$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa File: 841a9d0f-9831-3d66-9700-d6f60cf2d526.roa (raw, json) Hash identifier: tlkjhsaVFUGfeHoVRie1RQpZl4HMTIiZ0uR6vxzpH9E= Subject key identifier: CE:52:5B:51:CA:A0:F7:F2:DA:B3:F5:93:9B:CB:AE:06:D5:D2:E0:46 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D11C9895BEA57B1A6580A2B80 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa Signing time: Thu 05 Mar 2026 16:56:23 +0000 ROA not before: Thu 05 Mar 2026 16:56:23 +0000 ROA not after: Wed 03 Jun 2026 15:56:23 +0000 asID: 54340 IP address blocks: 72.59.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:c9:89:5b:ea:57:b1:a6:58:0a:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 5 16:56:23 2026 GMT Not After : Jun 3 15:56:23 2026 GMT Subject: CN=5253c0c6-6c99-4a2f-a7c7-f8a61243ff13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:3e:e7:59:39:01:51:b7:ba:b1:6a:21:dc: 0f:12:76:87:56:1f:da:8f:18:47:47:01:33:fb:0b: 8c:39:ce:20:49:a9:a9:16:6d:a8:11:e3:1f:10:aa: 73:ed:fc:5e:2e:d5:a4:6a:6b:4b:e9:50:4d:69:20: 8b:e1:0d:04:0d:00:f6:c2:6b:dd:ea:57:28:42:0f: 66:b7:a9:32:93:0c:6a:8a:9f:73:5e:7a:fd:d0:33: c7:a9:44:29:f4:03:a4:c3:97:3a:d8:eb:98:c2:5a: 7b:ce:77:d1:3b:3a:02:18:f2:d9:8e:a2:e0:ac:6c: 23:c8:1e:7e:2f:e3:d4:46:79:47:35:89:b9:64:6e: 1d:ff:b6:a1:e0:3b:1c:4e:37:00:db:44:e8:2c:6e: 48:33:50:63:7e:8c:53:86:16:b4:79:8d:a5:ce:0b: 87:02:8c:d9:f7:31:15:6d:34:f3:aa:47:d5:f6:b6: d8:ce:f2:3a:50:36:ff:93:20:8a:ea:a2:e2:82:98: f0:10:76:c1:50:06:e3:22:73:eb:fb:8b:30:b5:9f: b1:83:a3:a5:ec:e1:6b:02:6e:f6:44:c4:e8:14:d0: 87:20:32:fa:54:a9:d3:e3:e3:31:c3:41:dd:d2:16: b6:6e:8e:ca:e0:60:23:85:f4:33:1e:84:d7:85:d1: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:5B:51:CA:A0:F7:F2:DA:B3:F5:93:9B:CB:AE:06:D5:D2:E0:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/841a9d0f-9831-3d66-9700-d6f60cf2d526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b4:58:4d:2a:1c:4f:38:02:e4:94:21:1a:76:30:a8:96:7e: 63:db:f7:74:23:a4:47:5b:d0:3e:f6:f8:ed:e8:1c:8b:2e:d8: 6d:5b:83:26:42:60:0b:1e:61:5b:fc:96:53:ca:78:40:f0:3b: 1c:14:45:d3:67:1e:55:35:67:1b:e5:b0:2a:3b:12:86:42:66: 27:dc:e9:27:5f:ee:fc:c0:3e:02:7d:96:57:e6:64:e7:52:b5: b3:a1:d3:a7:c9:89:e4:79:8b:c3:2f:2e:71:da:3c:e4:44:0a: 27:b3:d7:1c:4d:ef:c2:15:46:36:6e:b7:b4:8a:51:1d:d8:67: b2:ef:dc:49:61:2c:f2:a7:6c:a5:29:72:89:5c:48:78:9c:b1: 8d:ab:79:3e:31:97:4f:98:da:4a:dd:50:58:7e:fe:6c:92:f6: 2f:c1:08:f9:33:80:e9:79:e1:82:59:36:98:6a:d3:df:e7:42: 32:61:13:ed:06:b1:66:49:c4:93:be:10:c5:9e:7c:c3:c4:5d: 41:21:20:5b:b7:62:ee:b0:f3:72:25:f5:fd:91:48:ea:99:c5: 66:1f:fd:ba:80:4f:b8:de:a8:34:83:0b:28:9a:50:ee:34:6e: 08:8f:50:c9:9c:d7:f6:9d:10:28:55:a7:c4:d5:b1:8e:5e:c8: f6:16:e8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RyYlb6lexplgKK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNTE2NTYyM1oXDTI2MDYwMzE1NTYyM1owLzEtMCsGA1UEAxMk NTI1M2MwYzYtNmM5OS00YTJmLWE3YzctZjhhNjEyNDNmZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34E+51k5AVG3urFqIdwPEnaHVh/ajxhHRwEz +wuMOc4gSampFm2oEeMfEKpz7fxeLtWkamtL6VBNaSCL4Q0EDQD2wmvd6lcoQg9m t6kykwxqip9zXnr90DPHqUQp9AOkw5c62OuYwlp7znfROzoCGPLZjqLgrGwjyB5+ L+PURnlHNYm5ZG4d/7ah4DscTjcA20ToLG5IM1BjfoxThha0eY2lzguHAozZ9zEV bTTzqkfV9rbYzvI6UDb/kyCK6qLigpjwEHbBUAbjInPr+4swtZ+xg6Ol7OFrAm72 RMToFNCHIDL6VKnT4+Mxw0Hd0ha2bo7K4GAjhfQzHoTXhdFoOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5SW1HKoPfy2rP1k5vLrgbV0uBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvODQxYTlkMGYtOTgzMS0z ZDY2LTk3MDAtZDZmNjBjZjJkNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSDvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+0WE0qHE84AuSUIRp2MKiWfmPb93QjpEdb0D72+O3oHIsu2G1bgyZC YAseYVv8llPKeEDwOxwURdNnHlU1ZxvlsCo7EoZCZifc6Sdf7vzAPgJ9llfmZOdS tbOh06fJieR5i8MvLnHaPORECiez1xxN78IVRjZut7SKUR3YZ7Lv3ElhLPKnbKUp colcSHicsY2reT4xl0+Y2krdUFh+/myS9i/BCPkzgOl54YJZNphq09/nQjJhE+0G sWZJxJO+EMWefMPEXUEhIFu3Yu6w83Il9f2RSOqZxWYf/bqAT7jeqDSDCyiaUO40 bgiPUMmc1/adEChVp8TVsY5eyPYW6DE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:53 2026 by rpki-client