$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa File: a3b214d5-d800-3770-9574-001a0ddf16d8.roa (raw, json) Hash identifier: ygPzRgZwwcABpdoV/qlKVGR1sS69hL/bRslK2Le7YSE= Subject key identifier: 29:BC:BE:B8:B1:8F:BE:4D:48:80:48:A0:AB:12:29:42:5C:94:E6:31 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFBE9D72BACD1ABFDAA300 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 71.44.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:be:9d:72:ba:cd:1a:bf:da:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=63cc09e0-fdd2-45db-b75e-a805aa4d6f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:d3:f8:f7:02:e9:cb:de:4a:02:42:16:9d: 30:09:83:06:5c:85:b9:89:5a:ce:37:0b:4f:eb:06: 07:70:b0:7b:5d:6a:de:24:49:f2:62:fe:1a:41:4d: 4f:bc:98:8d:f6:42:07:19:94:79:6c:ef:34:ca:4f: c9:bd:f7:37:e5:66:d6:ef:6c:7b:a1:a4:e5:b3:26: c8:57:ef:c9:24:8e:0f:4f:60:01:02:29:d3:b4:92: 90:5c:22:a3:04:68:4d:b6:89:74:fc:12:29:e2:e5: 86:8a:be:fa:eb:e6:43:e8:cc:4d:f6:5c:70:f3:80: 52:ba:bc:c4:94:ea:4a:c9:5e:03:bb:af:d4:62:a1: 2a:d2:f5:71:4b:2d:76:a0:e9:3b:82:a3:c0:ea:10: 9d:df:b3:9b:5b:32:93:44:d6:82:0e:2e:bf:fa:d6: 78:fc:77:d5:87:f9:ff:46:48:22:a4:5c:a1:18:80: 82:e2:41:65:bc:b5:39:76:32:f3:80:77:1d:a0:a6: 2f:cf:ef:0f:e6:36:a7:1a:4e:a5:34:d6:4a:23:54: b4:e7:f3:cf:a1:b9:9a:7c:2f:78:92:eb:1c:b2:23: bf:38:ba:14:74:92:0b:d7:cd:db:a6:de:f2:c7:2f: c3:1a:80:7e:dc:c7:e9:0e:25:df:57:9d:fd:f5:e0: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:BE:B8:B1:8F:BE:4D:48:80:48:A0:AB:12:29:42:5C:94:E6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3b214d5-d800-3770-9574-001a0ddf16d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:62:a8:04:53:34:80:6c:96:fd:00:b3:e1:96:1a:05:af:22: 92:5c:37:14:61:c9:0b:de:9c:9a:e5:79:19:54:2d:4f:d5:ac: a9:f9:f5:44:b1:37:a4:73:12:8e:f4:c0:43:6a:f0:34:c9:f7: 3b:d3:d3:fd:51:43:90:e5:ca:27:0c:79:7f:e5:a4:8a:ea:b2: 3e:bd:b0:73:71:77:55:32:b9:06:f2:c4:14:4c:d5:49:fc:50: 80:26:e2:75:17:e2:6b:4e:1d:ca:4b:d6:24:88:5b:13:8c:95: 97:c2:06:38:9c:fd:49:9b:58:3b:2b:87:4a:06:d1:30:e2:50: e1:a0:99:56:8f:ef:b7:1e:00:1f:7b:40:62:64:c6:a2:ca:e8: a6:52:0e:dc:63:98:94:af:7e:f0:fe:ac:47:41:47:00:b6:2b: f4:92:0b:86:2e:0c:42:c9:fa:d3:5e:27:b1:b7:e8:bc:ea:88: b3:58:a2:ab:24:75:c2:71:f1:1d:b0:8e:20:19:cc:3a:b3:d1: b5:9b:e3:eb:d5:3e:42:cf:b9:cd:c1:cc:6b:c6:5e:8a:44:0f: 84:af:a5:e5:ec:81:32:86:e3:a8:04:3b:aa:ca:fb:6b:c9:63: cd:e6:01:fb:48:74:5a:aa:28:38:f1:6e:76:cd:4a:9c:84:0b: dc:33:23:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/76dcrrNGr/aowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjNjYzA5ZTAtZmRkMi00NWRiLWI3NWUtYTgwNWFhNGQ2Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzXT+PcC6cveSgJCFp0wCYMGXIW5iVrONwtP 6wYHcLB7XWreJEnyYv4aQU1PvJiN9kIHGZR5bO80yk/Jvfc35WbW72x7oaTlsybI V+/JJI4PT2ABAinTtJKQXCKjBGhNtol0/BIp4uWGir766+ZD6MxN9lxw84BSurzE lOpKyV4Du6/UYqEq0vVxSy12oOk7gqPA6hCd37ObWzKTRNaCDi6/+tZ4/HfVh/n/ RkgipFyhGICC4kFlvLU5djLzgHcdoKYvz+8P5janGk6lNNZKI1S05/PPobmafC94 kuscsiO/OLoUdJIL183bpt7yxy/DGoB+3MfpDiXfV5399eA6DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm8vrixj75NSIBIoKsSKUJclOYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTNiMjE0ZDUtZDgwMC0z NzcwLTk1NzQtMDAxYTBkZGYxNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRyx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRiqARTNIBslv0As+GWGgWvIpJcNxRhyQvenJrleRlULU/VrKn59USx N6RzEo70wENq8DTJ9zvT0/1RQ5DlyicMeX/lpIrqsj69sHNxd1UyuQbyxBRM1Un8 UIAm4nUX4mtOHcpL1iSIWxOMlZfCBjic/UmbWDsrh0oG0TDiUOGgmVaP77ceAB97 QGJkxqLK6KZSDtxjmJSvfvD+rEdBRwC2K/SSC4YuDELJ+tNeJ7G36LzqiLNYoqsk dcJx8R2wjiAZzDqz0bWb4+vVPkLPuc3BzGvGXopED4SvpeXsgTKG46gEO6rK+2vJ Y83mAftIdFqqKDjxbnbNSpyEC9wzIy4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:16 2026 by rpki-client