$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa File: ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa (raw, json) Hash identifier: m77R2uUiXF/eIUnM4ZAs6IfWkkB9tNM0eiLPppiDvuw= Subject key identifier: BF:39:AF:51:34:92:6A:BD:70:47:C0:83:A5:0B:7C:A7:52:CC:9C:55 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584CD13CACC4572E615BA18E5160 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 21559 IP address blocks: 72.46.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:ac:c4:57:2e:61:5b:a1:8e:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=364f922e-6aed-493a-87fe-c90e08b7c2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:13:54:9c:fe:f5:50:2a:04:15:fd:08:ac:a4: fa:35:d4:b3:c4:0f:0d:57:f2:b6:4f:a6:ad:2a:ee: 17:f8:de:c3:af:8a:63:50:8b:3a:1c:fc:bb:f7:49: b1:c3:d5:51:1d:03:c7:36:1f:0b:10:b4:72:a6:58: b5:8b:eb:4f:9e:15:05:5c:6d:f3:dc:88:44:30:73: 16:b5:3d:29:9c:03:61:c5:07:a8:6e:50:b6:6c:3b: 94:e5:f7:5b:ad:86:91:f6:ee:43:23:71:bd:7a:af: 1c:e0:19:c8:90:a2:4c:e7:d1:6b:1e:dd:f7:3f:6b: 8d:a2:0c:4a:47:8a:df:5f:35:0b:6d:57:ee:bd:c2: ef:4a:5c:34:62:e7:82:46:2d:77:84:26:58:cc:eb: a3:f8:93:32:fb:91:e5:ff:1b:6b:96:94:93:c9:86: e5:a9:9f:22:f2:e2:f9:53:1a:8c:28:d2:60:bb:fb: a0:b4:00:72:e8:f9:90:aa:4b:56:d6:14:20:21:fb: e9:29:ef:40:bb:d5:e6:55:77:dc:45:da:e3:d2:30: 89:b6:7b:68:cf:12:20:88:55:fb:d7:e0:45:56:a8: 13:59:fa:ea:d2:7b:62:23:f3:f4:2c:5e:c9:e2:ba: 11:5a:5a:6a:92:1a:4b:66:b7:20:a7:1c:8e:44:98: ec:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:AF:51:34:92:6A:BD:70:47:C0:83:A5:0B:7C:A7:52:CC:9C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 72.46.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:1c:23:a2:c8:13:b1:fd:1c:f2:f9:a8:b3:87:cd:fc:d1: 5c:6e:38:b3:be:af:3e:8f:6f:57:22:31:ac:46:2c:7d:d2:68: dd:03:a7:f7:7c:a6:6c:cc:73:5c:15:d5:bb:90:ff:03:34:8b: 8f:d5:11:32:0b:eb:21:06:9c:5b:7c:c9:59:86:7a:61:b9:c6: 0c:f0:9b:b7:4a:31:3e:fc:39:7a:5a:ac:bd:51:13:a2:a0:7e: a6:17:97:43:6c:b2:5c:89:90:56:6c:00:74:e4:ce:4e:cd:09: be:65:be:5c:b6:4d:b4:6d:77:8c:9b:a9:2b:54:59:21:fd:90: d9:9f:a6:d5:6e:bd:dd:ad:2d:c3:d2:71:21:d5:66:64:9b:3e: 02:50:4c:ab:65:c2:95:a9:3c:18:d7:3f:cd:4e:d6:cf:40:30: 2a:bb:af:a4:ec:ca:9d:15:59:32:75:09:3f:e5:c8:d1:81:78: e5:a4:83:ea:3b:89:18:fa:dd:0e:8b:8a:10:af:2c:9a:01:55: 17:bb:4c:b5:dc:b6:50:1f:15:b3:e6:66:08:72:93:30:99:c4: 1c:a8:1b:a9:fd:c7:51:c6:9e:89:77:10:9f:14:ee:38:3c:3f: 28:c2:10:eb:b2:9b:0a:0c:b7:40:68:f2:47:cf:54:c4:b5:22: e3:90:d7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKzEVy5hW6GOUWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk MzY0ZjkyMmUtNmFlZC00OTNhLTg3ZmUtYzkwZTA4YjdjMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBNUnP71UCoEFf0IrKT6NdSzxA8NV/K2T6at Ku4X+N7Dr4pjUIs6HPy790mxw9VRHQPHNh8LELRypli1i+tPnhUFXG3z3IhEMHMW tT0pnANhxQeoblC2bDuU5fdbrYaR9u5DI3G9eq8c4BnIkKJM59FrHt33P2uNogxK R4rfXzULbVfuvcLvSlw0YueCRi13hCZYzOuj+JMy+5Hl/xtrlpSTyYblqZ8i8uL5 UxqMKNJgu/ugtABy6PmQqktW1hQgIfvpKe9Au9XmVXfcRdrj0jCJtntozxIgiFX7 1+BFVqgTWfrq0ntiI/P0LF7J4roRWlpqkhpLZrcgpxyORJjslQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL85r1E0kmq9cEfAg6ULfKdSzJxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWY0NWYxM2ItMzk0OS0z YTQwLThiYzMtNmEwNDM0NGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACloHCOiyBOx/Rzy+aizh8380VxuOLO+rz6Pb1ciMaxGLH3SaN0Dp/d8 pmzMc1wV1buQ/wM0i4/VETIL6yEGnFt8yVmGemG5xgzwm7dKMT78OXparL1RE6Kg fqYXl0NsslyJkFZsAHTkzk7NCb5lvly2TbRtd4ybqStUWSH9kNmfptVuvd2tLcPS cSHVZmSbPgJQTKtlwpWpPBjXP81O1s9AMCq7r6Tsyp0VWTJ1CT/lyNGBeOWkg+o7 iRj63Q6LihCvLJoBVRe7TLXctlAfFbPmZghykzCZxByoG6n9x1HGnol3EJ8U7jg8 PyjCEOuymwoMt0Bo8kfPVMS1IuOQ10Y= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:15 2026 by rpki-client