$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json) Hash identifier: 4krrFj4goPFA4wFqB6tzDjejALZLCSsQ0DF4jB/AlfM= Subject key identifier: 7A:8A:01:53:C1:1D:C4:A8:56:41:EA:91:A0:FE:4A:B0:A1:2A:50:A8 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A6ABF9676E6D1527E0CE0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54032 IP address blocks: 72.233.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:bf:96:76:e6:d1:52:7e:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=53821243-fe44-4f64-9606-ddba01b587db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:72:b0:88:e7:dc:e7:d6:c9:e4:2a:84:58: 53:77:58:4a:84:2f:61:09:31:54:11:da:0f:54:94: 3e:9b:f2:7f:96:b9:e3:6e:eb:85:8e:41:ad:84:3f: e4:fa:47:3a:09:f1:5c:3d:3c:0b:59:ee:ba:1b:a0: 3c:a6:4e:66:78:bd:b3:23:4c:72:72:8d:4b:9a:ae: bd:a2:44:46:e0:4d:d1:48:df:7a:e7:15:1f:8e:8f: 54:ec:88:56:f7:60:26:f6:4c:6c:0c:6e:8f:86:cc: 0f:89:b0:1b:79:db:a0:87:ea:4d:07:0a:db:d1:d2: 1b:1a:30:c5:0a:06:f4:04:81:76:3d:8f:71:ef:74: 72:bf:42:54:35:6b:f5:ca:4f:90:4c:d0:d3:b8:63: a3:6a:25:2d:f9:b0:d1:7b:58:72:fe:15:89:da:cc: b6:89:0c:35:97:26:da:4b:33:eb:2e:4c:17:ad:14: 9b:80:3e:b7:4d:49:36:56:a9:13:d9:91:1d:f6:2c: 67:bd:e5:c5:b1:0d:77:ea:f4:2c:ee:85:63:cd:b1: 04:3f:f6:77:73:bb:21:30:42:06:5d:e6:ce:66:5b: 08:6c:b7:0b:64:7e:47:c5:9f:3d:4d:9a:ed:85:c0: 33:b5:67:38:ef:3f:1e:af:2f:26:8a:d5:95:fc:fe: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8A:01:53:C1:1D:C4:A8:56:41:EA:91:A0:FE:4A:B0:A1:2A:50:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:05:01:9e:ac:0c:3f:2f:5a:ba:39:ea:c2:18:6f:30:60:7f: df:88:96:f3:79:35:30:19:72:c1:c2:8f:1b:65:6a:cb:53:9d: 23:aa:78:41:4b:d6:9f:2f:c7:77:ac:d9:7c:f6:dd:b4:47:a2: bf:a4:c6:7a:20:30:c4:e6:c0:59:97:80:69:01:9e:f7:0b:26: 10:57:68:8e:c8:18:a2:e8:cf:9e:cd:e2:cb:e6:9d:76:99:7b: b0:73:e2:f7:ca:8c:5a:d2:18:87:8d:94:74:94:42:b8:3d:8e: c2:3c:e4:ff:66:e0:0d:d6:39:76:6b:2f:32:73:9a:0a:3f:11: fe:28:1b:1a:5e:71:ea:ac:8e:f5:eb:e8:01:f8:d6:43:2f:fd: 6b:9d:ae:c2:ef:20:3c:86:af:4f:a6:73:3a:86:c2:57:83:91: 09:07:da:47:61:a9:37:7b:5f:11:d2:c3:8e:42:1e:c2:58:b8: 7a:c7:7d:ef:fb:09:16:ef:79:01:cf:3a:34:c1:5d:b4:a5:9c: 32:a3:84:a2:19:d6:ae:10:2d:0d:17:17:f3:62:18:71:cd:28: 5c:03:67:d0:c1:67:69:88:6e:f0:eb:38:59:f1:f2:7f:4b:36: 41:59:2b:bc:73:c5:72:17:20:c5:0c:20:b8:69:8f:a3:b8:ea: f4:a0:df:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmq/lnbm0VJ+DOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NTM4MjEyNDMtZmU0NC00ZjY0LTk2MDYtZGRiYTAxYjU4N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DVysIjn3OfWyeQqhFhTd1hKhC9hCTFUEdoP VJQ+m/J/lrnjbuuFjkGthD/k+kc6CfFcPTwLWe66G6A8pk5meL2zI0xyco1Lmq69 okRG4E3RSN965xUfjo9U7IhW92Am9kxsDG6PhswPibAbedugh+pNBwrb0dIbGjDF Cgb0BIF2PY9x73Ryv0JUNWv1yk+QTNDTuGOjaiUt+bDRe1hy/hWJ2sy2iQw1lyba SzPrLkwXrRSbgD63TUk2VqkT2ZEd9ixnveXFsQ136vQs7oVjzbEEP/Z3c7shMEIG XebOZlsIbLcLZH5HxZ89TZrthcAztWc47z8ery8mitWV/P551QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqKAVPBHcSoVkHqkaD+SrChKlCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDI2OTVhMWEtNzkwNS0z MmMzLTgzMDUtNmE5YzU3OWFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMFAZ6sDD8vWro56sIYbzBgf9+IlvN5NTAZcsHCjxtlastTnSOqeEFL 1p8vx3es2Xz23bRHor+kxnogMMTmwFmXgGkBnvcLJhBXaI7IGKLoz57N4svmnXaZ e7Bz4vfKjFrSGIeNlHSUQrg9jsI85P9m4A3WOXZrLzJzmgo/Ef4oGxpeceqsjvXr 6AH41kMv/WudrsLvIDyGr0+mczqGwleDkQkH2kdhqTd7XxHSw45CHsJYuHrHfe/7 CRbveQHPOjTBXbSlnDKjhKIZ1q4QLQ0XF/NiGHHNKFwDZ9DBZ2mIbvDrOFnx8n9L NkFZK7xzxXIXIMUMILhpj6O46vSg368= -----END CERTIFICATE-----Generated at Thu Mar 26 18:27:45 2026 by rpki-client