$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa File: 0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa (raw, json) Hash identifier: z4lglUw0e9GjX961H14IsPBUTGcfvgtvEqzdRFconM8= Subject key identifier: 18:3B:95:AE:2C:25:C2:8B:61:F4:35:E9:F4:63:E3:EF:CC:50:10:4D Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584D59EA714FDB5430AAB0C60A60 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 10430 IP address blocks: 72.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:71:4f:db:54:30:aa:b0:c6:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=730a7b2d-f316-4a09-9c85-082d88c5b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:07:ec:2f:82:43:35:0b:5a:47:20:08:34: 70:17:d1:62:29:7c:16:04:24:37:2a:35:d3:61:39: 79:57:c3:30:5e:c6:ed:0c:d7:10:9a:7c:5a:e5:c9: dd:2d:22:5e:0b:09:1e:c1:9a:ed:da:d7:b8:70:18: c2:e3:e5:66:47:3e:be:07:17:65:30:c3:c2:13:1d: 28:64:c4:44:c2:1b:eb:2a:17:6d:e7:cf:3c:e8:34: 07:75:30:17:b8:9a:c7:95:2e:2a:2e:8f:ab:12:46: 83:9e:22:00:c7:8c:ea:aa:b2:06:bf:54:87:a9:8c: b2:ad:31:83:dc:8e:93:d9:4e:14:fd:f2:0d:c4:55: 4c:63:da:91:55:c4:83:fb:1f:fb:24:f5:3a:d7:92: fc:33:75:76:e1:ba:92:53:60:88:3c:07:c7:69:01: df:a6:0f:46:d6:61:1b:51:53:86:55:2a:63:53:09: 3a:c6:20:e1:88:9e:09:97:6b:5e:72:37:e2:1a:da: 4b:94:09:2e:47:a3:da:76:2b:14:8d:d8:1d:dd:4e: 02:23:d0:75:9f:07:99:8e:6c:dd:05:63:e7:20:87: 57:df:06:bd:4c:d3:6f:33:20:13:12:5f:6d:d8:04: 16:8f:53:f6:9d:f4:60:44:3a:09:2e:b6:fb:bb:f7: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3B:95:AE:2C:25:C2:8B:61:F4:35:E9:F4:63:E3:EF:CC:50:10:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/0af9e6a7-ec26-3b88-8fa4-8d3254986df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a4:af:d7:d7:e4:31:85:ae:a1:e0:2b:87:b8:89:f8:da:35: cc:b8:5f:9b:d2:bc:33:98:ab:4a:0f:2e:7f:f5:09:fd:c3:32: ae:4d:79:22:8d:fb:8a:fc:34:3d:01:ff:dc:65:37:03:65:70: cb:55:62:e0:1d:11:b8:21:3a:21:81:80:dd:08:80:f8:57:32: 2e:fe:92:fc:4e:14:67:a1:56:dc:f8:55:5d:64:9a:21:67:b3: 35:8b:b5:6f:2c:30:69:16:a3:e5:88:0f:e2:cb:a5:ec:75:e6: 9c:4e:6b:f1:11:f5:2d:07:cf:49:89:f9:98:21:1a:94:a9:9a: f7:37:cb:4a:88:84:22:e6:11:2d:d7:67:26:dd:80:5f:9a:b5: 3a:c8:d8:98:95:ee:f8:d5:1f:f6:53:39:54:5d:7b:c1:32:e0: 08:27:b8:a9:9d:3c:54:a0:75:3a:4b:cd:e8:00:90:5b:26:4d: 31:d5:c0:82:a6:4d:f9:0e:3d:86:b5:94:5f:80:02:0c:d4:a4: a4:25:5f:09:ce:b9:23:eb:0d:71:e3:03:3e:84:a6:0f:10:7f: 78:16:f6:23:9a:66:a8:af:da:10:f8:2d:f3:3d:4d:5b:4e:c0: c1:56:bf:7b:a3:fd:6c:3c:16:9b:7a:6e:bf:ca:cd:af:8c:da: 66:cf:d5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nFP21QwqrDGCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzMwYTdiMmQtZjMxNi00YTA5LTljODUtMDgyZDg4YzViM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSIH7C+CQzULWkcgCDRwF9FiKXwWBCQ3KjXT YTl5V8MwXsbtDNcQmnxa5cndLSJeCwkewZrt2te4cBjC4+VmRz6+BxdlMMPCEx0o ZMREwhvrKhdt58886DQHdTAXuJrHlS4qLo+rEkaDniIAx4zqqrIGv1SHqYyyrTGD 3I6T2U4U/fINxFVMY9qRVcSD+x/7JPU615L8M3V24bqSU2CIPAfHaQHfpg9G1mEb UVOGVSpjUwk6xiDhiJ4Jl2tecjfiGtpLlAkuR6PadisUjdgd3U4CI9B1nweZjmzd BWPnIIdX3wa9TNNvMyATEl9t2AQWj1P2nfRgRDoJLrb7u/fD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg7la4sJcKLYfQ16fRj4+/MUBBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMGFmOWU2YTctZWMyNi0z Yjg4LThmYTQtOGQzMjU0OTg2ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCkr9fX5DGFrqHgK4e4ifjaNcy4X5vSvDOYq0oPLn/1Cf3DMq5NeSKN +4r8ND0B/9xlNwNlcMtVYuAdEbghOiGBgN0IgPhXMi7+kvxOFGehVtz4VV1kmiFn szWLtW8sMGkWo+WID+LLpex15pxOa/ER9S0Hz0mJ+ZghGpSpmvc3y0qIhCLmES3X ZybdgF+atTrI2JiV7vjVH/ZTOVRde8Ey4AgnuKmdPFSgdTpLzegAkFsmTTHVwIKm TfkOPYa1lF+AAgzUpKQlXwnOuSPrDXHjAz6Epg8Qf3gW9iOaZqiv2hD4LfM9TVtO wMFWv3uj/Ww8Fpt6br/Kza+M2mbP1bg= -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:34 2026 by rpki-client