$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa File: 1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa (raw, json) Hash identifier: 1Y/F3amXWKswy0m70qxhxL7QPoxG5nxxC0qWZRISWGE= Subject key identifier: E8:3D:B4:22:5B:19:96:6F:7A:49:16:F5:B6:BF:E0:F4:FA:22:DC:00 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A70C0760C4613E4132FC0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54032 IP address blocks: 72.233.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:70:c0:76:0c:46:13:e4:13:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=7abcbbdd-7660-4984-8614-3b3e53eae62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:42:71:e2:55:39:eb:8a:bc:8f:ed:4e:9b: 9a:53:b7:d3:1f:b8:bc:50:d5:38:dc:ef:81:68:3c: 75:51:b0:14:24:d2:7b:55:82:a9:f3:19:29:71:d2: 97:ec:aa:7c:bb:c8:11:4e:e0:2e:85:80:67:96:2c: 09:8e:75:45:91:b1:4c:4b:70:9c:98:05:96:35:3f: b9:bd:81:f6:b9:ae:3c:51:ea:cb:0b:ef:63:9d:40: 92:1e:4d:5f:e3:e7:64:4b:b8:fb:5b:a7:a3:01:5d: 47:e4:ae:d9:b5:e5:8c:d8:d1:c4:54:77:0b:af:cb: 90:c4:10:05:fa:53:8a:08:5c:b8:09:4f:2f:ec:ee: 76:97:7b:57:ab:6d:7f:e1:68:6e:bf:c2:c1:24:a6: 8f:85:ab:e0:23:d9:d6:af:60:57:4e:6d:63:08:be: ef:c6:c8:03:c7:ab:5b:85:ce:d9:b5:ca:e9:31:f3: a6:ab:33:89:eb:bf:09:26:7b:17:35:5a:23:a3:72: 7a:b7:8b:bf:45:8f:3f:9e:38:de:59:28:cd:06:2d: 0c:78:0d:cf:31:5f:ed:dd:5e:27:3d:dd:43:14:b4: 28:7c:88:56:db:1a:0a:d1:88:b6:b8:b7:6f:af:e8: b6:1c:ac:87:b7:9b:18:1b:00:29:fc:9a:06:81:c2: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3D:B4:22:5B:19:96:6F:7A:49:16:F5:B6:BF:E0:F4:FA:22:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3f:d6:4c:4f:4a:5c:23:37:b2:d4:43:f3:cc:98:0b:61:59: 25:75:89:49:ae:c1:d0:e2:f0:ab:76:89:84:6e:a8:67:48:8a: 48:ca:29:d8:bb:05:21:c3:c9:a1:e7:73:9b:ce:44:89:1d:51: ec:b5:8c:99:0b:d2:63:f8:75:3f:99:08:8a:f4:ee:9e:a2:20: 66:51:eb:2a:8e:04:92:3c:04:69:fa:3e:d2:70:44:96:f9:c2: 22:25:29:53:5e:08:af:59:fd:d4:76:e4:51:2c:49:41:22:b7: 57:ba:60:75:ab:6a:dc:7e:42:16:db:35:4c:dd:67:a9:5f:76: 3a:6d:cf:a5:02:c7:b6:f4:08:33:48:27:86:d0:7d:b5:fc:cc: 92:23:f1:11:dd:d1:79:cf:02:a1:19:68:91:df:e1:14:8d:0c: bb:63:c8:15:db:ca:6c:16:e7:c6:9e:22:a1:d3:98:59:c2:a6: ca:48:81:28:f8:42:b4:2b:55:5c:21:57:e1:a3:28:56:d4:8b: b4:54:84:3f:3b:1d:92:05:a4:c9:81:13:69:7a:c7:cb:98:39: 3d:09:ea:3f:b0:35:43:ea:47:0e:95:0d:1c:40:ac:8f:a5:1b: 04:f5:c1:0d:d6:dd:27:91:8e:63:fc:86:df:e8:41:e0:3e:b0: 71:91:1e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnDAdgxGE+QTL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk N2FiY2JiZGQtNzY2MC00OTg0LTg2MTQtM2IzZTUzZWFlNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x5CceJVOeuKvI/tTpuaU7fTH7i8UNU43O+B aDx1UbAUJNJ7VYKp8xkpcdKX7Kp8u8gRTuAuhYBnliwJjnVFkbFMS3CcmAWWNT+5 vYH2ua48UerLC+9jnUCSHk1f4+dkS7j7W6ejAV1H5K7ZteWM2NHEVHcLr8uQxBAF +lOKCFy4CU8v7O52l3tXq21/4Whuv8LBJKaPhavgI9nWr2BXTm1jCL7vxsgDx6tb hc7ZtcrpMfOmqzOJ678JJnsXNVojo3J6t4u/RY8/njjeWSjNBi0MeA3PMV/t3V4n Pd1DFLQofIhW2xoK0Yi2uLdvr+i2HKyHt5sYGwAp/JoGgcL3iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg9tCJbGZZvekkW9ba/4PT6ItwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMWE1MjI5YjQtMDZiOS0z MWM2LThjNDEtOWNjYzhkMDc2MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY/1kxPSlwjN7LUQ/PMmAthWSV1iUmuwdDi8Kt2iYRuqGdIikjKKdi7 BSHDyaHnc5vORIkdUey1jJkL0mP4dT+ZCIr07p6iIGZR6yqOBJI8BGn6PtJwRJb5 wiIlKVNeCK9Z/dR25FEsSUEit1e6YHWratx+QhbbNUzdZ6lfdjptz6UCx7b0CDNI J4bQfbX8zJIj8RHd0XnPAqEZaJHf4RSNDLtjyBXbymwW58aeIqHTmFnCpspIgSj4 QrQrVVwhV+GjKFbUi7RUhD87HZIFpMmBE2l6x8uYOT0J6j+wNUPqRw6VDRxArI+l GwT1wQ3W3SeRjmP8ht/oQeA+sHGRHoM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:12 2026 by rpki-client