$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa File: 2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa (raw, json) Hash identifier: uNx4EjeKxyRyh3KyAWWCPnJIaZ4W7dyn5UOdDeh5NyY= Subject key identifier: 35:ED:AD:4B:75:A5:71:20:5A:A1:89:ED:03:00:FE:E4:5A:A4:C1:1E Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584CB121C36438DA02E06968AAC0 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 8075 IP address blocks: 72.18.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c3:64:38:da:02:e0:69:68:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=a29a1eed-b073-48d9-b60c-a9f2ca5ab53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:a3:67:d9:06:7b:09:ff:fb:42:fb:26:3c: e7:08:2f:57:69:fc:f9:26:df:cd:88:27:b2:24:76: a8:1d:fa:f6:30:96:84:0f:f0:ae:61:1d:1f:47:b4: 3f:82:3d:d8:51:5c:cf:87:26:70:35:e1:e1:a0:f7: b0:dc:61:35:88:4d:28:7f:92:8e:f5:4c:1c:ee:1b: b1:ba:89:75:3d:fb:1d:fb:b0:87:46:d2:42:3e:23: ff:fe:f2:2b:c3:72:bc:99:2e:93:05:0c:76:17:53: ad:0e:ac:b7:67:6f:f4:ba:b5:bf:ec:d8:fc:5d:90: 2a:c2:5d:50:e6:81:97:df:60:ad:d8:a0:ec:31:d7: ca:96:bb:a6:be:ee:b2:70:06:63:47:3e:63:23:ae: 27:0d:a5:2f:a7:8f:5e:d3:68:74:e2:8e:6b:85:ab: c9:73:be:1d:a6:79:9d:4a:23:d3:da:3d:37:bd:10: 6b:3c:b5:11:b0:12:e1:34:9b:1e:09:45:2c:a6:a3: c4:e1:69:a9:75:a3:fa:59:b4:2e:2e:8b:2d:2e:d6: b1:49:c5:84:43:74:a7:89:3c:eb:d3:81:a8:bc:b8: 1c:75:7e:e6:d0:c0:48:64:ea:65:c7:94:26:67:ce: d7:2a:bb:c7:6b:13:b6:49:2c:a4:24:82:8f:bf:21: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:AD:4B:75:A5:71:20:5A:A1:89:ED:03:00:FE:E4:5A:A4:C1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2d4a32ae-9ef6-3b6c-bab6-bdd7b44e1654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6f:2e:f5:c4:11:35:fd:d4:56:f2:a9:83:a6:bb:bc:35:99: 01:a5:27:59:94:49:d8:2e:a4:35:b6:5c:9f:c9:66:8a:79:fa: 08:05:13:13:df:dc:15:e2:0e:9a:c1:9a:99:ed:1b:ae:58:96: 0e:4a:0d:99:e1:49:7a:50:ae:93:0c:16:e0:dd:cb:d2:60:f5: 6e:07:e3:0e:69:a5:ce:ae:de:65:4d:af:70:80:ab:e0:1a:0e: d8:88:8e:ba:63:cd:a4:4e:8f:8b:78:d2:ab:2c:5a:1e:5e:be: f7:6c:67:83:0e:99:05:06:8d:15:0f:c3:89:2f:3f:7d:49:c5: 21:49:b8:fe:8a:1b:1a:32:20:dc:4f:e4:4d:77:15:65:17:ee: b3:c1:27:0d:4a:c1:1d:4b:e1:be:f8:f0:93:71:61:d4:2c:df: f5:77:6c:d0:d6:8a:76:73:cd:1e:d4:08:01:e8:0d:46:52:a5: f1:5d:e6:03:ca:cc:df:17:d2:2d:10:f5:3a:68:09:05:cf:ef: 2f:25:53:cf:85:6c:bd:e5:05:18:5c:1e:15:c5:5a:56:92:9e: a1:e4:60:d4:4c:4e:d8:8b:ac:79:6b:94:77:59:d8:1c:7a:d7: 85:25:04:34:b1:43:78:4d:53:90:f2:6a:84:62:f4:d9:da:91: 43:b2:d9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcNkONoC4GloqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTI5YTFlZWQtYjA3My00OGQ5LWI2MGMtYTlmMmNhNWFiNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhamjZ9kGewn/+0L7JjznCC9Xafz5Jt/NiCey JHaoHfr2MJaED/CuYR0fR7Q/gj3YUVzPhyZwNeHhoPew3GE1iE0of5KO9Uwc7hux uol1Pfsd+7CHRtJCPiP//vIrw3K8mS6TBQx2F1OtDqy3Z2/0urW/7Nj8XZAqwl1Q 5oGX32Ct2KDsMdfKlrumvu6ycAZjRz5jI64nDaUvp49e02h04o5rhavJc74dpnmd SiPT2j03vRBrPLURsBLhNJseCUUspqPE4WmpdaP6WbQuLostLtaxScWEQ3SniTzr 04GovLgcdX7m0MBIZOplx5QmZ87XKrvHaxO2SSykJIKPvyFiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXtrUt1pXEgWqGJ7QMA/uRapMEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvMmQ0YTMyYWUtOWVmNi0z YjZjLWJhYjYtYmRkN2I0NGUxNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9vLvXEETX91FbyqYOmu7w1mQGlJ1mUSdgupDW2XJ/JZop5+ggFExPf 3BXiDprBmpntG65Ylg5KDZnhSXpQrpMMFuDdy9Jg9W4H4w5ppc6u3mVNr3CAq+Aa DtiIjrpjzaROj4t40qssWh5evvdsZ4MOmQUGjRUPw4kvP31JxSFJuP6KGxoyINxP 5E13FWUX7rPBJw1KwR1L4b748JNxYdQs3/V3bNDWinZzzR7UCAHoDUZSpfFd5gPK zN8X0i0Q9TpoCQXP7y8lU8+FbL3lBRhcHhXFWlaSnqHkYNRMTtiLrHlrlHdZ2Bx6 14UlBDSxQ3hNU5DyaoRi9NnakUOy2as= -----END CERTIFICATE-----Generated at Mon Mar 2 01:08:36 2026 by rpki-client