$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa File: 4931962f-9845-3178-a5e1-2dfe784bd128.roa (raw, json) Hash identifier: P5jzV8b9RTDs1gGr4NOHhXMNsixcKmxvQx25ar8w8zI= Subject key identifier: 15:35:F7:E3:36:8B:75:51:57:19:17:EF:D5:C0:56:D7:91:9E:A3:10 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A6ACD2CC3F3621EC05A00 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 394391 IP address blocks: 72.233.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:cd:2c:c3:f3:62:1e:c0:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=103524c7-008d-4e5d-b673-e95edf01bce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:47:63:8b:b0:16:74:85:9e:3f:15:11:d4: e5:bf:d8:07:d0:dd:b5:3f:ae:8e:a7:35:00:e5:5f: 68:3e:18:1e:9f:73:6e:32:fd:26:19:03:da:af:b8: 2d:04:67:e4:b7:6f:bf:95:60:9c:db:af:5d:1b:5f: 4d:52:2a:f1:eb:17:8c:ae:68:59:b1:65:22:26:29: fb:23:31:3f:d7:6f:f4:5c:2d:67:87:f6:56:14:5e: 06:6e:ae:54:9e:99:33:08:2c:81:31:f2:46:f8:08: ea:c5:8f:8f:5f:ec:ac:a7:fc:85:5a:26:46:e3:0c: 8d:3a:d8:dd:c8:d4:90:b9:84:74:b7:2c:65:74:c8: 74:68:de:dd:34:09:19:be:61:7b:9a:03:f0:ee:53: 11:b0:24:4e:04:5c:64:7f:56:5f:90:89:94:f7:1d: c8:b2:01:81:c4:41:09:92:fb:4e:c7:99:12:0e:1e: 50:99:04:dd:40:74:77:40:1d:d3:2e:76:e2:b5:7a: 15:0f:00:22:73:62:7b:17:33:8e:cd:ea:dc:a9:70: f3:4f:33:dd:d6:72:32:4e:e4:a6:90:96:81:09:be: ff:01:10:47:2f:d3:94:27:ab:7c:76:01:aa:cd:57: 8d:71:33:de:8b:26:42:7a:d8:a7:25:b6:af:9f:5d: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:35:F7:E3:36:8B:75:51:57:19:17:EF:D5:C0:56:D7:91:9E:A3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/4931962f-9845-3178-a5e1-2dfe784bd128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:14:e0:ed:57:7d:f3:8e:db:5e:3e:27:a2:9b:cf:1d:77:26: 96:ae:1e:e8:b8:a8:1f:df:ef:13:88:81:cd:cc:5b:59:02:d0: b7:b8:52:26:6f:77:dc:74:28:25:bf:e0:a2:98:32:1d:24:1a: a7:d2:19:d9:f6:61:01:4d:a8:9a:16:01:c8:3f:8b:82:48:5f: 1f:39:ad:f5:62:a9:a2:01:89:61:d6:d9:0b:3a:dc:22:79:47: c1:00:85:e9:16:e6:7c:13:a8:39:2e:f7:88:72:63:c0:be:02: be:e1:b8:da:83:fa:a1:55:2a:1c:32:4f:93:9e:cb:70:6d:27: 49:8b:36:91:a7:01:83:da:f5:fc:9f:5b:22:d8:da:ec:26:44: 4e:0a:55:77:2a:80:ea:c3:be:85:2d:4a:71:9d:3c:78:2d:58: 04:b3:f4:07:3b:a4:1d:37:72:a3:c8:ac:f0:ec:c0:c8:d1:b6: d3:47:5e:b3:ad:a1:cd:75:4d:54:57:b8:02:84:f0:64:91:f6: ab:0c:6f:3a:00:0d:b4:f1:72:94:c6:86:bd:63:10:2c:cc:fe: 4e:06:1f:b9:14:0c:c9:4d:f6:fc:dc:67:85:e6:de:18:61:43: 8d:d3:9c:c6:a4:e4:8c:69:f9:22:7f:18:a9:bf:6c:67:3a:1e: fd:e1:af:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmrNLMPzYh7AWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MTAzNTI0YzctMDA4ZC00ZTVkLWI2NzMtZTk1ZWRmMDFiY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCZHY4uwFnSFnj8VEdTlv9gH0N21P66OpzUA 5V9oPhgen3NuMv0mGQPar7gtBGfkt2+/lWCc269dG19NUirx6xeMrmhZsWUiJin7 IzE/12/0XC1nh/ZWFF4Gbq5UnpkzCCyBMfJG+AjqxY+PX+ysp/yFWiZG4wyNOtjd yNSQuYR0tyxldMh0aN7dNAkZvmF7mgPw7lMRsCROBFxkf1ZfkImU9x3IsgGBxEEJ kvtOx5kSDh5QmQTdQHR3QB3TLnbitXoVDwAic2J7FzOOzercqXDzTzPd1nIyTuSm kJaBCb7/ARBHL9OUJ6t8dgGqzVeNcTPeiyZCetinJbavn12/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU19+M2i3VRVxkX79XAVteRnqMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDkzMTk2MmYtOTg0NS0z MTc4LWE1ZTEtMmRmZTc4NGJkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8U4O1XffOO214+J6Kbzx13JpauHui4qB/f7xOIgc3MW1kC0Le4UiZv d9x0KCW/4KKYMh0kGqfSGdn2YQFNqJoWAcg/i4JIXx85rfViqaIBiWHW2Qs63CJ5 R8EAhekW5nwTqDku94hyY8C+Ar7huNqD+qFVKhwyT5Oey3BtJ0mLNpGnAYPa9fyf WyLY2uwmRE4KVXcqgOrDvoUtSnGdPHgtWASz9Ac7pB03cqPIrPDswMjRttNHXrOt oc11TVRXuAKE8GSR9qsMbzoADbTxcpTGhr1jECzM/k4GH7kUDMlN9vzcZ4Xm3hhh Q43TnMak5Ixp+SJ/GKm/bGc6Hv3hr0I= -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:51 2026 by rpki-client