$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa File: a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa (raw, json) Hash identifier: IAemWj4Lbqg/YlQIsABH0Dd1T0yeyN19UAPYv9LPOoI= Subject key identifier: 1E:1B:A3:07:F8:D7:85:8D:FA:23:74:CD:50:91:65:11:3A:F1:F0:BA Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D11C87F92A154528B62E308D0 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa Signing time: Thu 05 Mar 2026 16:54:18 +0000 ROA not before: Thu 05 Mar 2026 16:54:18 +0000 ROA not after: Wed 03 Jun 2026 15:54:18 +0000 asID: 33507 IP address blocks: 72.59.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:c8:7f:92:a1:54:52:8b:62:e3:08:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 5 16:54:18 2026 GMT Not After : Jun 3 15:54:18 2026 GMT Subject: CN=2232bbe9-3a66-403b-8192-a82639bb911c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:bd:0d:90:bb:7e:d5:05:3f:fa:08:09:2f: 05:b9:69:ac:13:09:9a:cb:73:4e:49:42:99:c8:d1: 9b:51:ac:1d:75:8d:61:5e:b0:a6:c0:ae:56:58:bb: 97:32:51:cb:40:1a:0c:f5:62:3c:3a:40:1c:33:81: b5:55:51:97:49:ab:65:d7:d0:3d:e0:f5:27:a5:46: 7c:76:1a:1b:06:72:39:25:59:b7:55:11:83:9d:9f: 76:22:3e:cc:74:2e:7d:09:3c:db:04:df:e2:c1:c1: 38:9c:1e:87:f0:ca:b3:cd:97:cb:81:0c:0c:b2:d6: dc:26:f0:87:c5:e0:b8:8e:42:8c:06:41:90:36:34: 34:61:51:a1:d2:e0:61:48:e6:e6:84:1e:b0:58:e4: 28:14:91:cd:bb:60:98:fa:41:ad:ee:a2:9c:81:1d: 77:b3:31:0a:38:8e:91:db:4b:a4:6b:58:1c:5b:38: ff:49:30:97:02:a6:01:2f:a9:37:f2:03:35:e5:f7: a3:96:11:cd:ba:42:6b:45:37:d1:2c:61:60:42:37: c1:1a:c3:a6:1a:39:27:0b:ed:09:23:01:c3:01:28: 63:c4:7f:cf:30:5e:44:d9:e4:b8:dd:b5:a5:b1:eb: 2f:9d:a3:f5:02:ac:1a:1d:bb:39:5b:99:53:64:3c: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1B:A3:07:F8:D7:85:8D:FA:23:74:CD:50:91:65:11:3A:F1:F0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:36:e1:81:ba:ef:19:a2:23:e0:ea:3a:e7:2b:46:c9:58:8d: 34:f8:83:3d:86:27:51:fa:9d:f6:7c:23:12:92:31:fd:87:38: 0e:ec:c3:17:9b:dd:97:17:a2:d1:b6:99:86:f9:08:0a:e6:f2: 17:52:02:3b:c9:dc:a8:de:83:17:9b:ba:4f:00:ff:a3:40:0d: 1a:7d:cc:f8:1e:e7:a8:f6:5a:1d:f1:85:e3:a6:40:ee:1e:da: 5f:97:32:eb:03:8f:7a:8c:b6:87:77:bc:7e:c3:94:06:5f:17: d6:01:4a:ce:68:eb:1a:01:28:b4:23:b8:10:ec:83:56:76:66: 35:be:78:ac:ca:7f:5d:6f:f1:d5:c1:20:26:ef:aa:0e:a5:b3: e1:e5:05:06:a5:e2:a8:20:f4:80:bd:8f:3d:72:ba:3b:cf:75: cc:42:3c:c0:9b:81:d1:87:7b:56:c3:e6:44:1a:3c:8a:7a:6a: 71:c9:11:27:a2:e6:f5:cb:df:7f:91:06:79:db:e2:72:b0:74: 51:2f:d9:ee:ed:22:37:ff:c3:43:21:77:94:5e:67:e0:43:2b: 7a:90:e0:90:bd:f4:27:b1:d7:55:b5:e7:42:c6:94:ff:e6:da: 84:08:e7:22:62:1b:fc:eb:f1:f0:d7:9c:29:8e:0c:50:91:7f: 1a:d1:83:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RyH+SoVRSi2LjCNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMwNTE2NTQxOFoXDTI2MDYwMzE1NTQxOFowLzEtMCsGA1UEAxMk MjIzMmJiZTktM2E2Ni00MDNiLTgxOTItYTgyNjM5YmI5MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUu9DZC7ftUFP/oICS8FuWmsEwmay3NOSUKZ yNGbUawddY1hXrCmwK5WWLuXMlHLQBoM9WI8OkAcM4G1VVGXSatl19A94PUnpUZ8 dhobBnI5JVm3VRGDnZ92Ij7MdC59CTzbBN/iwcE4nB6H8MqzzZfLgQwMstbcJvCH xeC4jkKMBkGQNjQ0YVGh0uBhSObmhB6wWOQoFJHNu2CY+kGt7qKcgR13szEKOI6R 20uka1gcWzj/STCXAqYBL6k38gM15fejlhHNukJrRTfRLGFgQjfBGsOmGjknC+0J IwHDAShjxH/PMF5E2eS43bWlsesvnaP1AqwaHbs5W5lTZDxsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4bowf414WN+iN0zVCRZRE68fC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTMxYWU4ZTMtY2Q5ZS0z MTkyLWE2OWMtY2I5NDRmMzc2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSDvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY24YG67xmiI+DqOucrRslYjTT4gz2GJ1H6nfZ8IxKSMf2HOA7swxeb 3ZcXotG2mYb5CArm8hdSAjvJ3Kjegxebuk8A/6NADRp9zPge56j2Wh3xheOmQO4e 2l+XMusDj3qMtod3vH7DlAZfF9YBSs5o6xoBKLQjuBDsg1Z2ZjW+eKzKf11v8dXB ICbvqg6ls+HlBQal4qgg9IC9jz1yujvPdcxCPMCbgdGHe1bD5kQaPIp6anHJESei 5vXL33+RBnnb4nKwdFEv2e7tIjf/w0Mhd5ReZ+BDK3qQ4JC99Cex11W150LGlP/m 2oQI5yJiG/zr8fDXnCmODFCRfxrRg+s= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:50 2026 by rpki-client