$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa File: 4e8cc899-3135-3def-baf7-7434251d5fc8.roa (raw, json) Hash identifier: 4bJ3ASsF/GAOmm/pdP3KkSyOU9WMTlCYTYWceUanjVw= Subject key identifier: 3B:02:79:3D:44:E6:C1:49:79:75:56:21:54:46:C4:CC:FC:A7:97:FE Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFBE884D5C1720E987D100 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:be:88:4d:5c:17:20:e9:87:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=81370c29-726f-464b-bbe3-b64f34785b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:71:99:a0:b5:8a:92:f8:62:a6:50:f8:37: a8:5d:a1:ac:43:d5:83:43:10:bb:d2:df:57:1e:97: 84:c2:6a:71:12:cc:d5:66:3e:50:c7:20:10:34:24: 2c:59:37:e1:71:a2:58:1f:d6:53:25:34:12:3c:ed: cf:69:31:90:9a:89:1b:1a:02:68:b8:3d:ba:6f:30: 81:d7:37:71:6e:7f:62:71:9e:b1:0d:e5:ef:b8:48: 66:6e:e2:81:c8:d1:14:ab:1b:47:cc:1a:74:34:63: b9:8f:ff:d5:34:46:8b:d5:01:58:0e:f9:65:a5:63: 8d:fc:7a:97:43:4d:e1:1b:fc:03:8d:eb:87:03:58: 1c:29:3f:47:fb:59:11:d3:c7:2d:8f:d6:98:2f:2c: 5a:95:1b:03:2a:5a:2f:b8:3a:bf:cb:a6:66:7e:93: b2:bd:bc:94:40:62:ec:43:2a:05:6a:53:e2:28:97: 44:d0:ac:47:6f:ff:11:ff:b7:b8:93:fe:38:bf:12: ce:db:aa:39:21:f4:62:2a:ae:8d:b8:35:66:c7:33: 8d:b5:39:68:16:80:c4:b2:b3:5e:58:da:bf:5a:4d: dd:cf:24:b0:bb:ad:0c:f0:7c:fc:62:5c:f4:41:0b: a1:c9:c3:d3:96:3f:2b:ea:43:4e:07:50:48:d1:ac: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:02:79:3D:44:E6:C1:49:79:75:56:21:54:46:C4:CC:FC:A7:97:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e8cc899-3135-3def-baf7-7434251d5fc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:1d:a2:c1:11:99:aa:a9:e8:dc:03:3d:35:d2:45:eb:3c:9f: a8:80:bd:90:dd:08:69:e0:24:83:f2:03:b6:86:72:87:e6:18: cf:a3:ba:6c:2e:3c:3e:f3:9e:5f:10:22:4d:f2:ad:3a:d4:16: f2:a4:5a:f8:ed:f9:87:55:1f:b2:d7:46:8c:67:31:d9:01:bc: 1a:58:a0:26:e9:eb:42:46:e0:93:72:48:f3:47:b5:c2:8c:fe: af:19:99:38:37:8a:42:ba:c3:ff:5c:56:04:17:89:95:f5:7d: 57:a2:3b:73:48:40:1c:a5:45:30:c0:79:d7:7d:45:9c:b8:d7: ec:76:97:07:60:6b:fe:5d:f1:89:cf:96:1f:91:0e:10:78:d4: 3d:8e:47:76:b5:a0:15:d2:d3:e6:40:52:70:c4:02:ae:9f:bd: 33:3e:ed:a7:24:ba:a3:af:fa:c9:2d:92:79:e8:79:3d:47:59: c0:41:fa:be:0a:8d:51:4c:4a:ec:df:9f:0f:a4:43:51:25:db: bf:32:d7:b7:c8:d0:cc:1c:90:b5:5e:a2:db:6a:7b:47:57:7e: fe:ff:c9:22:ad:b8:41:c5:9d:66:57:2e:ce:58:21:f4:dd:7b: 05:44:2d:ee:a0:31:fe:c4:83:30:d1:0f:ec:95:31:10:25:7f: 1f:7e:fa:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/76ITVwXIOmH0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODEzNzBjMjktNzI2Zi00NjRiLWJiZTMtYjY0ZjM0Nzg1YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpZxmaC1ipL4YqZQ+DeoXaGsQ9WDQxC70t9X HpeEwmpxEszVZj5QxyAQNCQsWTfhcaJYH9ZTJTQSPO3PaTGQmokbGgJouD26bzCB 1zdxbn9icZ6xDeXvuEhmbuKByNEUqxtHzBp0NGO5j//VNEaL1QFYDvllpWON/HqX Q03hG/wDjeuHA1gcKT9H+1kR08ctj9aYLyxalRsDKlovuDq/y6ZmfpOyvbyUQGLs QyoFalPiKJdE0KxHb/8R/7e4k/44vxLO26o5IfRiKq6NuDVmxzONtTloFoDEsrNe WNq/Wk3dzySwu60M8Hz8Ylz0QQuhycPTlj8r6kNOB1BI0azZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsCeT1E5sFJeXVWIVRGxMz8p5f+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGU4Y2M4OTktMzEzNS0z ZGVmLWJhZjctNzQzNDI1MWQ1ZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSB/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYdosERmaqp6NwDPTXSRes8n6iAvZDdCGngJIPyA7aGcofmGM+jumwu PD7znl8QIk3yrTrUFvKkWvjt+YdVH7LXRoxnMdkBvBpYoCbp60JG4JNySPNHtcKM /q8ZmTg3ikK6w/9cVgQXiZX1fVeiO3NIQBylRTDAedd9RZy41+x2lwdga/5d8YnP lh+RDhB41D2OR3a1oBXS0+ZAUnDEAq6fvTM+7ackuqOv+sktknnoeT1HWcBB+r4K jVFMSuzfnw+kQ1El278y17fI0MwckLVeottqe0dXfv7/ySKtuEHFnWZXLs5YIfTd ewVELe6gMf7EgzDRD+yVMRAlfx9++jo= -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:15 2026 by rpki-client