$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/53bbf9ba-79ab-36ff-b434-a3408c2cad17.roa File: 53bbf9ba-79ab-36ff-b434-a3408c2cad17.roa (raw, json) Hash identifier: ISzpm1uujPGpXcKt9rsNEifStGCla7w5gHttbCiOVgg= Subject key identifier: F2:63:21:47:C4:F8:9F:3A:57:C9:0E:8A:FB:D1:88:C8:BF:70:AC:98 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFED42479261041A9C7BC0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/53bbf9ba-79ab-36ff-b434-a3408c2cad17.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ed:42:47:92:61:04:1a:9c:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=43f7808d-5d29-41a8-9629-91a13d568d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:2d:56:b6:f6:8a:2a:1e:46:08:0c:ac:53: e6:19:a6:fd:04:a6:3e:04:b5:24:46:38:6e:7d:19: cc:13:bc:c6:57:18:b9:87:b7:f3:ad:ff:68:2a:97: 20:48:92:78:6b:dd:84:00:42:ad:b3:a4:1f:c6:a7: 03:11:7a:f5:4c:20:75:20:ac:bb:78:cb:5a:cc:23: a3:e8:dd:18:c3:38:1f:40:8e:39:97:d2:cd:03:3a: 71:0a:b9:b8:a0:d4:7a:96:ec:f0:66:fd:c0:69:7d: 9c:ee:4d:66:6e:33:b6:20:08:c3:ad:bb:d3:9f:f4: c9:3e:d7:34:4d:e6:fb:66:d3:58:89:ab:b4:08:89: 96:3d:3b:82:e0:e6:62:2e:6b:39:43:0d:4e:f6:a4: 3e:62:39:e0:47:74:e3:56:06:f3:c6:30:5e:2a:93: f4:d6:a4:cb:44:7e:6c:4c:b2:69:82:56:d0:b0:1f: 5f:7a:35:93:0b:be:08:6f:ec:1d:ad:47:d9:bd:1c: a7:c3:e2:0a:9b:10:87:7a:b2:94:04:48:74:57:c5: 2e:df:80:cd:44:39:ce:00:82:56:53:7b:72:b1:af: 7c:b9:cf:db:66:5c:b5:c2:3e:ef:2f:70:68:a7:42: 95:d0:69:d1:b1:60:63:f5:a1:e7:34:53:81:eb:17: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:63:21:47:C4:F8:9F:3A:57:C9:0E:8A:FB:D1:88:C8:BF:70:AC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/53bbf9ba-79ab-36ff-b434-a3408c2cad17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8c:8e:d0:e3:f9:9d:ee:97:c0:56:cf:f0:d4:98:dc:98:e0: 0b:02:70:a1:be:ac:23:ef:ab:81:3d:86:1a:20:b1:5a:89:96: 6e:52:ac:22:58:c6:87:c4:3f:cf:e3:19:ef:e4:91:9e:e3:1e: dd:9b:ce:2a:92:d3:ed:60:1f:44:8f:92:11:ba:f7:1b:88:8a: 6e:15:c4:b0:01:b0:47:01:1b:9f:c8:b2:5c:a2:25:02:30:c2: bf:81:a1:21:ff:7e:cb:17:98:0e:da:68:9c:27:f6:17:28:d5: 0b:4f:60:fc:c0:4b:ed:77:8d:5a:3e:a5:b0:28:b6:dd:59:d1: d0:fe:9f:0e:b5:fa:0e:75:40:dd:f1:37:39:6c:7e:49:fa:29: e2:3e:a8:78:93:88:e9:72:6e:33:bb:f2:7a:9a:0f:d4:66:ce: e1:e5:75:d2:0c:91:25:16:9c:ac:6c:7c:09:fb:7f:5d:2e:3e: e9:25:81:a1:bd:3b:d9:74:9e:0b:1a:11:76:c6:7a:45:3c:d7: 45:8f:0b:40:63:eb:cf:bc:b5:cf:5f:12:ee:6b:91:80:11:bf: c3:8e:61:89:fe:ef:b1:ac:a6:f5:e2:ef:f1:a0:ae:c7:20:f1: 02:de:d5:19:8f:9a:87:9f:79:d1:74:a7:12:47:45:92:3a:7c: 8b:88:05:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+1CR5JhBBqce8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDNmNzgwOGQtNWQyOS00MWE4LTk2MjktOTFhMTNkNTY4ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllQtVrb2iioeRggMrFPmGab9BKY+BLUkRjhu fRnME7zGVxi5h7fzrf9oKpcgSJJ4a92EAEKts6QfxqcDEXr1TCB1IKy7eMtazCOj 6N0YwzgfQI45l9LNAzpxCrm4oNR6luzwZv3AaX2c7k1mbjO2IAjDrbvTn/TJPtc0 Teb7ZtNYiau0CImWPTuC4OZiLms5Qw1O9qQ+YjngR3TjVgbzxjBeKpP01qTLRH5s TLJpglbQsB9fejWTC74Ib+wdrUfZvRynw+IKmxCHerKUBEh0V8Uu34DNRDnOAIJW U3tysa98uc/bZly1wj7vL3Bop0KV0GnRsWBj9aHnNFOB6xcjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJjIUfE+J86V8kOivvRiMi/cKyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTNiYmY5YmEtNzlhYi0z NmZmLWI0MzQtYTM0MDhjMmNhZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSMjtDj+Z3ul8BWz/DUmNyY4AsCcKG+rCPvq4E9hhogsVqJlm5SrCJY xofEP8/jGe/kkZ7jHt2bziqS0+1gH0SPkhG69xuIim4VxLABsEcBG5/IslyiJQIw wr+BoSH/fssXmA7aaJwn9hco1QtPYPzAS+13jVo+pbAott1Z0dD+nw61+g51QN3x Nzlsfkn6KeI+qHiTiOlybjO78nqaD9RmzuHlddIMkSUWnKxsfAn7f10uPuklgaG9 O9l0ngsaEXbGekU810WPC0Bj68+8tc9fEu5rkYARv8OOYYn+77GspvXi7/Ggrscg 8QLe1RmPmoefedF0pxJHRZI6fIuIBSQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:34 2026 by rpki-client