$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa File: af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa (raw, json) Hash identifier: 0BBpLB52RWcis3ECSeabQXx2ewkCg2bIPWbVBH4ZBSA= Subject key identifier: 97:A5:E9:BC:4B:C7:F1:68:8F:72:17:FB:CC:36:21:17:F2:78:F7:7D Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A6A7186253FEDDD2CA700 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54032 IP address blocks: 72.233.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6a:71:86:25:3f:ed:dd:2c:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=f21bf779-0f42-4c44-903d-8a95ce1b3cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:20:5d:56:b1:71:a8:0e:66:8a:23:2c:94: 2b:75:e4:7d:15:3c:48:c9:e1:4c:f4:f5:ea:e4:ce: 5d:5f:fe:f2:59:ff:f7:b7:12:1a:1d:7f:e3:6d:b1: b1:f8:25:41:73:b7:61:1c:d9:32:54:63:2f:e4:21: a3:65:35:f0:f2:6d:64:58:27:4a:e0:95:ab:9e:2c: dd:e0:31:9c:94:94:eb:4a:ff:9b:43:fd:ae:09:a5: 08:09:57:b2:f8:b3:d7:66:9b:fe:0d:ff:54:a2:6d: b0:d9:ee:3f:4b:25:a7:83:57:9c:05:d1:75:6f:ac: af:83:f5:83:b7:e5:30:74:a3:1c:18:fe:f8:95:5a: 65:50:72:35:6d:bd:70:6e:29:3c:15:0d:71:55:4d: 46:c2:3b:d6:7c:76:fb:ca:d3:78:ec:b4:13:57:b9: c4:1c:03:7a:55:3e:21:5b:87:a9:13:09:7b:78:c6: 96:1d:7f:3f:cc:b5:4f:74:66:c3:ad:88:f2:30:6c: c1:78:ee:97:83:a0:41:51:dd:31:a5:d9:9a:cb:47: 49:74:e2:bc:0f:c8:f9:e7:fe:d7:fa:96:17:44:25: 9e:07:f5:ed:e9:04:b1:73:56:77:6f:bf:fc:83:ff: e1:2e:c1:54:00:2b:61:30:05:7d:1a:01:c8:57:0b: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:E9:BC:4B:C7:F1:68:8F:72:17:FB:CC:36:21:17:F2:78:F7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/af4a70ed-4978-37ac-9bc6-a3c7bea2416b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:56:27:97:23:cc:02:df:a4:e8:ae:52:f3:52:58:80:df:74: a1:fc:03:28:5b:e5:90:e4:fa:56:66:62:71:27:dc:61:d6:11: df:3e:11:9c:05:2e:ae:85:2d:e5:b8:07:e1:5c:87:03:fa:e3: 88:36:1d:00:85:70:b7:3f:50:b2:7b:08:33:fc:5e:7a:92:f3: b4:39:e6:43:6a:a0:e4:15:14:eb:30:0e:d1:39:2b:f9:98:b3: 45:0f:cf:69:47:a3:fe:4b:6f:db:89:35:36:13:6b:d4:52:e0: 89:a2:66:e0:7e:d0:4e:cd:d9:0b:af:c7:aa:68:a3:00:6b:75: af:f4:c3:c5:b2:81:6e:da:95:45:e4:22:0a:c6:c9:e5:2d:1a: 03:48:f1:9d:ca:05:e7:a7:18:a3:9d:90:ab:f2:f1:40:46:68: 18:84:46:7e:5e:98:fc:c4:9e:b3:96:3c:cf:9b:59:13:93:cc: 8b:c8:fc:0b:77:5c:3b:15:1e:40:6d:38:59:06:e5:c3:18:ca: bb:3a:97:1d:8a:bb:58:23:6d:d2:b3:f4:d1:d9:8e:09:60:f3: 75:38:cf:a3:32:fa:b7:84:5b:42:12:0f:dc:0e:a1:ad:73:97: f1:b2:09:fd:33:5e:31:ce:cb:b2:13:43:d2:1f:8e:ab:0e:af: 9c:ba:1f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmpxhiU/7d0spwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjIxYmY3NzktMGY0Mi00YzQ0LTkwM2QtOGE5NWNlMWIzY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAricgXVaxcagOZoojLJQrdeR9FTxIyeFM9PXq 5M5dX/7yWf/3txIaHX/jbbGx+CVBc7dhHNkyVGMv5CGjZTXw8m1kWCdK4JWrnizd 4DGclJTrSv+bQ/2uCaUICVey+LPXZpv+Df9Uom2w2e4/SyWng1ecBdF1b6yvg/WD t+UwdKMcGP74lVplUHI1bb1wbik8FQ1xVU1GwjvWfHb7ytN47LQTV7nEHAN6VT4h W4epEwl7eMaWHX8/zLVPdGbDrYjyMGzBeO6Xg6BBUd0xpdmay0dJdOK8D8j55/7X +pYXRCWeB/Xt6QSxc1Z3b7/8g//hLsFUACthMAV9GgHIVwuiHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJel6bxLx/Foj3IX+8w2IRfyePd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvYWY0YTcwZWQtNDk3OC0z N2FjLTliYzYtYTNjN2JlYTI0MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBWJ5cjzALfpOiuUvNSWIDfdKH8Ayhb5ZDk+lZmYnEn3GHWEd8+EZwF Lq6FLeW4B+FchwP644g2HQCFcLc/ULJ7CDP8XnqS87Q55kNqoOQVFOswDtE5K/mY s0UPz2lHo/5Lb9uJNTYTa9RS4ImiZuB+0E7N2Quvx6poowBrda/0w8WygW7alUXk IgrGyeUtGgNI8Z3KBeenGKOdkKvy8UBGaBiERn5emPzEnrOWPM+bWROTzIvI/At3 XDsVHkBtOFkG5cMYyrs6lx2Ku1gjbdKz9NHZjglg83U4z6My+reEW0ISD9wOoa1z l/GyCf0zXjHOy7ITQ9IfjqsOr5y6H0k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:34:59 2026 by rpki-client