$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/328cb866-e74c-3680-8847-2022794e0e2c.roa File: 328cb866-e74c-3680-8847-2022794e0e2c.roa (raw, json) Hash identifier: rTaJkS4R36XLUz/DIYCKMiXkYAktVD8TPL6PtxarZV0= Subject key identifier: 2E:8F:EC:85:D1:88:1B:34:E0:F6:D3:B6:7F:A5:69:F1:25:0D:85:0E Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D119C49ABCEE3DBF63BC5AF00 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/328cb866-e74c-3680-8847-2022794e0e2c.roa Signing time: Thu 05 Mar 2026 15:25:13 +0000 ROA not before: Thu 05 Mar 2026 15:25:13 +0000 ROA not after: Wed 03 Jun 2026 14:25:13 +0000 asID: 25798 IP address blocks: 72.59.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:9c:49:ab:ce:e3:db:f6:3b:c5:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 5 15:25:13 2026 GMT Not After : Jun 3 14:25:13 2026 GMT Subject: CN=9a5bf7c3-0416-4832-8ac8-a0618871d8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:46:52:38:09:80:02:06:05:aa:b0:85:25: 4a:f5:cd:4a:73:b7:43:d1:a3:b6:67:40:0a:69:9c: 8c:63:93:e4:72:6b:de:c5:b5:31:78:bb:67:32:c6: fb:73:d2:39:73:9d:a5:59:e3:f4:8c:6e:d2:5a:47: 04:ba:82:a1:1e:00:6c:5d:e1:f1:eb:27:4e:a4:81: 98:01:32:24:c6:7f:7e:da:f6:a5:ba:71:2c:0e:01: 55:5d:65:b2:f1:a9:09:99:b6:2f:af:c5:fb:99:31: ef:56:a8:64:5d:ac:f4:95:da:68:c1:c9:0e:4b:cb: da:e2:55:60:62:d6:44:61:46:1b:88:06:69:15:f3: d1:d8:ba:1a:ef:3e:31:95:dd:54:54:22:fe:ea:c3: 99:92:1b:d5:63:da:d6:18:7b:02:bc:1b:80:22:93: 03:05:4c:21:24:bc:e4:62:b8:e4:f7:83:3f:ba:7b: f9:8a:45:02:a5:68:42:cc:33:95:10:f9:58:c8:bf: 19:47:45:aa:be:2f:00:a9:44:c7:1a:9d:3d:df:2d: b2:ac:02:bd:66:a4:ef:63:6e:e6:d0:83:03:aa:d4: c0:b7:6b:83:7b:07:ec:54:65:d2:57:13:eb:21:5d: 6f:15:22:fd:8a:5d:48:eb:e0:07:59:b8:86:96:98: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8F:EC:85:D1:88:1B:34:E0:F6:D3:B6:7F:A5:69:F1:25:0D:85:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/328cb866-e74c-3680-8847-2022794e0e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:16:a2:16:6a:57:eb:70:df:cd:32:b4:1f:fb:42:9f:f5:20: af:31:ff:7f:22:5d:a0:f1:9f:17:a2:00:52:7e:94:17:c3:5c: 89:ed:ef:a1:fc:2b:18:59:d0:c0:9d:e0:cb:8b:ff:d7:eb:75: 76:d8:97:1b:3c:4a:8d:64:48:b2:d7:eb:fa:11:69:62:bf:85: 7e:8d:da:8a:05:64:9b:e1:0e:08:b5:b1:a1:eb:41:c9:c2:0d: 0b:45:5c:85:20:23:7f:75:fe:d9:1c:bc:cb:81:5c:83:97:de: ca:f7:78:75:06:63:02:ab:66:42:20:5a:dc:d1:60:e9:34:cd: 98:e1:8c:11:a5:81:62:5c:9b:7a:87:30:5c:0e:d6:b9:25:18: 81:dd:b4:ba:62:3c:ba:1f:64:67:2b:5e:c3:bb:d0:b3:8b:12: 01:8d:49:82:89:f2:b0:5e:54:ce:28:43:88:5b:3e:a9:fe:59: 87:7a:88:d9:79:6a:c1:ec:a3:36:38:98:16:7b:da:65:20:8c: ce:20:be:43:e0:ae:fe:77:d9:a9:e7:8b:31:7e:f4:f4:92:36: 6a:0a:9d:25:cb:74:9a:89:8a:d9:2b:48:a4:97:73:40:c9:bd: 98:08:ad:82:a1:88:95:d3:31:a8:aa:ff:88:c2:c1:c9:7c:de: 27:8f:26:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RnEmrzuPb9jvFrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNTE1MjUxM1oXDTI2MDYwMzE0MjUxM1owLzEtMCsGA1UEAxMk OWE1YmY3YzMtMDQxNi00ODMyLThhYzgtYTA2MTg4NzFkOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRZGUjgJgAIGBaqwhSVK9c1Kc7dD0aO2Z0AK aZyMY5PkcmvexbUxeLtnMsb7c9I5c52lWeP0jG7SWkcEuoKhHgBsXeHx6ydOpIGY ATIkxn9+2valunEsDgFVXWWy8akJmbYvr8X7mTHvVqhkXaz0ldpowckOS8va4lVg YtZEYUYbiAZpFfPR2Loa7z4xld1UVCL+6sOZkhvVY9rWGHsCvBuAIpMDBUwhJLzk Yrjk94M/unv5ikUCpWhCzDOVEPlYyL8ZR0Wqvi8AqUTHGp093y2yrAK9ZqTvY27m 0IMDqtTAt2uDewfsVGXSVxPrIV1vFSL9il1I6+AHWbiGlpiG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6P7IXRiBs04PbTtn+lafElDYUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvMzI4Y2I4NjYtZTc0Yy0z NjgwLTg4NDctMjAyMjc5NGUwZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8WohZqV+tw380ytB/7Qp/1IK8x/38iXaDxnxeiAFJ+lBfDXInt76H8 KxhZ0MCd4MuL/9frdXbYlxs8So1kSLLX6/oRaWK/hX6N2ooFZJvhDgi1saHrQcnC DQtFXIUgI391/tkcvMuBXIOX3sr3eHUGYwKrZkIgWtzRYOk0zZjhjBGlgWJcm3qH MFwO1rklGIHdtLpiPLofZGcrXsO70LOLEgGNSYKJ8rBeVM4oQ4hbPqn+WYd6iNl5 asHsozY4mBZ72mUgjM4gvkPgrv532annizF+9PSSNmoKnSXLdJqJitkrSKSXc0DJ vZgIrYKhiJXTMaiq/4jCwcl83iePJqg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:27 2026 by rpki-client