$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa File: 899b0c89-a566-3e19-970f-8d740c78348c.roa (raw, json) Hash identifier: mMLUtj6LFujws7CvFpMxJqa1maFfHGeJ/XoTrYW3jrc= Subject key identifier: BC:A3:87:D6:8E:8A:A5:C2:4E:75:0F:3F:7F:D7:E5:A1:72:21:C7:C2 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFEFC87BB51E9F99563B80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ef:c8:7b:b5:1e:9f:99:56:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c638fd0c-4ff1-4cce-9321-9dcf8f801dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:d0:8f:29:d6:9b:6b:54:23:dd:5f:08:72: 94:86:ec:4f:5c:29:e1:6e:8d:b6:7a:7a:79:2d:1c: 0c:0e:8c:39:ee:9f:6a:25:6d:0b:b4:06:e1:0e:a2: 7d:dd:30:1d:bf:63:13:ee:18:af:bb:61:43:64:01: 50:1c:ed:00:ee:00:3a:18:48:2d:ce:a6:a4:e2:40: e6:54:fe:8b:a0:9e:04:22:5b:28:2c:49:34:ae:19: 16:ea:90:a9:30:de:63:4d:60:8f:1c:ba:16:e4:ea: 16:2c:a1:d0:e6:ca:63:4b:bd:3d:06:8d:09:7c:36: fe:28:03:96:f9:9c:87:bf:f4:78:9c:21:0f:c1:44: fa:46:f5:6d:4c:74:6d:ec:9d:ab:f2:bb:d5:a1:16: d6:f6:4c:aa:56:66:b3:f7:b6:91:b8:10:3e:0e:4e: 9c:68:6e:f9:98:96:da:13:06:4c:12:0c:40:94:36: 36:13:47:38:6e:0d:2f:df:c0:3d:2e:ce:e5:bf:05: 5f:70:b5:55:35:35:84:0f:8d:fb:1e:7a:ab:f5:32: 88:6a:fa:22:a4:3e:bb:3a:37:e7:cd:c4:53:14:68: 2b:cb:4b:3a:3e:1a:f4:c2:3c:51:69:06:ee:6e:7b: 42:48:25:60:e6:63:ff:46:b7:ef:42:f8:4f:0a:33: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A3:87:D6:8E:8A:A5:C2:4E:75:0F:3F:7F:D7:E5:A1:72:21:C7:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/899b0c89-a566-3e19-970f-8d740c78348c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ff:d3:2b:30:6f:a7:6f:58:52:3f:88:dc:b5:e3:89:c6:b6: 9a:f6:bc:0d:e3:f3:1c:79:11:18:bd:a1:de:a2:9e:1b:2a:3f: ee:06:c9:2b:29:c3:87:b5:69:9d:55:41:55:82:c8:94:11:8b: 37:91:6c:9c:58:9e:4b:a0:63:06:cd:b9:b3:3c:ad:2d:a1:a5: 48:d7:ce:90:f8:0d:1e:f1:a3:f5:19:1a:64:62:d0:45:05:ae: 31:2a:9e:cc:9b:03:ff:a6:30:5d:4f:18:2f:a6:28:45:a8:01: cb:b8:bb:42:b8:22:f3:7a:cb:04:8f:13:41:b6:c1:59:bd:be: 6a:04:12:d7:9e:a1:61:7e:87:38:dc:00:27:73:c6:af:0e:67: 12:98:6d:64:75:e1:1c:97:6e:f9:d4:c0:bd:bb:97:6d:29:08: b9:b3:74:c3:b8:40:05:2a:c1:a9:ef:0a:ae:71:31:98:18:f5: 52:f8:77:2e:b3:e9:b8:aa:80:30:1b:ab:2b:04:b9:0d:ed:df: d6:71:af:8a:04:ac:96:30:85:78:90:0b:00:08:ff:cb:3b:5c: 72:c5:f4:1e:33:80:84:70:4d:57:d3:64:91:d6:66:87:e2:52: 29:81:32:b9:bb:ed:40:86:fd:d9:6a:3c:9a:28:c5:7c:92:fe: da:f3:d6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+/Ie7Uen5lWO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzYzOGZkMGMtNGZmMS00Y2NlLTkzMjEtOWRjZjhmODAxZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/QjynWm2tUI91fCHKUhuxPXCnhbo22enp5 LRwMDow57p9qJW0LtAbhDqJ93TAdv2MT7hivu2FDZAFQHO0A7gA6GEgtzqak4kDm VP6LoJ4EIlsoLEk0rhkW6pCpMN5jTWCPHLoW5OoWLKHQ5spjS709Bo0JfDb+KAOW +ZyHv/R4nCEPwUT6RvVtTHRt7J2r8rvVoRbW9kyqVmaz97aRuBA+Dk6caG75mJba EwZMEgxAlDY2E0c4bg0v38A9Ls7lvwVfcLVVNTWED437Hnqr9TKIavoipD67Ojfn zcRTFGgry0s6Phr0wjxRaQbubntCSCVg5mP/RrfvQvhPCjMO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyjh9aOiqXCTnUPP3/X5aFyIcfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODk5YjBjODktYTU2Ni0z ZTE5LTk3MGYtOGQ3NDBjNzgzNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASB/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv/0yswb6dvWFI/iNy144nGtpr2vA3j8xx5ERi9od6inhsqP+4GySsp w4e1aZ1VQVWCyJQRizeRbJxYnkugYwbNubM8rS2hpUjXzpD4DR7xo/UZGmRi0EUF rjEqnsybA/+mMF1PGC+mKEWoAcu4u0K4IvN6ywSPE0G2wVm9vmoEEteeoWF+hzjc ACdzxq8OZxKYbWR14RyXbvnUwL27l20pCLmzdMO4QAUqwanvCq5xMZgY9VL4dy6z 6biqgDAbqysEuQ3t39Zxr4oErJYwhXiQCwAI/8s7XHLF9B4zgIRwTVfTZJHWZofi UimBMrm77UCG/dlqPJooxXyS/trz1l8= -----END CERTIFICATE-----Generated at Fri Mar 27 01:08:59 2026 by rpki-client