$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa File: bf6962bd-45db-33f1-9637-5ec4531b2b48.roa (raw, json) Hash identifier: 3wZ0G4RjLGVPB6JbQv3qU4ZBk0tqNbHq3zvJJmvipcw= Subject key identifier: 95:5A:AC:12:BD:A9:E8:68:72:CF:D2:18:F1:73:07:BE:4E:11:84:F0 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584E0A700FF56A804CFF4B02D080 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 30277 IP address blocks: 72.9.144.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:0f:f5:6a:80:4c:ff:4b:02:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=b983ea19-f1d1-419a-aa1c-2f68d7036aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6f:fd:e6:a4:64:b6:ef:ed:55:29:d4:0f:0a: c2:19:3f:83:ab:cf:dd:bb:69:ce:78:89:85:66:5e: da:b5:7a:22:54:75:37:be:d7:5f:56:27:cf:cf:3a: e7:94:c6:ab:48:df:91:7e:f4:d6:54:63:ab:cc:70: 0b:71:5c:dd:f3:58:e2:54:db:d8:3b:c9:35:5e:64: f8:9e:14:04:de:3f:b5:25:11:0e:ad:ae:a1:3c:2e: 20:88:a9:dd:87:27:e8:c0:97:7b:f3:22:0e:fa:42: 8f:0e:8c:95:fa:db:9b:64:d0:6c:0f:23:ab:70:bf: 4f:67:ec:a3:7b:cc:80:e0:2e:75:d6:84:b7:cb:89: 43:5b:ae:4f:14:10:83:3d:e4:48:0e:8a:9c:13:a2: a8:d1:b0:c2:e7:7c:8b:b9:0e:df:f2:03:eb:55:26: 6c:6a:1d:b7:65:ad:ea:99:03:88:cd:08:df:84:ca: 63:80:3e:6e:31:91:37:d5:8e:e1:e4:ff:75:33:6b: 61:6b:cc:4c:ac:67:49:03:47:c0:db:17:ca:06:22: 9f:31:b9:db:66:6f:12:c7:e5:b5:4e:e4:2a:3b:7a: 3a:c5:90:1b:64:ff:0c:84:79:8f:95:0a:cc:1f:12: 13:92:f0:f9:53:55:ac:e9:76:de:d7:eb:ce:17:33: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5A:AC:12:BD:A9:E8:68:72:CF:D2:18:F1:73:07:BE:4E:11:84:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/bf6962bd-45db-33f1-9637-5ec4531b2b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 72.9.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7c:40:02:99:2e:71:da:28:68:08:8e:64:fe:7a:92:a1:58: c3:22:0a:86:c4:f4:c7:07:31:93:fc:98:15:2d:74:a0:2e:56: 84:64:e4:ab:23:c2:26:02:71:a9:66:64:30:41:97:21:1c:66: 6b:7c:e1:4c:23:6c:c7:b1:b7:41:1b:c6:3d:03:14:f2:b8:c5: b0:f7:f5:1a:79:ea:a8:9d:e3:83:e9:19:69:f9:4f:65:90:2f: 5a:f3:51:30:fa:02:dc:1a:f8:9a:04:5c:b4:3e:3c:86:2a:b1: fd:9e:23:f0:9b:a9:ae:63:81:63:08:8c:d8:a6:13:77:d9:1e: 19:ea:30:5e:39:ac:e1:bc:23:f4:80:23:00:89:66:7a:99:a5: 48:4c:44:f4:42:e5:56:ec:8f:b5:b7:7c:ba:97:a9:bf:21:dd: 2a:8b:17:01:ae:cc:6a:a4:9c:12:2f:3b:ea:42:b6:36:89:0d: 43:cf:93:f6:45:5a:a4:7c:0e:a9:40:35:12:c5:27:f3:dd:be: 57:87:ec:11:4e:77:34:41:ad:0d:62:a3:aa:85:ea:00:29:0e: c2:9d:07:8f:a7:03:a4:98:9a:6e:23:5a:ac:dc:32:48:f1:07: e8:c8:97:40:af:a9:39:ac:eb:55:f4:49:38:9e:95:98:19:20: 4d:66:b3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcA/1aoBM/0sC0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk Yjk4M2VhMTktZjFkMS00MTlhLWFhMWMtMmY2OGQ3MDM2YWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W/95qRktu/tVSnUDwrCGT+Dq8/du2nOeImF Zl7atXoiVHU3vtdfVifPzzrnlMarSN+RfvTWVGOrzHALcVzd81jiVNvYO8k1XmT4 nhQE3j+1JREOra6hPC4giKndhyfowJd78yIO+kKPDoyV+tubZNBsDyOrcL9PZ+yj e8yA4C511oS3y4lDW65PFBCDPeRIDoqcE6Ko0bDC53yLuQ7f8gPrVSZsah23Za3q mQOIzQjfhMpjgD5uMZE31Y7h5P91M2tha8xMrGdJA0fA2xfKBiKfMbnbZm8Sx+W1 TuQqO3o6xZAbZP8MhHmPlQrMHxITkvD5U1Ws6Xbe1+vOFzPnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVarBK9qehocs/SGPFzB75OEYTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvYmY2OTYyYmQtNDVkYi0z M2YxLTk2MzctNWVjNDUzMWIyYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd8QAKZLnHaKGgIjmT+epKhWMMiCobE9McHMZP8mBUtdKAuVoRk5Ksj wiYCcalmZDBBlyEcZmt84UwjbMext0Ebxj0DFPK4xbD39Rp56qid44PpGWn5T2WQ L1rzUTD6Atwa+JoEXLQ+PIYqsf2eI/Cbqa5jgWMIjNimE3fZHhnqMF45rOG8I/SA IwCJZnqZpUhMRPRC5Vbsj7W3fLqXqb8h3SqLFwGuzGqknBIvO+pCtjaJDUPPk/ZF WqR8DqlANRLFJ/PdvleH7BFOdzRBrQ1io6qF6gApDsKdB4+nA6SYmm4jWqzcMkjx B+jIl0CvqTms61X0STielZgZIE1ms0Q= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:06 2026 by rpki-client