$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa File: 40777e71-9872-3a63-9fd0-6b2abc085644.roa (raw, json) Hash identifier: 4v6AsxYp6JihtpTLwwlTJ/UpeK+8r1EBUXD0T2VOCIM= Subject key identifier: A2:1B:3C:D2:2D:22:3E:09:60:36:69:1B:7B:91:13:F9:4C:43:01:1C Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D49D05B765F519F371ECF7F00 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa Signing time: Thu 05 Mar 2026 16:40:47 +0000 ROA not before: Thu 05 Mar 2026 16:40:47 +0000 ROA not after: Wed 03 Jun 2026 15:40:47 +0000 asID: 397772 IP address blocks: 72.59.172.0/22 maxlen: 24 72.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:d0:5b:76:5f:51:9f:37:1e:cf:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 5 16:40:47 2026 GMT Not After : Jun 3 15:40:47 2026 GMT Subject: CN=6b74bc13-ec3e-485a-a4a9-5ca35cb9cde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:ad:db:8b:55:d7:8d:87:de:53:0f:8e:74: fd:bd:f5:9d:70:b2:cc:d7:05:ba:64:81:f7:bc:4e: 77:2a:5f:e3:09:f5:5b:bb:1f:39:14:a9:36:8b:68: 1a:2a:b1:16:1e:e5:05:13:da:89:10:6f:fc:dd:6f: da:bc:bb:6d:b3:3b:f8:ab:70:fc:d0:4f:4b:e9:22: c1:e0:bf:b6:f6:14:ee:54:b3:11:78:d6:d1:fa:d0: 54:27:5a:ff:c2:59:be:4b:f4:c9:e2:17:0c:46:3c: 0c:ed:23:9c:57:ab:29:6f:2e:5f:64:a3:1d:8c:5c: 53:7e:7a:b0:9b:a7:ac:70:a8:58:3e:56:7d:0a:cd: d4:4f:40:07:3e:8e:e2:59:d5:7a:c9:dc:48:0d:cb: 9e:c9:97:98:c9:09:20:1c:cc:55:95:17:a7:dc:92: c6:a5:fc:86:f4:c9:85:73:63:90:88:6b:76:dc:46: f4:9f:75:3e:df:ec:9b:51:fb:68:e3:dd:2d:02:5d: b0:59:d4:f1:97:b2:2f:be:23:30:1c:81:bb:1f:da: 27:72:78:94:6f:dd:80:8a:ca:be:ae:9a:ab:ec:90: 23:ca:29:eb:18:73:35:28:fb:ba:fe:ff:e4:10:68: f1:a5:92:bf:7e:87:4c:4d:5c:57:a9:c8:fa:22:d2: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:3C:D2:2D:22:3E:09:60:36:69:1B:7B:91:13:F9:4C:43:01:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.172.0/22 72.59.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a7:cd:af:f6:59:27:5e:2d:6d:d3:89:ed:ba:4d:2c:4a:5a: 90:d4:f2:bf:b7:82:c8:3b:78:63:53:9d:d6:3f:0f:8f:76:9e: fb:59:66:05:14:b0:a1:31:26:30:05:07:08:dd:09:12:25:9c: 61:7b:ec:94:0d:1f:42:26:fc:ef:03:9b:28:03:ab:15:2c:63: 95:de:2f:4d:ac:02:aa:3f:10:3c:9b:f2:b0:97:ca:42:d5:c9: 30:bd:72:5f:7d:1e:65:8c:54:2a:c7:f0:1a:a7:d0:ef:6b:61: ed:1f:f7:c6:33:49:41:2e:a2:e0:3b:ef:d1:03:c7:c4:64:6f: bb:e3:16:fd:7a:55:73:de:d9:6d:7d:8a:e6:20:a6:6d:24:06: 6c:e0:06:54:df:4d:09:c5:f5:5e:41:6f:54:8a:1d:95:c0:42: d6:a4:60:26:ca:ab:3e:3d:cb:5e:c4:77:a1:c0:87:d5:cc:4f: 41:f3:4c:78:a7:34:bf:88:ed:c1:af:ac:43:51:0c:22:dc:a2: bf:ad:fc:4f:f7:0e:10:4f:c5:1c:33:ac:de:ef:2f:50:02:7f: 72:30:f9:84:c7:f2:c2:86:bd:b5:da:52:71:6a:74:f4:18:38: c6:c2:44:f9:bc:5b:5a:af:a3:9a:7c:48:91:66:d3:6d:00:bd: 0f:ae:01:8b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1J0Ft2X1GfNx7PfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNTE2NDA0N1oXDTI2MDYwMzE1NDA0N1owLzEtMCsGA1UEAxMk NmI3NGJjMTMtZWMzZS00ODVhLWE0YTktNWNhMzVjYjljZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hut24tV142H3lMPjnT9vfWdcLLM1wW6ZIH3 vE53Kl/jCfVbux85FKk2i2gaKrEWHuUFE9qJEG/83W/avLttszv4q3D80E9L6SLB 4L+29hTuVLMReNbR+tBUJ1r/wlm+S/TJ4hcMRjwM7SOcV6spby5fZKMdjFxTfnqw m6escKhYPlZ9Cs3UT0AHPo7iWdV6ydxIDcueyZeYyQkgHMxVlRen3JLGpfyG9MmF c2OQiGt23Eb0n3U+3+ybUfto490tAl2wWdTxl7IvviMwHIG7H9oncniUb92Aisq+ rpqr7JAjyinrGHM1KPu6/v/kEGjxpZK/fodMTVxXqcj6ItIBAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKIbPNItIj4JYDZpG3uRE/lMQwEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvNDA3NzdlNzEtOTg3Mi0z YTYzLTlmZDAtNmIyYWJjMDg1NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSDusAwQC SDvsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGSnza/2WSdeLW3Tie26TSxKWpDU8r+3gsg7eGNTndY/D492 nvtZZgUUsKExJjAFBwjdCRIlnGF77JQNH0Im/O8DmygDqxUsY5XeL02sAqo/EDyb 8rCXykLVyTC9cl99HmWMVCrH8Bqn0O9rYe0f98YzSUEuouA779EDx8Rkb7vjFv16 VXPe2W19iuYgpm0kBmzgBlTfTQnF9V5Bb1SKHZXAQtakYCbKqz49y17Ed6HAh9XM T0HzTHinNL+I7cGvrENRDCLcor+t/E/3DhBPxRwzrN7vL1ACf3Iw+YTH8sKGvbXa UnFqdPQYOMbCRPm8W1qvo5p8SJFm020AvQ+uAYs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:47:43 2026 by rpki-client