$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa File: 99c07aae-832f-32e0-8580-8a3e6c4911c9.roa (raw, json) Hash identifier: PvncolMIJLQxSrNmpS9fL7gCoH+DKDrkWe2FkJIo7+g= Subject key identifier: AC:03:F3:AD:79:25:99:B1:F6:56:EF:65:5E:AC:46:AC:03:5A:55:04 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFED30EE72448CE3CAF340 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ed:30:ee:72:44:8c:e3:ca:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=7baaf781-ee1b-4c09-b774-f3d97574f540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:64:c0:7b:af:f0:76:ab:2c:bb:be:a2:74: 7c:8f:5b:67:6e:53:b0:64:88:7f:d4:49:89:d0:7b: 68:65:e4:21:00:f9:a4:ac:c3:92:98:a8:97:65:80: 55:2f:a2:84:78:94:38:58:76:e0:9c:64:e3:52:6e: 01:fa:08:d7:df:43:a6:60:c9:05:0d:17:d6:05:ca: ed:4b:f6:86:e5:69:00:07:17:9a:fc:44:1f:87:f8: 73:cb:79:9a:64:b6:6b:7e:f4:e2:74:35:e9:db:c3: c1:39:a7:74:68:c5:af:80:25:42:b6:6b:16:ab:e4: 1e:87:42:00:95:9a:cc:c9:e6:4b:a9:e6:ec:bb:2c: 58:8a:f7:4f:11:a6:23:4d:85:c2:5f:39:61:41:15: 4c:e4:8e:91:b6:be:b0:52:c0:9a:a4:3b:6a:5f:83: 58:ab:25:6b:b1:48:05:1a:d6:3f:18:ea:03:ea:69: 23:9f:37:7e:05:eb:07:7e:7e:09:b8:61:b0:cd:ca: 21:74:9f:c6:39:c2:a6:9c:93:da:47:13:0f:24:a8: 2e:b6:95:6d:84:b4:47:93:94:cb:77:a0:2a:40:bb: 8f:a4:c7:54:1a:b4:86:f7:22:f4:5a:3f:22:ef:39: 1c:fb:1e:fc:9e:71:2a:3b:14:58:db:63:f0:d1:e0: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:03:F3:AD:79:25:99:B1:F6:56:EF:65:5E:AC:46:AC:03:5A:55:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/99c07aae-832f-32e0-8580-8a3e6c4911c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:01:46:38:24:ec:2a:79:5f:33:1e:8c:6f:5a:be:a7:19:a6: fb:dd:e3:fa:dc:05:b4:c2:46:33:03:77:06:95:f7:c7:48:1e: a1:7b:12:5a:00:18:4e:52:77:b4:e3:73:41:da:b1:3f:50:75: db:ed:ce:a5:87:3b:1f:1b:00:67:25:fb:b7:c1:ef:9e:fa:4c: 49:e0:b6:94:79:c0:70:c3:c6:00:a1:a5:e3:7c:2f:7c:5d:57: 44:e5:6c:b4:a1:d9:fc:e2:80:2b:8a:11:31:91:d7:74:b9:66: 29:b6:25:5c:5e:b5:59:14:ac:12:ae:f6:f3:41:95:dc:d3:1b: 2c:ec:2f:f4:ef:d6:a4:f6:00:70:d8:ee:c3:3e:fa:f6:74:e9: bd:01:8b:04:f5:3b:6a:3e:78:e2:40:73:af:60:fd:15:3b:9a: 93:4f:76:68:35:f1:25:41:5a:0b:a5:df:0e:5d:43:fa:e9:9a: fb:28:ea:90:83:d7:a7:56:6f:a4:fd:05:0f:b0:7e:e4:91:12: 62:1e:36:52:89:9a:6c:70:c8:0c:c4:da:18:0f:58:c4:82:26: 59:12:9c:ad:09:eb:8d:a8:43:73:3e:e5:c3:de:35:e8:ce:b4: ec:4c:dd:73:a6:ac:72:4b:cc:0d:ea:ce:50:e2:91:20:08:df: a8:23:9a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+0w7nJEjOPK80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk N2JhYWY3ODEtZWUxYi00YzA5LWI3NzQtZjNkOTc1NzRmNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLFkwHuv8HarLLu+onR8j1tnblOwZIh/1EmJ 0HtoZeQhAPmkrMOSmKiXZYBVL6KEeJQ4WHbgnGTjUm4B+gjX30OmYMkFDRfWBcrt S/aG5WkABxea/EQfh/hzy3maZLZrfvTidDXp28PBOad0aMWvgCVCtmsWq+Qeh0IA lZrMyeZLqebsuyxYivdPEaYjTYXCXzlhQRVM5I6Rtr6wUsCapDtqX4NYqyVrsUgF GtY/GOoD6mkjnzd+BesHfn4JuGGwzcohdJ/GOcKmnJPaRxMPJKgutpVthLRHk5TL d6AqQLuPpMdUGrSG9yL0Wj8i7zkc+x78nnEqOxRY22Pw0eBFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwD8615JZmx9lbvZV6sRqwDWlUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTljMDdhYWUtODMyZi0z MmUwLTg1ODAtOGEzZTZjNDkxMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoBRjgk7Cp5XzMejG9avqcZpvvd4/rcBbTCRjMDdwaV98dIHqF7EloA GE5Sd7Tjc0HasT9QddvtzqWHOx8bAGcl+7fB7576TEngtpR5wHDDxgChpeN8L3xd V0TlbLSh2fzigCuKETGR13S5Zim2JVxetVkUrBKu9vNBldzTGyzsL/Tv1qT2AHDY 7sM++vZ06b0BiwT1O2o+eOJAc69g/RU7mpNPdmg18SVBWgul3w5dQ/rpmvso6pCD 16dWb6T9BQ+wfuSREmIeNlKJmmxwyAzE2hgPWMSCJlkSnK0J642oQ3M+5cPeNejO tOxM3XOmrHJLzA3qzlDikSAI36gjmqs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:01 2026 by rpki-client