cf:eb:bd:51: e4:e0:8b:15:7d:b2:6d:ea:55:c6:9f:b5:e5:f5:48:32:95:da: 4c:40:93:df:b0:1b:ac:26:54:76:80:37:17:ee:98:2d:48:77: 38:35:5a:96:28:53:3c:2b:7f:c5:f2:52:00:92:5f:28:f5:4e: c0:b3:2f:13:d1:db:b8:6a:46:da:5e:1f:b0:08:a4:1f:9d:7b: b6:e9:85:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09//BdBRnrObuexIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWY3Yzg2NGYtYjg5ZC00YzlmLThhMzItZmFlY2NhMDBlZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwxtdJoeXxdIyA8upiWBECsmBB7CImz/Ks4y WzROZ/K2js5t0FRUPal5N/KE14x+p+eZGaZnPBVs2kOeD74w5l8rLs3NYa0WF7rk P51H6ez8uf49tXy5EwjeQFqlvIMxfBegxReXzh8dKS67Tx/hquvPlsesK5kFngev +TjX2NoCZ/QN8MRETDJa7T94r9boVbeAQAn+0WbWwi5vX9msgF0b5CIozUpTuCIJ jMEnvBlfah+sy2DK3kLBdJ+1eGJvYAL/k+wHxK5nHslXoaVUqXDR1vUl9C2xh0wa PDDxGijAAIADbbExA0rLSo+uYigqYGZUIdv1gKfTIK3ZhbXwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOOS/hEvqG+bjQi8tJ7xrYEqcZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2QwYzA4Y2MtNjA1YS0z ZjhlLThlMDktZmE1ZmRhOGY1NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiyNjc+3ZTnLUrNNztV/zSe4RQ3AmvPpjGl3WWw1zxVE0RfGyYmGbGJ srfvjVRc9pxr0yUoC1UZ7vJtAxsOLBqQYYfZqs7J2MoHclX/EkS4UVsY2zhgro1e oK9Fc8ATiWLeKQGUie9xu2g0/wv31Eu34bR1S4kxZ1/UX37WQueU/POCL5f2F9yH ikfjwXVw2iWwGQMPtnusibgkf978sC96QNJ+/9BQRUjrSsbZbzxoz+u9UeTgixV9 sm3qVcafteX1SDKV2kxAk9+wG6wmVHaANxfumC1Idzg1WpYoUzwrf8XyUgCSXyj1 TsCzLxPR27hqRtpeH7AIpB+de7bphQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:37 2026 by rpki-client