$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa File: 387ec337-98bd-38d0-95b0-47845596949f.roa (raw, json) Hash identifier: s8UoOjD34B/hHvmqo4DpiM7B9lJQaHm2LjU+FtzWwaI= Subject key identifier: 43:FA:B6:A2:BF:93:AC:86:3E:8B:0C:8F:C3:E1:DE:48:AD:08:E1:8B Certificate issuer: /CN=a75ece7f-5380-409e-b027-b6733c088c34 Certificate serial: 010D0C9F4328584EA791BED698C3D0DB77A06EC0 Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 59 IP address blocks: 72.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:be:d6:98:c3:d0:db:77:a0:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=038d14d3-15f5-46f4-97e6-2f8ba17f979f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:5e:66:02:10:be:7a:fb:bc:53:6a:d3:69: 8e:6b:2b:e6:4c:3c:2f:00:a2:ef:3a:25:1a:2b:b9: 39:a7:ea:8b:95:04:88:a3:59:07:e4:2c:d9:76:f1: cd:d1:be:09:a8:3a:02:2c:57:22:90:3f:5c:1b:8d: c3:a0:16:62:4b:9e:fa:d6:43:64:ff:4a:f0:2b:1e: 69:7b:21:7a:7d:84:c2:e6:c7:e5:6e:db:07:36:88: 5a:65:9c:5e:ba:e8:9a:20:bb:e0:89:3d:36:fd:f3: fc:cc:a6:18:06:00:d3:d3:15:75:81:fa:56:48:0e: 68:5d:28:e2:3b:b8:f0:13:88:b1:14:4d:66:f2:9d: c3:3f:c4:0a:fc:f2:5b:a7:a4:f6:9c:ac:38:b0:3b: 18:9c:d6:aa:15:fe:23:50:29:b4:46:e7:fe:dd:e5: fe:c6:e1:b3:6f:d2:20:2d:50:9c:5a:11:48:38:44: f1:71:a6:92:87:b5:75:a1:50:36:35:57:55:18:70: b4:e6:70:a5:38:f0:b0:68:4d:8a:5d:b6:7c:7b:4b: 24:9b:77:05:43:cc:eb:71:a7:85:56:b1:68:ef:70: cc:91:5c:e4:65:0b:82:52:1b:9c:a8:34:82:e7:1d: 81:7b:f0:34:dd:83:08:1b:3b:e6:bd:be:34:54:7d: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:B6:A2:BF:93:AC:86:3E:8B:0C:8F:C3:E1:DE:48:AD:08:E1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/387ec337-98bd-38d0-95b0-47845596949f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl X509v3 Authority Key Identifier: keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer sbgp-ipAddrBlock: critical IPv4: 72.33.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:f1:dd:68:2b:24:ec:23:fc:e0:2d:45:c9:1e:04:be:02:6f: 9a:82:a6:57:92:60:98:23:11:9d:1f:6e:a2:ac:7e:ce:21:47: cc:55:89:ac:ef:08:db:7b:12:d3:ce:9f:2d:6f:45:c0:30:8a: 3a:91:ac:d2:1f:38:d4:51:b5:a0:0b:aa:1c:52:d7:5b:3a:bc: a8:12:8f:8f:1d:59:a0:77:6d:1f:b7:62:69:20:c2:84:32:3a: 3d:2d:8a:40:61:b5:e3:e7:16:6f:98:78:4a:3e:66:99:09:0a: d6:41:4f:df:f4:50:c9:84:58:06:5a:49:85:c6:c4:b1:77:16: f1:25:c1:4f:e9:35:2b:fa:87:02:04:9a:5b:53:6e:54:58:7a: fd:d7:ca:b9:58:d4:23:17:9b:58:8c:59:c5:14:9a:58:6d:21: e1:81:67:20:dd:8c:1e:ba:02:4a:36:a7:0e:12:af:f4:46:d5: b6:cc:04:fa:8c:ad:3a:5c:fe:94:f0:8c:cf:92:0d:1d:21:33: e8:c7:25:c4:37:b7:ea:7f:52:4c:83:a4:5d:02:80:34:79:4e: 11:56:40:fa:f6:ba:d8:f2:6d:78:62:a4:20:2e:34:0c:8e:ec: 49:51:1d:a0:db:e9:f9:e7:0b:33:5f:a5:de:a0:4c:bf:fd:f7: 41:a1:09:90 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nkb7WmMPQ23egbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc1ZWNlN2YtNTM4MC00MDllLWIwMjctYjY3MzNjMDg4 YzM0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDM4ZDE0ZDMtMTVmNS00NmY0LTk3ZTYtMmY4YmExN2Y5NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzNeZgIQvnr7vFNq02mOayvmTDwvAKLvOiUa K7k5p+qLlQSIo1kH5CzZdvHN0b4JqDoCLFcikD9cG43DoBZiS5761kNk/0rwKx5p eyF6fYTC5sflbtsHNohaZZxeuuiaILvgiT02/fP8zKYYBgDT0xV1gfpWSA5oXSji O7jwE4ixFE1m8p3DP8QK/PJbp6T2nKw4sDsYnNaqFf4jUCm0Ruf+3eX+xuGzb9Ig LVCcWhFIOETxcaaSh7V1oVA2NVdVGHC05nClOPCwaE2KXbZ8e0skm3cFQ8zrcaeF VrFo73DMkVzkZQuCUhucqDSC5x2Be/A03YMIGzvmvb40VH0Y8QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEP6tqK/k6yGPosMj8Ph3kitCOGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVl Y2U3Zi01MzgwLTQwOWUtYjAyNy1iNjczM2MwODhjMzQvMzg3ZWMzMzctOThiZC0z OGQwLTk1YjAtNDc4NDU1OTY5NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc1ZWNlN2YtNTM4MC00MDllLWIw MjctYjY3MzNjMDg4YzM0L2E3NWVjZTdmLTUzODAtNDA5ZS1iMDI3LWI2NzMzYzA4 OGMzNC5jcmwwHwYDVR0jBBgwFoAUQZyloIg+h3f4w5MnJRJ6n44lziEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVlY2U3Zi01MzgwLTQwOWUtYjAyNy1iNjcz M2MwODhjMzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASCEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAp/HdaCsk7CP84C1FyR4EvgJvmoKmV5JgmCMRnR9uoqx+ziFHzFWJrO8I 23sS086fLW9FwDCKOpGs0h841FG1oAuqHFLXWzq8qBKPjx1ZoHdtH7diaSDChDI6 PS2KQGG14+cWb5h4Sj5mmQkK1kFP3/RQyYRYBlpJhcbEsXcW8SXBT+k1K/qHAgSa W1NuVFh6/dfKuVjUIxebWIxZxRSaWG0h4YFnIN2MHroCSjanDhKv9EbVtswE+oyt Olz+lPCMz5INHSEz6MclxDe36n9STIOkXQKANHlOEVZA+va62PJteGKkIC40DI7s SVEdoNvp+ecLM1+l3qBMv/33QaEJkA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:37 2026 by rpki-client