$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa File: 71cc5532-c1b2-3518-8619-35ed150f79a1.roa (raw, json) Hash identifier: rzjfnMwV9MDPBDUiXlmXQ1CUMHEThS++Wop6mhdjk4Q= Subject key identifier: A7:B5:E5:6C:C2:04:56:02:74:83:47:68:A1:75:A7:D5:EC:22:37:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E253F18D2A3344D5558C07D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 26134 IP address blocks: 72.13.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:18:d2:a3:34:4d:55:58:c0:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=bf0d7f14-83b1-416c-bf55-ef90e31bc2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:92:5d:00:e1:dc:e0:8b:82:d5:8d:33:4d: 07:e2:55:99:ee:72:24:3f:21:8c:7a:9b:09:4b:a5: d7:cb:63:e2:ab:5a:44:47:93:90:78:90:0f:d1:20: a3:ec:93:1b:37:9f:ae:8e:c4:81:4e:a0:a3:26:8d: f4:69:2e:dd:d2:12:9f:e0:e9:23:64:3d:22:2c:80: 72:e7:9a:eb:2c:9a:6e:66:8f:33:f1:ec:04:2c:f1: 72:32:8a:45:e7:52:5b:14:c3:9d:e4:22:56:75:d1: 98:fd:40:02:52:dd:8e:2e:76:30:d4:09:ec:63:e6: b2:2c:da:c9:82:6e:37:b9:2a:75:9a:a6:b1:3b:91: 83:92:8e:bc:a2:b7:24:66:8e:2a:e5:ed:42:3c:e2: d5:a8:26:a5:21:8f:cf:8a:b7:e5:38:37:ea:c2:ef: 84:fc:23:06:d9:47:c7:ac:95:28:f0:71:c4:31:30: 74:5e:9d:f5:5e:d1:bd:f1:5d:ea:ff:b9:c7:2d:31: 96:62:d8:c0:e0:f2:7c:98:2f:70:c2:93:3a:02:b1: fa:8d:b9:8d:09:34:18:12:2b:9b:e0:f8:42:47:3c: 78:65:36:60:a2:b5:36:ff:2f:71:e1:37:89:e3:f2: 5c:7e:24:e5:37:a4:2a:dd:0e:3d:34:07:d0:fd:16: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B5:E5:6C:C2:04:56:02:74:83:47:68:A1:75:A7:D5:EC:22:37:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/71cc5532-c1b2-3518-8619-35ed150f79a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7d:e5:ee:7b:17:0b:21:17:01:90:f6:89:f1:22:48:9d:78: 72:85:8a:70:a9:46:ee:84:b5:3a:ad:9f:6e:c1:3c:8a:70:be: e2:02:58:ed:3c:11:c9:88:0d:30:d2:f5:ca:c5:3a:67:25:cd: c6:51:8b:44:a6:e2:69:15:e3:e9:69:ef:df:5b:c0:81:3b:ca: 8d:fe:69:d6:74:44:dc:bb:bf:fe:ff:ac:d6:de:0d:64:58:34: 01:b8:d1:e6:7c:fe:eb:35:5f:79:46:1f:9d:a5:ee:f4:1f:43: b1:e6:98:25:24:2e:4b:1f:5a:40:de:7d:f9:91:b7:16:12:d2: 80:fb:5b:ec:16:e2:8f:2b:29:6e:61:cc:20:c6:3f:3f:22:46: 6f:34:7f:9a:57:4a:65:e7:a4:ad:66:cf:2e:dd:72:2b:8d:28: 91:2a:70:9d:97:66:26:75:48:cb:a8:10:8a:38:77:4b:ab:7a: 48:37:17:43:6a:de:7c:9e:b5:fe:7e:3c:66:be:d2:cb:b7:94: d4:bd:b8:55:88:f5:84:f2:88:76:b9:2b:67:de:24:57:41:79: 21:b9:36:1b:6f:7a:26:9f:38:da:76:bd:79:ea:df:74:4f:d4: 76:1c:15:c7:de:e4:fb:26:66:a9:e3:b7:2f:2c:be:0c:9e:05: af:52:f3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPxjSozRNVVjAfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk YmYwZDdmMTQtODNiMS00MTZjLWJmNTUtZWY5MGUzMWJjMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnmSXQDh3OCLgtWNM00H4lWZ7nIkPyGMepsJ S6XXy2Piq1pER5OQeJAP0SCj7JMbN5+ujsSBTqCjJo30aS7d0hKf4OkjZD0iLIBy 55rrLJpuZo8z8ewELPFyMopF51JbFMOd5CJWddGY/UACUt2OLnYw1AnsY+ayLNrJ gm43uSp1mqaxO5GDko68orckZo4q5e1CPOLVqCalIY/PirflODfqwu+E/CMG2UfH rJUo8HHEMTB0Xp31XtG98V3q/7nHLTGWYtjA4PJ8mC9wwpM6ArH6jbmNCTQYEiub 4PhCRzx4ZTZgorU2/y9x4TeJ4/JcfiTlN6Qq3Q49NAfQ/RaFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe15WzCBFYCdINHaKF1p9XsIjfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzFjYzU1MzItYzFiMi0z NTE4LTg2MTktMzVlZDE1MGY3OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx95e57FwshFwGQ9onxIkideHKFinCpRu6EtTqtn27BPIpwvuICWO08 EcmIDTDS9crFOmclzcZRi0Sm4mkV4+lp799bwIE7yo3+adZ0RNy7v/7/rNbeDWRY NAG40eZ8/us1X3lGH52l7vQfQ7HmmCUkLksfWkDeffmRtxYS0oD7W+wW4o8rKW5h zCDGPz8iRm80f5pXSmXnpK1mzy7dciuNKJEqcJ2XZiZ1SMuoEIo4d0urekg3F0Nq 3nyetf5+PGa+0su3lNS9uFWI9YTyiHa5K2feJFdBeSG5NhtveiafONp2vXnq33RP 1HYcFcfe5PsmZqnjty8svgyeBa9S850= -----END CERTIFICATE-----Generated at Sat Jun 13 14:56:54 2026 by rpki-client