$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa File: 7d4835f7-8713-34b0-b001-5d466717879b.roa (raw, json) Hash identifier: 1Rhg54+v1o5P87b7a3n2zNfu/RpcjxwLS5OWcEZIjMw= Subject key identifier: 32:F8:53:3E:DA:99:DF:56:0D:18:D5:23:48:AB:AD:BC:68:15:EB:FF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A6A8030F38208E91AC480 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54032 IP address blocks: 72.233.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:80:30:f3:82:08:e9:1a:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=995e894c-82b8-44ab-8386-26f668b86285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:be:75:47:9a:f7:2d:1c:8e:92:5a:78:1b: 36:bb:1c:55:63:c6:26:48:24:ca:29:03:51:0e:e3: 16:4a:fa:65:f2:93:c9:25:7f:e9:59:ca:7c:ea:94: 8a:ef:bb:84:bd:38:25:04:34:42:67:b0:ab:ff:47: 64:c9:3b:9c:c5:0a:ef:8b:04:1a:90:e3:e9:19:bb: f5:00:c1:df:ba:f8:7f:1b:c9:21:a8:e1:b6:20:2e: e3:d7:22:a8:12:e3:a3:af:89:ed:37:a4:a8:68:12: 03:44:97:35:25:8f:af:e6:9c:e0:f0:ce:78:d0:8f: 75:7d:71:8c:14:13:b1:cc:00:7e:4f:af:a7:9d:3f: f2:f5:6b:38:a0:23:e3:1e:12:01:3f:fc:1a:80:eb: 26:3f:fc:27:13:f7:11:bb:66:6b:15:48:7a:46:11: e9:22:91:95:0c:6a:4d:63:a0:a2:e4:69:9d:78:f2: 54:36:a5:93:bc:de:aa:ab:b0:86:bc:8a:56:a3:59: 67:c7:98:21:34:19:c4:7f:82:48:5e:a7:94:4e:f0: c1:2c:c8:ab:dc:3b:57:ef:3b:bf:e7:3c:e1:9d:b2: 21:ec:bc:36:95:36:08:2f:a5:08:60:57:0d:a1:d5: 63:d9:4e:91:b3:32:ed:04:8b:27:23:bb:77:07:40: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:53:3E:DA:99:DF:56:0D:18:D5:23:48:AB:AD:BC:68:15:EB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:37:53:6f:af:2f:d9:46:e5:9e:1a:97:40:5d:e0:fb:0e:bd: 28:22:46:6b:82:79:90:72:e5:2d:d0:fb:e6:e3:3d:78:ea:23: 3b:e7:64:34:32:2a:ef:7a:39:9c:19:3a:95:e4:05:73:15:57: 34:1c:0f:5f:62:5c:70:91:d4:4b:fb:4f:9d:ea:7b:ac:30:55: 02:74:b5:10:1c:5a:ad:57:40:9d:1a:28:ba:73:d4:37:23:59: 2a:df:0b:13:d4:83:e9:eb:cc:a6:dd:23:50:f6:60:0f:3c:a1: 30:ea:fe:58:0b:d6:c4:50:4e:b8:bd:d1:dd:b9:92:b0:e6:6e: fd:69:d9:a2:f0:ed:28:6c:0d:a3:18:7c:0c:d3:d7:ed:cf:0c: 91:ee:d3:9b:d3:e7:a6:7a:d0:05:7e:99:25:a9:99:7f:37:fa: 1a:b7:3b:cc:82:cc:14:d7:ca:6b:f3:e3:da:10:74:60:88:79: e0:f2:82:7e:33:24:ca:f3:c9:61:00:c5:dd:09:a9:ae:55:c6: 5a:82:d2:b0:ee:db:60:d0:d4:92:f6:1b:bf:9b:ab:ac:b4:ac: a8:85:bf:9d:17:d9:5f:b4:fa:92:75:67:37:29:84:03:5b:c9: a9:b8:e3:e8:5f:08:92:96:c7:2c:5b:94:91:d9:98:56:f2:35: 64:45:39:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmqAMPOCCOkaxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OTk1ZTg5NGMtODJiOC00NGFiLTgzODYtMjZmNjY4Yjg2Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVW+dUea9y0cjpJaeBs2uxxVY8YmSCTKKQNR DuMWSvpl8pPJJX/pWcp86pSK77uEvTglBDRCZ7Cr/0dkyTucxQrviwQakOPpGbv1 AMHfuvh/G8khqOG2IC7j1yKoEuOjr4ntN6SoaBIDRJc1JY+v5pzg8M540I91fXGM FBOxzAB+T6+nnT/y9Ws4oCPjHhIBP/wagOsmP/wnE/cRu2ZrFUh6RhHpIpGVDGpN Y6Ci5GmdePJUNqWTvN6qq7CGvIpWo1lnx5ghNBnEf4JIXqeUTvDBLMir3DtX7zu/ 5zzhnbIh7Lw2lTYIL6UIYFcNodVj2U6RszLtBIsnI7t3B0BS4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL4Uz7amd9WDRjVI0irrbxoFev/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvN2Q0ODM1ZjctODcxMy0z NGIwLWIwMDEtNWQ0NjY3MTc4NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw3U2+vL9lG5Z4al0Bd4PsOvSgiRmuCeZBy5S3Q++bjPXjqIzvnZDQy Ku96OZwZOpXkBXMVVzQcD19iXHCR1Ev7T53qe6wwVQJ0tRAcWq1XQJ0aKLpz1Dcj WSrfCxPUg+nrzKbdI1D2YA88oTDq/lgL1sRQTri90d25krDmbv1p2aLw7ShsDaMY fAzT1+3PDJHu05vT56Z60AV+mSWpmX83+hq3O8yCzBTXymvz49oQdGCIeeDygn4z JMrzyWEAxd0Jqa5VxlqC0rDu22DQ1JL2G7+bq6y0rKiFv50X2V+0+pJ1ZzcphANb yam44+hfCJKWxyxblJHZmFbyNWRFOWY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:21 2026 by rpki-client