$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa File: 9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (raw, json) Hash identifier: P81J8UUv+pwGKaK8FjiNtDwIfchz+ZAnJo4YqljSx0M= Subject key identifier: F3:C0:40:D3:2F:4C:3C:B8:EC:22:D4:7E:00:3B:19:6D:82:39:A2:E9 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584D3B34DF1DA25D0DFF8D2D1F00 Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 6939 IP address blocks: 72.21.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:df:1d:a2:5d:0d:ff:8d:2d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=ff459f66-e0c2-4c8c-9c79-f57998e5dbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:a8:33:c6:61:c8:a1:b2:c0:ee:5c:c6:19: 4e:54:62:fa:26:8c:31:c0:53:c9:ff:89:04:bd:98: a0:9f:18:e4:a0:fa:3f:59:a8:6f:c6:e0:13:86:8d: 97:b2:5d:df:40:ae:75:a7:2b:4d:4e:8a:68:05:37: 53:ca:3a:fe:e5:3f:ed:de:81:44:c5:c3:99:2d:d5: ef:34:f6:81:90:49:87:ac:98:1f:f2:46:07:4f:6d: 73:c8:9d:3d:56:59:3d:9d:51:cd:98:c8:da:17:97: ed:d9:4d:51:ab:a2:7e:86:9a:8b:cc:0f:db:6a:b7: b1:5a:d5:e5:43:70:fa:d5:97:c7:77:94:19:31:7d: 6e:83:46:5b:14:c0:88:6f:f4:42:3d:b9:f3:87:50: ca:8d:34:20:a7:f2:10:a5:05:f9:74:e8:1d:73:04: 8b:e4:b5:10:f8:de:83:3a:cf:0e:5f:9e:de:d8:2d: 8f:45:6f:51:9e:c8:3e:c4:45:00:17:8a:9c:e1:dc: 59:20:a7:af:26:7d:8e:10:79:82:16:b5:82:fb:48: 8d:3f:a1:77:b5:11:e8:d1:e8:a8:88:f4:08:dd:18: 5e:71:9f:27:c6:67:ff:c1:fc:89:7f:82:f2:d3:9c: 69:49:ea:66:f2:04:6a:85:56:5e:01:00:ad:72:d4: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:40:D3:2F:4C:3C:B8:EC:22:D4:7E:00:3B:19:6D:82:39:A2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: 72.21.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:68:2b:cb:90:62:ef:b4:91:26:02:a3:72:3b:cc:bd:79:a4: d9:dd:99:34:25:e4:28:4d:c6:9e:73:ef:b7:d3:c2:73:83:99: 36:ce:d5:d5:d6:0e:d4:41:6b:a5:65:0c:5c:d4:c0:55:48:c7: 26:db:ba:17:c9:fb:81:4e:d2:b1:19:8d:5c:af:7f:5d:c0:c5: 0a:25:a0:e2:a0:fc:7f:de:75:17:7f:13:fb:83:94:43:4a:d3: 53:ca:b0:11:9f:60:5e:c8:3b:41:58:57:16:3a:7d:e2:db:fc: 59:50:60:55:f0:28:bf:f2:4c:e1:30:48:db:8e:ef:f9:5d:3c: 68:57:6f:0e:b2:fe:b2:af:a1:50:f5:57:9c:61:f3:d7:74:b7: 85:82:c0:84:c3:41:c1:3b:fb:55:36:2f:bd:c7:4e:0c:62:f6: 26:7a:00:55:54:d6:41:96:c0:0c:14:87:09:c2:4f:ea:9a:96: 85:52:8c:48:ee:05:17:fb:0f:6e:57:c2:40:b5:02:de:17:bc: 45:9b:4a:66:5e:e4:e5:38:50:64:77:cd:2a:9b:7e:44:c5:5f: 8d:a7:a4:1a:85:7f:37:5b:4d:62:39:1a:e8:b3:91:bd:1c:4a: 2d:5a:8c:47:3b:33:b6:2d:ea:53:7c:3c:2f:09:2a:a1:ee:e0: 8d:d3:b5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NN8dol0N/40tHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ZmY0NTlmNjYtZTBjMi00YzhjLTljNzktZjU3OTk4ZTVkYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvWoM8ZhyKGywO5cxhlOVGL6JowxwFPJ/4kE vZignxjkoPo/WahvxuATho2Xsl3fQK51pytNTopoBTdTyjr+5T/t3oFExcOZLdXv NPaBkEmHrJgf8kYHT21zyJ09Vlk9nVHNmMjaF5ft2U1Rq6J+hpqLzA/barexWtXl Q3D61ZfHd5QZMX1ug0ZbFMCIb/RCPbnzh1DKjTQgp/IQpQX5dOgdcwSL5LUQ+N6D Os8OX57e2C2PRW9Rnsg+xEUAF4qc4dxZIKevJn2OEHmCFrWC+0iNP6F3tRHo0eio iPQI3RhecZ8nxmf/wfyJf4Ly05xpSepm8gRqhVZeAQCtctSyKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPAQNMvTDy47CLUfgA7GW2COaLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvOWQ2NDI4Y2EtNDU4Yy0z NWIxLWIwNGEtZjRjMzdlMzU0YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZoK8uQYu+0kSYCo3I7zL15pNndmTQl5ChNxp5z77fTwnODmTbO1dXW DtRBa6VlDFzUwFVIxybbuhfJ+4FO0rEZjVyvf13AxQoloOKg/H/edRd/E/uDlENK 01PKsBGfYF7IO0FYVxY6feLb/FlQYFXwKL/yTOEwSNuO7/ldPGhXbw6y/rKvoVD1 V5xh89d0t4WCwITDQcE7+1U2L73HTgxi9iZ6AFVU1kGWwAwUhwnCT+qaloVSjEju BRf7D25XwkC1At4XvEWbSmZe5OU4UGR3zSqbfkTFX42npBqFfzdbTWI5Guizkb0c Si1ajEc7M7Yt6lN8PC8JKqHu4I3TtRc= -----END CERTIFICATE-----Generated at Fri Mar 27 06:43:05 2026 by rpki-client