$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa File: c5debae7-2a94-3092-9d97-9436c58ed0d2.roa (raw, json) Hash identifier: mxa6XtQMux/Qil0Rm7P7u6YupQCG7HHkLUxjEQa+Qhc= Subject key identifier: 85:8B:A5:64:62:C2:34:81:48:4A:A0:C5:76:B5:D7:19:3C:43:57:3A Certificate issuer: /CN=084cdd3f-c178-4428-8992-9e1b2922de98 Certificate serial: 010D0C9F4328584D4A8F9FAB5E9D2D734AC4E180 Authority key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 72.1.32.0/21 maxlen: 21 72.1.40.0/22 maxlen: 22 72.1.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9f:ab:5e:9d:2d:73:4a:c4:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=cfc186a7-9d83-49ae-ac41-918bf29a3990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d6:37:06:f8:56:2c:a1:bc:1d:97:ff:6c:1d: 81:35:5e:b6:96:40:5e:b3:e0:cc:68:ac:fa:2e:dc: bb:15:23:c0:26:95:a9:aa:be:fe:12:fc:05:fe:fc: 10:f2:14:f7:b8:5a:b5:2f:ec:48:39:71:c7:43:e6: b7:49:a3:0f:cc:69:16:6c:44:b0:5e:c3:c1:2a:34: 87:06:f3:4d:b8:a1:f3:96:4c:a2:af:93:8f:2e:44: 2a:9b:a0:c1:8c:d2:2f:04:6c:8a:28:82:ad:11:5c: 80:2a:83:2e:b1:a7:be:02:2f:79:1c:29:3d:5c:f6: 88:7f:70:84:83:79:76:aa:0a:27:22:26:44:2c:da: 51:bb:0c:a4:27:64:f2:e9:19:82:fe:f6:73:24:9c: 42:91:19:1f:ee:f7:14:f1:dd:e7:bc:9a:98:ca:f5: 45:fd:fa:a9:3a:c0:09:e9:06:e0:98:ca:da:3c:bf: a7:d4:d9:8d:2a:9d:8d:a5:63:65:4e:fc:9c:86:72: 25:96:bb:00:5f:b3:36:5c:07:52:9b:5f:f1:e6:d2: 7a:e8:fa:cf:22:d8:c1:3c:04:c2:ee:2e:59:e5:40: 3a:21:45:29:9d:1b:b6:3f:ab:30:94:c6:b9:c4:6c: 33:58:c0:4c:5e:66:d8:9e:6b:e6:44:eb:5b:b9:00: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8B:A5:64:62:C2:34:81:48:4A:A0:C5:76:B5:D7:19:3C:43:57:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/c5debae7-2a94-3092-9d97-9436c58ed0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.crl X509v3 Authority Key Identifier: keyid:6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:61:7c:67:80:85:86:0c:4f:1f:5c:3c:29:ef:38:5d:67:e2: 0d:8f:ed:43:df:e4:28:19:66:78:67:3b:67:ed:d6:c3:a5:22: cd:96:fd:65:a2:ca:96:03:7a:7b:a8:dd:04:b4:4a:56:86:de: 8b:8f:7c:6a:3f:c2:3b:fd:a5:2d:cb:62:07:46:1b:30:4f:fe: 6f:e0:f6:7b:4e:1d:54:70:9a:db:c5:7f:a6:ed:cf:6a:d2:27: 12:a2:94:00:7f:73:16:33:6c:f9:ae:00:99:fb:16:ac:52:3b: 45:41:9a:9c:15:c4:ed:fd:e1:26:6d:d9:a6:01:66:3f:96:65: 85:49:1b:f9:7e:5e:c6:a5:c2:6b:8f:42:29:a7:4f:38:06:61: 27:d1:22:6f:bf:fb:10:d4:53:c7:93:84:13:4d:c7:2b:00:ec: d6:01:71:76:22:1c:98:61:c2:8a:2b:f9:29:a2:51:bd:d6:fa: 93:87:fd:e0:bb:7f:b3:f2:45:5d:b8:c5:91:2d:94:6c:f1:1f: 1e:d2:73:f1:fe:b1:94:13:3b:ab:1d:41:c0:33:ac:75:ca:61: 46:60:ad:27:6b:3b:c6:6c:e0:fc:ec:dc:15:6e:8b:b8:39:18: db:4b:06:2d:e1:a4:64:86:5c:db:63:51:62:14:56:3d:5a:5d: 8f:15:e4:4e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1Kj5+rXp0tc0rE4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJk ZTk4MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Y2ZjMTg2YTctOWQ4My00OWFlLWFjNDEtOTE4YmYyOWEzOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dY3BvhWLKG8HZf/bB2BNV62lkBes+DMaKz6 Lty7FSPAJpWpqr7+EvwF/vwQ8hT3uFq1L+xIOXHHQ+a3SaMPzGkWbESwXsPBKjSH BvNNuKHzlkyir5OPLkQqm6DBjNIvBGyKKIKtEVyAKoMusae+Ai95HCk9XPaIf3CE g3l2qgonIiZELNpRuwykJ2Ty6RmC/vZzJJxCkRkf7vcU8d3nvJqYyvVF/fqpOsAJ 6QbgmMraPL+n1NmNKp2NpWNlTvychnIllrsAX7M2XAdSm1/x5tJ66PrPItjBPATC 7i5Z5UA6IUUpnRu2P6swlMa5xGwzWMBMXmbYnmvmROtbuQAjvQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIWLpWRiwjSBSEqgxXa11xk8Q1c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wODRj ZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvYzVkZWJhZTctMmE5NC0z MDkyLTlkOTctOTQzNmM1OGVkMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDg0Y2RkM2YtYzE3OC00NDI4LTg5 OTItOWUxYjI5MjJkZTk4LzA4NGNkZDNmLWMxNzgtNDQyOC04OTkyLTllMWIyOTIy ZGU5OC5jcmwwHwYDVR0jBBgwFoAUa7qSaWoduYwL8eLYAcm3oYXsfmUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFi MjkyMmRlOTguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVIASAD BAFIASwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAI2F8Z4CFhgxPH1w8Ke84XWfiDY/tQ9/kKBlmeGc7Z+3W w6UizZb9ZaLKlgN6e6jdBLRKVobei498aj/CO/2lLctiB0YbME/+b+D2e04dVHCa 28V/pu3PatInEqKUAH9zFjNs+a4AmfsWrFI7RUGanBXE7f3hJm3ZpgFmP5ZlhUkb +X5exqXCa49CKadPOAZhJ9Eib7/7ENRTx5OEE03HKwDs1gFxdiIcmGHCiiv5KaJR vdb6k4f94Lt/s/JFXbjFkS2UbPEfHtJz8f6xlBM7qx1BwDOsdcphRmCtJ2s7xmzg /OzcFW6LuDkY20sGLeGkZIZc22NRYhRWPVpdjxXkTg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:51 2026 by rpki-client