$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa File: d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json) Hash identifier: QCo8AbH9YfepvPtnUwOpIkZoD+VueNHGO3KbLdyd86I= Subject key identifier: CA:E5:41:59:62:9C:D7:41:D2:45:75:47:96:FA:71:DF:3E:6E:F5:49 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584D492A68888ADCE9DF15663245 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 29746 IP address blocks: 72.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:68:88:8a:dc:e9:df:15:66:32:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=8f1070c7-f535-4082-a2ec-68eb090579a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:9b:bc:0c:b3:f7:85:12:09:54:de:41:29: 43:63:e1:32:4f:e1:e6:0d:ca:5e:88:1e:87:b8:82: 19:d5:b6:fb:8a:22:b8:61:cb:51:0e:11:a9:43:f8: c0:6e:c7:fe:fe:7e:dd:5b:da:e2:c5:50:ee:ce:97: bb:f5:b1:d5:ba:a3:2f:d6:c7:1e:d0:30:0c:3e:5b: d2:16:cb:db:12:4f:72:24:60:81:90:05:75:1a:fd: d8:8a:e5:5f:cb:1e:e6:8f:13:07:27:e6:89:bc:38: 70:7c:30:85:0a:81:46:4b:f5:b2:de:5c:a0:3b:1e: d2:73:4c:06:86:61:b7:08:7a:6a:4c:31:f4:fd:0a: 2a:c8:64:55:00:89:1e:f8:d7:95:26:e3:0d:a0:3c: de:a8:86:b6:76:66:f5:c2:9c:01:20:ce:24:f2:82: 06:9b:a1:b3:03:1f:15:d2:cf:61:b7:11:d1:cd:d7: cd:24:79:b4:f2:ae:86:d9:79:d3:29:5b:d9:54:23: e1:fe:e8:80:d9:51:03:00:c8:4d:1e:f3:ce:01:e2: 34:de:0d:c9:51:b3:87:2e:41:d1:94:c5:86:4d:d0: 26:59:c6:58:2e:83:12:22:d1:2d:77:85:3e:44:68: 8c:bd:13:3e:0e:82:2d:73:6e:e2:53:6f:1f:33:d3: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E5:41:59:62:9C:D7:41:D2:45:75:47:96:FA:71:DF:3E:6E:F5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1f:f2:24:bb:92:4a:a4:3e:df:0d:e3:ec:46:ac:67:b5:62: 36:17:25:30:2a:20:3d:ae:41:40:06:8f:a0:39:60:07:21:42: ae:e0:ad:9d:a2:37:b4:1c:d7:f3:51:31:98:a3:23:13:89:ad: 56:e6:44:0d:b1:84:5d:21:c6:8e:ed:6c:52:d7:18:7d:c7:10: a0:bd:78:3e:a0:d1:b3:61:df:90:3e:e7:e5:50:15:d4:30:81: 67:c1:45:52:cb:f9:9d:d2:df:c1:9c:44:0f:cf:0a:48:16:3e: a7:be:95:99:5d:48:b1:c2:41:f7:89:b1:3f:ba:87:8b:60:32: c5:6e:06:28:9b:09:59:86:79:0c:d3:d0:8f:9a:3f:d6:ef:8e: 55:c9:5e:f3:3f:56:e3:3b:be:61:7c:23:88:7e:52:ce:25:6c: d2:18:14:1f:20:11:87:b3:a7:20:6f:1c:e3:72:e6:71:dc:8d: 79:03:07:0e:f7:e5:72:6e:21:f7:ef:b7:fd:ed:1d:1a:b6:2e: e6:57:2d:a7:8a:9e:52:b4:62:25:d1:6a:bf:7a:3d:87:d6:99: 62:92:b9:af:d9:7c:be:6e:e6:2c:4f:75:19:9a:90:50:16:fa: d4:85:8b:cd:7f:4c:1b:d1:31:0b:e1:67:fc:5c:31:e1:a4:ff: 04:9c:92:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmiIitzp3xVmMkUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGYxMDcwYzctZjUzNS00MDgyLWEyZWMtNjhlYjA5MDU3OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCKbvAyz94USCVTeQSlDY+EyT+HmDcpeiB6H uIIZ1bb7iiK4YctRDhGpQ/jAbsf+/n7dW9rixVDuzpe79bHVuqMv1sce0DAMPlvS FsvbEk9yJGCBkAV1Gv3YiuVfyx7mjxMHJ+aJvDhwfDCFCoFGS/Wy3lygOx7Sc0wG hmG3CHpqTDH0/QoqyGRVAIke+NeVJuMNoDzeqIa2dmb1wpwBIM4k8oIGm6GzAx8V 0s9htxHRzdfNJHm08q6G2XnTKVvZVCPh/uiA2VEDAMhNHvPOAeI03g3JUbOHLkHR lMWGTdAmWcZYLoMSItEtd4U+RGiMvRM+DoItc27iU28fM9O5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrlQVlinNdB0kV1R5b6cd8+bvVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvZDk4MWVkMjEtYTI1YS0z YjAxLTkxYzAtOTA1NDk3ZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0f8iS7kkqkPt8N4+xGrGe1YjYXJTAqID2uQUAGj6A5YAchQq7grZ2i N7Qc1/NRMZijIxOJrVbmRA2xhF0hxo7tbFLXGH3HEKC9eD6g0bNh35A+5+VQFdQw gWfBRVLL+Z3S38GcRA/PCkgWPqe+lZldSLHCQfeJsT+6h4tgMsVuBiibCVmGeQzT 0I+aP9bvjlXJXvM/VuM7vmF8I4h+Us4lbNIYFB8gEYezpyBvHONy5nHcjXkDBw73 5XJuIffvt/3tHRq2LuZXLaeKnlK0YiXRar96PYfWmWKSua/ZfL5u5ixPdRmakFAW +tSFi81/TBvRMQvhZ/xcMeGk/wSckq0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:26 2026 by rpki-client