$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa File: 4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa (raw, json) Hash identifier: 4ozNIJmQVjWOOz8YhBiKz4KbYiVY1BTJrBons1aCgU0= Subject key identifier: 64:82:FE:F8:51:1F:90:F9:88:C9:10:39:01:9F:13:D6:58:AC:42:AD Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D00B23EF31429F092C59C0D40 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 0 IP address blocks: 72.31.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:3e:f3:14:29:f0:92:c5:9c:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=26e6d65e-ca43-41ee-9022-5e33ba08fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a8:0e:bd:9e:6f:34:67:54:ca:ca:11:7a:34: 63:4d:f3:1b:10:13:c1:cf:db:48:59:9b:d6:7a:bd: 4e:a8:31:c7:86:30:97:e1:9a:5e:1d:c7:65:e0:db: 5c:b8:63:12:ba:bc:73:15:d8:da:59:3a:a8:f8:a6: 77:f4:77:08:d8:2d:ef:9c:6d:f9:f4:28:92:f4:35: f3:fe:41:a9:9b:ab:63:48:60:49:80:20:34:34:5d: 02:b7:39:5c:05:a5:d8:35:b1:dd:e5:54:b8:69:61: 3f:2b:20:de:06:59:50:5a:b3:22:22:7d:e2:b7:4d: dc:19:72:a9:b8:0d:ee:b6:75:bd:55:89:b2:52:bf: c1:0d:4f:d3:7f:84:23:6b:f7:3d:f5:47:70:cf:30: ca:6d:87:1c:44:38:d8:41:80:3d:18:a6:c1:3f:10: a4:10:cf:fb:cf:50:54:4a:fd:90:89:3c:11:33:4f: aa:7e:64:f6:32:0b:05:40:91:c9:02:3e:e5:55:6c: 48:5c:03:89:43:7e:3b:19:7c:1b:75:41:7c:c2:12: 4f:e6:49:b6:1a:04:af:7f:89:92:90:a8:8f:da:b1: 73:5b:32:7c:e1:c1:7e:e7:a6:67:31:41:80:da:58: 73:ec:98:0f:10:80:16:d3:75:46:c5:74:1b:6b:de: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:FE:F8:51:1F:90:F9:88:C9:10:39:01:9F:13:D6:58:AC:42:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a5df221-7242-3427-b1c2-b75cb9a35e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.31.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a7:0f:39:85:4a:54:d6:49:74:1c:5f:2d:13:a1:e7:43:27: 21:40:27:44:5b:24:9c:63:2a:fb:db:e6:f5:bd:47:4e:98:57: 30:ea:8a:c8:e4:b8:5b:bb:21:3a:46:aa:d7:06:11:0c:00:91: 11:e7:73:48:6a:2b:6b:59:4f:67:86:18:28:a5:2a:70:02:9b: 8f:c3:57:0c:9e:fe:b0:2d:ea:7b:53:d8:d3:22:9e:7a:75:00: 93:43:41:aa:b7:4a:bd:74:a2:14:97:31:7d:ec:93:b8:db:dc: 4a:1f:de:5b:7d:64:10:ad:39:dc:0b:50:17:d1:24:e8:68:db: 39:93:77:77:1d:f5:80:ee:5e:8b:37:2f:88:f2:44:24:89:dc: 2a:ac:ee:05:78:94:6a:e3:2d:e5:97:60:e8:f9:d8:f1:10:42: c8:ee:7b:04:a8:f5:22:05:77:a5:67:0b:60:4f:5f:d0:1f:02: 4f:71:75:38:ba:30:7f:75:d4:c3:e5:c8:d1:46:59:bd:c4:5a: 99:cb:25:3d:62:5c:e7:76:57:ab:34:6b:7f:6f:cf:cc:75:cb: b7:77:a7:5c:70:a3:ea:9c:5a:07:8c:be:c9:f7:f0:12:6c:4f: a2:dc:3c:39:84:9d:d7:b4:85:62:a4:55:c2:35:99:92:0e:43: 4b:72:83:7d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0Asj7zFCnwksWcDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MjZlNmQ2NWUtY2E0My00MWVlLTkwMjItNWUzM2JhMDhmYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKgOvZ5vNGdUysoRejRjTfMbEBPBz9tIWZvW er1OqDHHhjCX4ZpeHcdl4NtcuGMSurxzFdjaWTqo+KZ39HcI2C3vnG359CiS9DXz /kGpm6tjSGBJgCA0NF0CtzlcBaXYNbHd5VS4aWE/KyDeBllQWrMiIn3it03cGXKp uA3utnW9VYmyUr/BDU/Tf4Qja/c99UdwzzDKbYccRDjYQYA9GKbBPxCkEM/7z1BU Sv2QiTwRM0+qfmT2MgsFQJHJAj7lVWxIXAOJQ347GXwbdUF8whJP5km2GgSvf4mS kKiP2rFzWzJ84cF+56ZnMUGA2lhz7JgPEIAW03VGxXQba95mxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGSC/vhRH5D5iMkQOQGfE9ZYrEKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGE1ZGYyMjEtNzI0Mi0z NDI3LWIxYzItYjc1Y2I5YTM1ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASB8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI6cPOYVKVNZJdBxfLROh50MnIUAnRFsknGMq+9vm9b1HTphXMOqKyOS4 W7shOkaq1wYRDACREedzSGora1lPZ4YYKKUqcAKbj8NXDJ7+sC3qe1PY0yKeenUA k0NBqrdKvXSiFJcxfeyTuNvcSh/eW31kEK053AtQF9Ek6GjbOZN3dx31gO5eizcv iPJEJIncKqzuBXiUauMt5Zdg6PnY8RBCyO57BKj1IgV3pWcLYE9f0B8CT3F1OLow f3XUw+XI0UZZvcRamcslPWJc53ZXqzRrf2/PzHXLt3enXHCj6pxaB4y+yffwEmxP otw8OYSd17SFYqRVwjWZkg5DS3KDfQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:37:27 2026 by rpki-client