$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa File: a0305856-6db8-33a4-8ea3-9bb02757669f.roa (raw, json) Hash identifier: cOzBowPnANBVHBBvwEAQrvewpVNnkvg3SWa6S7eDXdM= Subject key identifier: B3:1E:AF:98:48:DB:9A:D1:CA:A3:FC:03:66:FE:42:58:E3:16:4E:4D Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D11C0670B53BD9D160BC63C80 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa Signing time: Thu 05 Mar 2026 16:37:59 +0000 ROA not before: Thu 05 Mar 2026 16:37:59 +0000 ROA not after: Wed 03 Jun 2026 15:37:59 +0000 asID: 398149 IP address blocks: 72.59.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:c0:67:0b:53:bd:9d:16:0b:c6:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 5 16:37:59 2026 GMT Not After : Jun 3 15:37:59 2026 GMT Subject: CN=7c18790b-70be-4c17-8ad0-331c7cbf1b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:74:b0:f1:2d:65:c7:71:2f:74:99:2c:2d: 67:f5:a0:1f:66:93:f1:8b:1f:b0:5f:58:e6:f1:c7: 9f:5a:04:c1:1b:db:bd:ed:71:83:cc:92:ec:96:13: 8c:02:6e:73:fd:95:7c:ff:5c:bf:4d:15:ae:89:41: a7:4f:5c:ec:e8:c2:a8:06:db:55:1b:28:5e:f9:9b: aa:1f:f4:29:40:eb:46:f7:ae:47:a0:b7:36:c3:6f: d8:6f:5d:40:a6:35:23:2f:15:0e:a6:73:97:6e:7f: 92:1a:eb:68:9e:95:d2:f5:bc:8c:cf:8c:6b:ce:80: 71:f5:dc:ad:19:36:b3:02:91:5c:4e:28:96:88:ee: b2:73:92:7a:a2:68:12:30:b8:75:d3:7d:ee:ff:a6: 97:ec:d6:5e:a9:0c:37:ae:42:d5:d8:62:0b:2a:1a: 9d:13:c1:44:5a:dd:0c:5b:a1:7f:92:c6:81:ac:b4: d1:2d:1f:66:bc:3e:0a:75:3b:b1:42:7f:7d:ba:e5: 7e:50:57:df:a8:21:4f:84:05:33:0f:ae:49:a5:17: 3d:6a:23:b4:12:f2:c7:24:10:9a:10:10:85:69:d4: 66:90:1a:53:22:89:09:0d:9b:ec:15:67:d2:18:9b: 0a:70:ea:85:f2:79:c2:d4:a7:96:47:00:7e:b0:19: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:AF:98:48:DB:9A:D1:CA:A3:FC:03:66:FE:42:58:E3:16:4E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:e1:cf:85:b6:c2:ba:9a:23:db:49:0f:bf:e5:5a:75:85: e1:bb:1f:3d:27:39:4a:26:3e:cc:df:a8:16:49:2a:b1:4e:51: 1a:d0:24:aa:6f:68:23:61:46:c9:67:a9:e8:fe:d9:3c:fa:5b: cc:70:65:78:1e:3c:2d:1e:f6:a3:74:86:21:29:16:4a:a6:df: bc:35:22:04:93:2e:3c:f1:35:b9:cf:ed:71:45:60:d6:d9:d9: 80:5f:ca:e5:b1:12:27:cf:b3:36:72:5b:d9:59:37:3b:7e:bd: ec:22:f8:36:e4:af:11:b3:7a:fd:e2:db:8f:ea:b5:2c:c4:0a: c3:93:95:38:73:05:b1:fd:29:fc:bd:f1:b7:f0:c2:63:16:64: fb:8b:2d:18:21:6d:55:9c:dd:e4:ed:ae:e2:b3:bc:d6:d8:cf: fb:73:d4:64:af:f7:2e:40:2b:fc:f9:83:5e:95:34:88:1f:44: 98:64:d8:20:35:18:9d:e9:f0:4f:86:16:d8:7a:4a:4d:de:e0: 03:b2:dc:6b:18:7d:04:f4:72:e0:10:e3:e4:48:15:9a:7a:83: 39:93:51:a6:86:0b:e5:98:bc:5f:4c:c0:ae:b5:5c:b7:f5:ee: 20:d3:02:bc:5f:07:be:cc:dc:c7:59:cd:75:a7:68:fe:a0:8b: 05:e4:d0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RwGcLU72dFgvGPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNTE2Mzc1OVoXDTI2MDYwMzE1Mzc1OVowLzEtMCsGA1UEAxMk N2MxODc5MGItNzBiZS00YzE3LThhZDAtMzMxYzdjYmYxYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq90sPEtZcdxL3SZLC1n9aAfZpPxix+wX1jm 8cefWgTBG9u97XGDzJLslhOMAm5z/ZV8/1y/TRWuiUGnT1zs6MKoBttVGyhe+Zuq H/QpQOtG965HoLc2w2/Yb11ApjUjLxUOpnOXbn+SGutonpXS9byMz4xrzoBx9dyt GTazApFcTiiWiO6yc5J6omgSMLh1033u/6aX7NZeqQw3rkLV2GILKhqdE8FEWt0M W6F/ksaBrLTRLR9mvD4KdTuxQn99uuV+UFffqCFPhAUzD65JpRc9aiO0EvLHJBCa EBCFadRmkBpTIokJDZvsFWfSGJsKcOqF8nnC1KeWRwB+sBlzQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMer5hI25rRyqP8A2b+QljjFk5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTAzMDU4NTYtNmRiOC0z M2E0LThlYTMtOWJiMDI3NTc2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABn4c+FtsK6miPbSQ+/5Vp1heG7Hz0nOUomPszfqBZJKrFOURrQJKpv aCNhRslnqej+2Tz6W8xwZXgePC0e9qN0hiEpFkqm37w1IgSTLjzxNbnP7XFFYNbZ 2YBfyuWxEifPszZyW9lZNzt+vewi+DbkrxGzev3i24/qtSzECsOTlThzBbH9Kfy9 8bfwwmMWZPuLLRghbVWc3eTtruKzvNbYz/tz1GSv9y5AK/z5g16VNIgfRJhk2CA1 GJ3p8E+GFth6Sk3e4AOy3GsYfQT0cuAQ4+RIFZp6gzmTUaaGC+WYvF9MwK61XLf1 7iDTArxfB77M3MdZzXWnaP6giwXk0N8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:46 2026 by rpki-client