$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa File: 7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa (raw, json) Hash identifier: BHqOF+JXwc+o7sx3QPqdnNVivFqGiJGZqZl/1gT/Xuw= Subject key identifier: 3E:E5:D2:F5:31:0C:26:68:20:BC:0A:EF:63:E7:82:42:16:09:89:3D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D47C50939889222F66C63DF20 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 53958 IP address blocks: 72.1.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:09:39:88:92:22:f6:6c:63:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=9c972f5b-5b2e-49ef-90b3-f7ab6e06228e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:cd:f7:04:22:a8:3c:7c:60:14:bd:f8:25: 9d:2d:32:d5:7a:5d:2e:bc:cc:0d:00:a7:55:d1:f9: e6:ec:56:c8:e5:22:59:a8:41:dd:36:4f:bd:68:b3: b4:15:d3:be:b8:83:48:73:52:63:a9:8e:e7:30:2e: 9c:d6:ad:c3:59:1a:a7:e2:38:e9:f4:f4:64:2b:6d: 66:10:8f:cf:11:3b:a3:eb:cf:eb:70:89:67:e3:cd: b5:07:35:02:0b:3e:20:5d:e8:38:37:1d:45:9e:72: 7c:1b:c5:7e:73:e9:c5:0a:25:35:15:90:be:20:3d: 8e:e4:2e:64:6b:96:28:1b:a7:ba:bf:10:36:a5:c9: 3f:a2:ee:39:df:e5:33:ea:36:0c:ad:ff:97:3a:57: e2:ca:18:1e:52:ec:6b:69:0b:62:43:eb:ac:b9:5a: 04:4b:4e:46:28:99:5d:7e:ce:dc:d2:10:97:ea:d5: 61:14:a7:86:1a:30:f8:28:70:d6:f3:bb:7c:88:96: 49:b7:08:75:e1:d7:8c:ed:7a:e5:ef:83:d3:5d:d8: 42:75:36:9b:f7:ee:14:21:0e:45:f4:f0:88:54:04: 54:1d:10:40:de:88:cb:53:75:5b:0c:eb:4e:ca:20: 92:e0:5f:7c:17:55:48:6b:09:e9:87:1a:77:3c:47: 6e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E5:D2:F5:31:0C:26:68:20:BC:0A:EF:63:E7:82:42:16:09:89:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7fbc4ee0-af03-3b47-a353-4f3640c2223e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:47:37:97:89:aa:1c:23:0f:e4:b7:d8:49:0d:7b:cb:10:a3: 38:a9:f6:bb:a8:b7:95:1c:50:22:26:3c:3a:60:1f:5d:76:98: 01:63:12:39:dc:e9:77:42:14:06:93:c8:78:44:6c:c1:88:5b: 6b:68:3e:2d:3e:32:32:fe:68:32:ea:54:4c:41:f8:dd:c7:7e: 6d:73:78:4c:87:9f:c0:cf:94:25:82:1a:d0:41:3f:14:fb:ad: a6:db:b2:14:41:6c:d8:0f:10:89:85:ec:e6:71:ab:f4:2a:c9: 61:0f:a3:1a:60:d3:21:7e:7a:7f:7e:19:8f:44:ba:56:0f:fb: d5:2e:f7:41:6c:d6:a5:e5:e8:3d:f4:10:ba:f8:bc:ee:42:8d: c5:d8:38:98:ac:50:fb:ea:80:de:c3:01:cb:9f:5d:0c:38:19: c6:5a:a7:66:41:39:76:a2:90:8b:7a:12:cc:ef:18:a2:9b:94: 57:63:37:5c:07:8a:d0:e3:b8:61:7f:59:53:7a:9f:70:c3:b4: 2c:52:f3:a2:00:ee:95:47:1e:4c:d9:68:aa:97:c6:89:09:76: 9e:0e:9c:48:96:bb:c4:2a:d4:62:96:44:c3:f5:3d:87:5e:ae: 2a:1c:7f:d7:db:01:99:49:ee:03:5c:a3:5d:ba:5f:8c:fa:58: 6f:d7:2a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQk5iJIi9mxj3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk OWM5NzJmNWItNWIyZS00OWVmLTkwYjMtZjdhYjZlMDYyMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRjN9wQiqDx8YBS9+CWdLTLVel0uvMwNAKdV 0fnm7FbI5SJZqEHdNk+9aLO0FdO+uINIc1JjqY7nMC6c1q3DWRqn4jjp9PRkK21m EI/PETuj68/rcIln4821BzUCCz4gXeg4Nx1FnnJ8G8V+c+nFCiU1FZC+ID2O5C5k a5YoG6e6vxA2pck/ou453+Uz6jYMrf+XOlfiyhgeUuxraQtiQ+usuVoES05GKJld fs7c0hCX6tVhFKeGGjD4KHDW87t8iJZJtwh14deM7Xrl74PTXdhCdTab9+4UIQ5F 9PCIVARUHRBA3ojLU3VbDOtOyiCS4F98F1VIawnphxp3PEduSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7l0vUxDCZoILwK72PngkIWCYk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2ZiYzRlZTAtYWYwMy0z YjQ3LWEzNTMtNGYzNjQwYzIyMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNHN5eJqhwjD+S32EkNe8sQozip9ruot5UcUCImPDpgH112mAFjEjnc 6XdCFAaTyHhEbMGIW2toPi0+MjL+aDLqVExB+N3Hfm1zeEyHn8DPlCWCGtBBPxT7 rabbshRBbNgPEImF7OZxq/QqyWEPoxpg0yF+en9+GY9EulYP+9Uu90Fs1qXl6D30 ELr4vO5CjcXYOJisUPvqgN7DAcufXQw4GcZap2ZBOXaikIt6EszvGKKblFdjN1wH itDjuGF/WVN6n3DDtCxS86IA7pVHHkzZaKqXxokJdp4OnEiWu8Qq1GKWRMP1PYde riocf9fbAZlJ7gNco126X4z6WG/XKkI= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:42 2026 by rpki-client