$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ee7dd1b1-a237-3e7e-a81a-11755b429ec9.roa File: ee7dd1b1-a237-3e7e-a81a-11755b429ec9.roa (raw, json) Hash identifier: W3680LCPe3Hxi0yvHqGggiuOHewLIjBccNsW2b9c5dw= Subject key identifier: BF:92:87:05:C0:EA:A8:B6:3B:6C:0D:36:9E:6E:18:9B:B4:01:49:D0 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFED5293591179E5A47080 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ee7dd1b1-a237-3e7e-a81a-11755b429ec9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 72.31.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ed:52:93:59:11:79:e5:a4:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=abd24a9e-cab1-458a-9b00-3dc2db891f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:c6:13:34:11:e5:d5:c6:c3:fb:d3:cd:33: da:31:30:87:37:b3:74:65:5a:c8:10:a1:c4:6f:00: 50:f9:2b:14:78:a4:6b:4b:3a:97:55:73:68:9c:1a: 04:dc:e2:3a:62:47:1d:af:53:01:d1:6b:8e:47:c2: 6a:17:d6:3b:86:32:03:37:ac:ed:ee:d4:f4:50:35: 22:6c:af:5d:b7:d4:4d:5d:e4:d9:7a:08:14:80:bb: 79:e4:e9:6f:a6:50:e4:9b:72:62:83:3c:7c:13:6d: 1e:31:ac:53:04:a0:e2:79:a2:c1:cd:2e:dd:f8:ad: 66:b1:10:b9:15:54:0b:13:07:91:c8:ae:2d:6b:0b: a8:6f:92:7f:d5:72:12:02:09:66:e8:50:ae:bc:f8: bf:e7:c5:36:1a:fc:eb:4c:73:e2:84:52:c5:e7:1d: a5:77:ca:de:cf:c1:c4:67:5e:86:ca:d0:d3:c6:87: 8a:19:54:20:2b:ce:5f:86:71:68:9d:bb:a9:90:bd: 9b:6b:b2:ce:50:15:0f:9f:71:5f:ab:b3:4a:c3:ca: e9:c2:e2:1f:85:e8:6b:da:61:b7:08:94:ac:6d:ee: 40:53:1a:fc:c1:09:da:36:2c:02:42:aa:42:70:cd: d7:a0:25:77:23:17:64:79:04:de:14:0d:39:e5:67: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:87:05:C0:EA:A8:B6:3B:6C:0D:36:9E:6E:18:9B:B4:01:49:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ee7dd1b1-a237-3e7e-a81a-11755b429ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:67:ec:bd:7b:e6:2e:87:3b:40:6f:42:01:bd:8a:28:79:31: b4:0f:9b:65:93:c0:aa:59:3c:f0:ed:ab:cf:25:4d:85:d8:a8: 1a:80:84:3c:1c:57:b8:2a:ac:98:d1:43:3c:20:6f:fb:a9:2e: d3:5e:45:51:d1:51:e9:0f:ff:85:a6:82:db:f1:dc:47:fd:61: 73:75:ff:36:ad:19:dc:bf:9d:8a:7a:2b:48:ca:bb:61:17:4b: 57:76:92:32:75:ee:20:cb:c9:42:74:ba:db:70:ef:eb:c4:92: 94:c2:0a:3a:60:b1:9c:5b:7e:f1:b6:a1:e9:5d:7d:7a:ae:26: 09:c2:4d:59:6b:a9:a0:b1:02:1f:54:d7:f6:fe:94:cb:eb:9f: f7:25:04:a3:db:25:c0:14:7a:bd:a9:75:fa:c9:50:0f:27:39: 72:f9:a9:36:77:87:c4:70:fa:6b:da:ae:95:ba:ac:d7:4f:3a: c1:f4:9a:c8:b9:9c:64:db:2b:a0:0a:3a:98:95:6c:e8:4c:3d: c0:29:f2:c5:57:15:18:5f:fd:77:58:7e:1a:9e:05:25:2a:59: f0:67:28:a0:92:4e:37:18:d1:fa:5f:30:dc:64:7b:81:aa:b8: 70:83:ff:54:b7:2b:c2:ec:d7:31:88:fe:ab:9e:68:d3:1a:93: 90:64:77:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+1Sk1kReeWkcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWJkMjRhOWUtY2FiMS00NThhLTliMDAtM2RjMmRiODkxZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS7GEzQR5dXGw/vTzTPaMTCHN7N0ZVrIEKHE bwBQ+SsUeKRrSzqXVXNonBoE3OI6Ykcdr1MB0WuOR8JqF9Y7hjIDN6zt7tT0UDUi bK9dt9RNXeTZeggUgLt55OlvplDkm3Jigzx8E20eMaxTBKDieaLBzS7d+K1msRC5 FVQLEweRyK4tawuob5J/1XISAglm6FCuvPi/58U2GvzrTHPihFLF5x2ld8rez8HE Z16GytDTxoeKGVQgK85fhnFonbupkL2ba7LOUBUPn3Ffq7NKw8rpwuIfhehr2mG3 CJSsbe5AUxr8wQnaNiwCQqpCcM3XoCV3IxdkeQTeFA055WdTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+ShwXA6qi2O2wNNp5uGJu0AUnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZWU3ZGQxYjEtYTIzNy0z ZTdlLWE4MWEtMTE3NTViNDI5ZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZn7L175i6HO0BvQgG9iih5MbQPm2WTwKpZPPDtq88lTYXYqBqAhDwc V7gqrJjRQzwgb/upLtNeRVHRUekP/4Wmgtvx3Ef9YXN1/zatGdy/nYp6K0jKu2EX S1d2kjJ17iDLyUJ0uttw7+vEkpTCCjpgsZxbfvG2oeldfXquJgnCTVlrqaCxAh9U 1/b+lMvrn/clBKPbJcAUer2pdfrJUA8nOXL5qTZ3h8Rw+mvarpW6rNdPOsH0msi5 nGTbK6AKOpiVbOhMPcAp8sVXFRhf/XdYfhqeBSUqWfBnKKCSTjcY0fpfMNxke4Gq uHCD/1S3K8Ls1zGI/queaNMak5Bkd+4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:23 2026 by rpki-client