$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa File: f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa (raw, json) Hash identifier: mRYy4rcUMKrQjpNtWLE1tR/9B08K86llqK4j1XKYDfs= Subject key identifier: C7:09:23:C6:71:C7:86:B8:23:55:1F:A6:F3:FB:B7:28:80:95:55:83 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D492A70AFA99AE73C6804F480 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 54032 IP address blocks: 72.233.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:70:af:a9:9a:e7:3c:68:04:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=c32683ce-0939-4909-9265-fc15f1c06e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:d6:4b:69:4b:66:f9:45:1e:50:ee:8f:09: dd:b7:0f:09:96:9b:9c:52:e9:91:fb:c6:b4:37:d9: 00:ca:78:17:65:e6:5f:2c:65:77:b1:98:0e:28:bb: 6f:a5:c9:4b:f7:9b:01:00:db:89:b4:38:3c:ed:6c: 5d:17:73:b4:ea:55:84:44:c7:f0:a2:9d:1c:9a:28: 81:88:fb:be:0f:68:2a:91:44:71:c0:70:a7:16:c7: ec:ba:bb:0b:6b:43:fb:33:e6:06:03:95:30:90:3c: 9c:7b:17:6c:cd:f5:bd:c3:e2:3f:f7:b9:00:bf:f4: 63:e4:40:2e:b3:23:8f:b6:93:74:82:b7:08:3d:23: 5b:01:29:57:05:f4:ff:3b:fa:55:05:a9:65:e0:26: 3d:b9:c8:46:e9:37:d8:31:52:10:61:e2:b5:c8:0e: 96:a5:b0:23:2f:80:ba:41:9f:f6:5c:22:75:fe:f2: 46:1c:04:17:5e:6a:4c:68:01:86:7e:2d:b0:db:77: 44:bd:b0:34:65:9b:51:45:41:88:ee:9e:99:d9:25: fc:20:b1:99:65:93:60:ee:bd:05:ed:89:9f:a1:e4: ca:87:03:37:e3:ae:29:76:79:ff:ad:3d:d4:52:66: bd:39:fe:5e:1c:bd:1d:3b:d9:14:39:32:63:28:3e: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:23:C6:71:C7:86:B8:23:55:1F:A6:F3:FB:B7:28:80:95:55:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:72:98:7f:63:8d:ae:87:21:81:c9:25:9f:7f:b1:55:75:e0: 18:40:89:28:5f:ee:74:9e:07:f6:70:77:ac:87:4b:5e:e5:0b: 79:be:d2:38:f6:64:85:35:ec:79:2b:0e:4c:5a:82:b6:7d:bc: 81:d2:22:73:55:56:78:3d:6f:8f:40:2b:dd:b3:ed:be:c1:80: c1:09:06:4f:aa:05:db:e9:ac:64:a6:fe:6b:3d:47:62:02:b4: 75:3b:7f:54:ab:3e:0e:b0:42:3b:4c:10:ff:66:05:7d:03:ab: 79:64:5e:11:bf:75:1e:91:94:6c:e2:03:31:3c:ba:ed:b2:a5: 90:04:ff:8a:a7:fb:02:2e:1d:31:b7:6c:6f:94:78:15:f4:e0: 26:b5:0b:4a:62:8d:ee:2d:5c:5d:3a:89:34:6a:7a:a8:e7:04: a8:37:29:3f:a0:38:b4:1a:70:35:97:36:1c:62:f8:52:15:3c: 98:28:cf:dc:94:c7:e1:5c:e2:aa:9d:3f:95:c3:7a:b5:a8:ea: 27:48:c0:7c:41:7e:a9:95:e0:2a:1b:e9:dc:d3:08:10:34:95: 49:45:50:53:dd:01:50:29:88:37:63:cc:e1:97:fb:6f:55:7f: 3c:cb:5f:b2:87:73:cb:5b:68:2e:ea:6c:26:d2:3a:25:4c:21: 33:2f:c4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnCvqZrnPGgE9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzMyNjgzY2UtMDkzOS00OTA5LTkyNjUtZmMxNWYxYzA2ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWjWS2lLZvlFHlDujwndtw8JlpucUumR+8a0 N9kAyngXZeZfLGV3sZgOKLtvpclL95sBANuJtDg87WxdF3O06lWERMfwop0cmiiB iPu+D2gqkURxwHCnFsfsursLa0P7M+YGA5UwkDycexdszfW9w+I/97kAv/Rj5EAu syOPtpN0grcIPSNbASlXBfT/O/pVBall4CY9uchG6TfYMVIQYeK1yA6WpbAjL4C6 QZ/2XCJ1/vJGHAQXXmpMaAGGfi2w23dEvbA0ZZtRRUGI7p6Z2SX8ILGZZZNg7r0F 7YmfoeTKhwM3464pdnn/rT3UUma9Of5eHL0dO9kUOTJjKD6P1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcJI8Zxx4a4I1UfpvP7tyiAlVWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZjllZjQ1YzQtYjA2Ny0z YWJhLWFkOGMtOTY5N2YzZjdjMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1ymH9jja6HIYHJJZ9/sVV14BhAiShf7nSeB/Zwd6yHS17lC3m+0jj2 ZIU17HkrDkxagrZ9vIHSInNVVng9b49AK92z7b7BgMEJBk+qBdvprGSm/ms9R2IC tHU7f1SrPg6wQjtMEP9mBX0Dq3lkXhG/dR6RlGziAzE8uu2ypZAE/4qn+wIuHTG3 bG+UeBX04Ca1C0pije4tXF06iTRqeqjnBKg3KT+gOLQacDWXNhxi+FIVPJgoz9yU x+Fc4qqdP5XDerWo6idIwHxBfqmV4Cob6dzTCBA0lUlFUFPdAVApiDdjzOGX+29V fzzLX7KHc8tbaC7qbCbSOiVMITMvxHk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:07 2026 by rpki-client