$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa File: 40777e71-9872-3a63-9fd0-6b2abc085644.roa (raw, json) Hash identifier: 1QkolsUHEVhaiG2Gklboo8YWp2KfprFfyqRzzNHe8m4= Subject key identifier: 08:10:02:F3:C7:B6:60:73:32:0A:E5:01:95:22:07:0C:F1:FA:B4:23 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584F4974695356E130AA2F6B6640 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397772 IP address blocks: 72.59.172.0/22 maxlen: 24 72.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:69:53:56:e1:30:aa:2f:6b:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ead9e50c-c255-42a3-961c-0287133a3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:57:02:cd:92:65:e9:7b:9a:f6:57:de:a1: 49:ad:48:f3:c4:20:c7:0e:b3:d4:0b:14:81:6f:3a: 95:73:db:2c:f4:d3:c8:58:cc:97:54:79:0a:24:11: 53:d3:4b:e1:c8:d5:7e:a8:dd:65:7a:ae:0c:ef:4d: d4:e0:43:de:50:94:09:1d:57:00:f4:b4:66:85:1f: 02:d7:5d:4d:1c:2a:62:f4:1d:da:e4:19:e4:ba:8b: 72:ea:03:44:d8:23:20:b5:b7:49:3d:c4:8b:a2:46: 17:41:8c:7e:8d:83:85:58:31:3b:97:fd:39:cb:eb: 9b:80:44:0e:b4:d0:c6:89:07:e4:c6:c5:11:ca:0c: 82:84:be:35:d3:fe:0e:e1:d3:1b:c4:4a:1e:7d:9d: 20:f6:91:a4:e5:ec:f7:40:db:43:63:83:be:8a:ea: fe:7c:8b:90:1f:20:b1:7b:0b:62:b7:87:c2:79:d1: ea:d7:f8:3b:45:30:4a:59:19:9a:df:8d:8e:48:b7: d6:51:66:8b:43:9c:75:59:0b:6e:98:c9:87:6f:dd: 74:f6:e1:28:19:7c:59:24:cf:59:ce:ba:82:46:0b: 7a:20:ba:26:26:2a:e2:8c:e3:3b:a7:bc:ba:d8:d9: 7a:a8:93:a3:e4:84:dc:41:f9:df:4c:f4:25:2b:6c: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:10:02:F3:C7:B6:60:73:32:0A:E5:01:95:22:07:0C:F1:FA:B4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.172.0/22 72.59.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:fa:3a:53:27:1a:49:c8:b1:7d:c8:25:77:8a:0c:b3:0a:22: 5f:1a:5d:f5:fe:4c:4e:a6:73:ea:99:d2:34:2e:dc:fe:80:84: cd:0c:77:d1:9e:8e:04:39:1c:fa:78:29:5b:e1:88:e2:35:99: 2c:5f:21:50:b2:21:c5:ec:13:52:df:5e:59:5e:a6:19:00:a6: fa:97:8e:32:c9:b4:b4:78:84:31:cb:60:82:5b:ba:e9:99:9e: ce:9b:91:b9:2d:89:ec:c9:b5:da:3f:0a:f7:45:b9:12:1d:ca: ae:a6:d6:9a:e3:1b:94:0d:55:ae:c7:cb:06:44:19:e3:3d:9a: 3c:d7:dd:d8:43:0e:d4:c6:02:9d:47:87:60:e8:5a:75:6a:6a: 81:85:b9:ab:86:35:f9:10:54:b8:38:8f:7c:0d:18:d1:c1:ae: 8a:de:11:4f:2a:86:97:cb:16:11:9a:db:5d:15:45:2f:3f:7d: 69:6a:d4:3e:f3:c0:33:80:c0:8d:49:ef:f8:c1:70:cd:17:df: 17:f5:e1:d7:8a:51:dc:33:ae:34:c2:39:87:cb:dd:f0:91:0a: f1:56:07:28:1d:7d:72:de:7f:ad:9e:12:f5:c7:f9:3e:67:f1: f6:5b:b4:d0:8a:9c:82:1c:69:07:49:af:21:8c:84:0c:46:8d: b6:cf:b7:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdGlTVuEwqi9rZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWFkOWU1MGMtYzI1NS00MmEzLTk2MWMtMDI4NzEzM2EzMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNXAs2SZel7mvZX3qFJrUjzxCDHDrPUCxSB bzqVc9ss9NPIWMyXVHkKJBFT00vhyNV+qN1leq4M703U4EPeUJQJHVcA9LRmhR8C 111NHCpi9B3a5Bnkuoty6gNE2CMgtbdJPcSLokYXQYx+jYOFWDE7l/05y+ubgEQO tNDGiQfkxsURygyChL410/4O4dMbxEoefZ0g9pGk5ez3QNtDY4O+iur+fIuQHyCx ewtit4fCedHq1/g7RTBKWRma342OSLfWUWaLQ5x1WQtumMmHb9109uEoGXxZJM9Z zrqCRgt6ILomJirijOM7p7y62Nl6qJOj5ITcQfnfTPQlK2xUgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAgQAvPHtmBzMgrlAZUiBwzx+rQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvNDA3NzdlNzEtOTg3Mi0z YTYzLTlmZDAtNmIyYWJjMDg1NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSDusAwQC SDvsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ/6OlMnGknIsX3IJXeKDLMKIl8aXfX+TE6mc+qZ0jQu3P6A hM0Md9GejgQ5HPp4KVvhiOI1mSxfIVCyIcXsE1LfXllephkApvqXjjLJtLR4hDHL YIJbuumZns6bkbktiezJtdo/CvdFuRIdyq6m1prjG5QNVa7HywZEGeM9mjzX3dhD DtTGAp1Hh2DoWnVqaoGFuauGNfkQVLg4j3wNGNHBroreEU8qhpfLFhGa210VRS8/ fWlq1D7zwDOAwI1J7/jBcM0X3xf14deKUdwzrjTCOYfL3fCRCvFWBygdfXLef62e EvXH+T5n8fZbtNCKnIIcaQdJryGMhAxGjbbPtyY= -----END CERTIFICATE-----Generated at Sat Sep 26 06:45:59 2026 by rpki-client