$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa File: c851c3fd-7eed-3f14-bb90-6206ef839144.roa (raw, json) Hash identifier: QRbksD1ViOvvox8jfWXchqJz3KNEmZsJMIelS+hzQ8k= Subject key identifier: 91:B7:33:72:24:09:C4:48:3F:CA:B0:97:54:0D:01:B2:4A:CC:E9:38 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFEF983D687613BF863400 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ef:98:3d:68:76:13:bf:86:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4c20b41e-e169-4176-92a1-6f330b22e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:78:74:ad:fd:9d:a0:32:a6:30:9e:6c:16: c7:0b:c0:05:7f:05:1e:4a:25:6b:81:b6:3e:be:44: b4:5e:56:da:40:0b:71:1d:cb:28:fe:39:1c:7a:59: c3:3b:49:c0:d5:c8:0e:46:12:e4:d7:58:c3:b1:86: 0a:4d:5b:9c:8f:32:56:f3:b3:55:2c:bd:8e:cf:11: 1e:da:fa:a3:5d:ae:73:37:3a:ae:70:1a:92:b3:46: 8c:01:3e:99:ec:6a:0e:87:07:27:0a:68:ce:55:94: 61:58:8a:66:be:e8:de:64:64:17:56:75:fa:c8:de: 7c:15:f4:4c:9e:b3:a9:aa:0b:90:78:9c:9b:72:a1: a4:bd:cc:7d:60:9d:9a:c9:8f:52:64:80:bd:a7:ac: 7f:5b:b8:a3:b9:9b:46:53:a4:bb:df:70:64:06:2b: d8:21:02:be:8c:5f:b8:0f:4f:e4:c5:b9:6b:1a:aa: 7e:7d:e9:5e:43:f7:f1:a1:79:ce:6e:ab:10:b8:d8: 80:7d:3b:b7:78:a3:86:59:42:d2:18:6c:97:9a:92: 1f:b4:18:0e:09:30:ec:4d:a3:ef:5b:f2:64:25:4d: 37:90:d2:e5:96:a1:41:2f:89:f1:44:9e:62:a1:1c: 8b:0a:26:da:03:db:25:30:57:02:58:f8:da:d1:58: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:33:72:24:09:C4:48:3F:CA:B0:97:54:0D:01:B2:4A:CC:E9:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c851c3fd-7eed-3f14-bb90-6206ef839144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dd:02:ca:b7:22:04:e5:84:3e:2e:bf:0f:75:ce:65:52:c0: c2:c0:c0:6b:aa:82:14:8d:8c:b8:27:fc:ab:d2:78:34:a0:4c: c6:29:77:0d:71:fb:9d:6a:e7:4b:30:85:c2:99:57:db:8b:45: 90:6f:f0:24:de:74:19:1a:54:90:0d:55:f2:c7:af:56:58:43: e7:08:b7:be:36:cb:cf:97:96:47:31:3d:ce:9b:83:a1:e5:46: 0e:22:7a:e6:d9:21:99:61:11:07:4d:12:e8:87:af:ef:b5:91: 32:d4:ba:ef:a4:95:9a:15:09:ed:e3:0d:a3:7c:cb:21:d3:6d: be:e5:d1:c0:c2:2e:54:d1:16:82:29:8e:39:43:a8:d0:2d:aa: da:0a:6b:94:e7:e8:fd:ce:ac:6c:09:22:95:2c:5a:72:43:54: eb:de:23:e1:95:8f:00:cd:26:fa:1a:7f:e4:a1:e2:28:91:66: e4:bd:3f:70:88:3a:04:a6:b2:2d:83:35:f1:60:d6:0e:9b:7d: 1a:d4:46:d3:02:f5:d9:4b:da:22:b5:79:59:5e:b0:b0:df:4d: 91:dd:c2:39:07:c9:07:f8:18:d5:b2:4a:46:02:7a:b1:5e:56: f9:9e:77:41:4b:b0:e4:72:d5:ab:3d:97:9d:4a:94:db:d4:d2: 6c:7c:05:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/++YPWh2E7+GNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NGMyMGI0MWUtZTE2OS00MTc2LTkyYTEtNmYzMzBiMjJlMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprx4dK39naAypjCebBbHC8AFfwUeSiVrgbY+ vkS0XlbaQAtxHcso/jkcelnDO0nA1cgORhLk11jDsYYKTVucjzJW87NVLL2OzxEe 2vqjXa5zNzqucBqSs0aMAT6Z7GoOhwcnCmjOVZRhWIpmvujeZGQXVnX6yN58FfRM nrOpqguQeJybcqGkvcx9YJ2ayY9SZIC9p6x/W7ijuZtGU6S733BkBivYIQK+jF+4 D0/kxblrGqp+feleQ/fxoXnObqsQuNiAfTu3eKOGWULSGGyXmpIftBgOCTDsTaPv W/JkJU03kNLllqFBL4nxRJ5ioRyLCibaA9slMFcCWPja0Viz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG3M3IkCcRIP8qwl1QNAbJKzOk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYzg1MWMzZmQtN2VlZC0z ZjE0LWJiOTAtNjIwNmVmODM5MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjdAsq3IgTlhD4uvw91zmVSwMLAwGuqghSNjLgn/KvSeDSgTMYpdw1x +51q50swhcKZV9uLRZBv8CTedBkaVJANVfLHr1ZYQ+cIt742y8+XlkcxPc6bg6Hl Rg4ieubZIZlhEQdNEuiHr++1kTLUuu+klZoVCe3jDaN8yyHTbb7l0cDCLlTRFoIp jjlDqNAtqtoKa5Tn6P3OrGwJIpUsWnJDVOveI+GVjwDNJvoaf+Sh4iiRZuS9P3CI OgSmsi2DNfFg1g6bfRrURtMC9dlL2iK1eVlesLDfTZHdwjkHyQf4GNWySkYCerFe Vvmed0FLsORy1as9l51KlNvU0mx8BXE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:05 2026 by rpki-client