$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa File: 1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa (raw, json) Hash identifier: B5zn7ugW+pqhiqEdO/rfJU0+bdZyxsh8OIAzucmFtZI= Subject key identifier: 0C:74:C8:71:E2:28:FD:7F:0D:F9:F1:92:C9:62:08:E2:51:77:E5:AF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584E296F0FC6DEEE377F23207F80 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 54032 IP address blocks: 72.233.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:0f:c6:de:ee:37:7f:23:20:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=0c602943-6547-43d1-a53b-b753e93474b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b6:e6:1e:a3:a7:76:93:d6:9a:cd:af:76:05: b3:ff:2a:c5:e8:15:34:13:6c:fa:ec:77:6a:bf:e9: 45:44:a9:01:e3:f7:d2:3f:f6:77:a1:64:52:c0:c5: 65:94:43:14:0c:22:0e:be:64:c6:3b:81:05:e4:a4: a8:09:64:11:dc:a6:57:da:7f:80:aa:53:55:d2:cf: 8e:39:18:5b:6f:6e:32:4f:ce:4e:33:fa:57:1e:35: 05:54:91:84:63:99:93:8f:23:07:e9:28:e5:b1:6f: 46:4d:ec:af:fc:a0:d8:ba:1a:f3:d8:5f:d3:1c:08: 68:80:7e:88:7c:e3:de:47:9a:1a:05:39:df:a3:73: 0b:d9:29:ac:dd:65:f6:fc:fe:a7:c9:a8:12:8b:83: 65:48:89:a9:2e:45:eb:f5:99:74:82:a3:b9:52:b4: bf:49:ff:0e:64:ca:23:af:5d:87:2d:86:ca:df:95: 56:88:2e:db:38:da:d8:ca:91:64:06:4b:b3:23:73: ff:6c:94:dd:21:ac:49:e0:6b:c6:45:5a:9a:08:40: 8c:74:ca:0e:ee:5c:d0:b1:2b:79:f9:38:b5:29:3e: 29:61:d3:a7:aa:35:1a:09:d9:10:b9:28:98:59:e3: 99:9a:93:a1:bb:af:7a:12:88:ab:fb:54:d1:c0:fb: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:74:C8:71:E2:28:FD:7F:0D:F9:F1:92:C9:62:08:E2:51:77:E5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:63:42:be:d7:b6:72:72:28:a2:86:2c:19:2c:87:64:9d:0e: 2f:02:81:0f:10:8c:ea:0b:a6:d7:40:14:75:b7:20:d2:30:f1: d5:e3:cb:52:26:ee:db:df:39:4e:78:1b:09:de:72:08:7e:14: f2:54:86:f6:15:03:f1:3c:ce:82:10:d6:c5:fe:0d:56:40:03: a2:68:a1:6d:8a:81:9f:91:4b:d6:b0:81:84:ae:23:e3:fa:82: 62:63:59:e8:a9:04:61:6d:3f:1b:1f:8d:ee:80:41:5a:75:90: 0c:e7:01:06:c5:73:1c:36:b3:65:70:f3:9f:8c:eb:d2:dc:37: 76:7a:0e:be:2e:cc:6a:78:7c:da:91:74:d1:44:4f:47:21:09: 71:3c:c7:c5:b4:b7:7f:1b:47:74:9b:b3:11:e0:cf:f2:73:6a: b8:2f:e2:31:bf:20:09:97:66:89:f4:30:1d:a3:40:f7:b2:67: 12:48:aa:6a:ee:4f:89:72:7c:4b:59:d8:f1:a5:5e:22:f9:f1: 75:56:3d:09:eb:37:77:c6:3d:63:ca:84:6b:d6:e1:92:46:75: 16:94:4b:a7:08:5f:dd:ff:90:06:73:6c:d1:51:b8:a6:ee:33: 75:5a:59:59:96:b7:62:2d:2b:de:57:49:95:9c:46:73:13:3d: 23:a2:e5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbw/G3u43fyMgf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk MGM2MDI5NDMtNjU0Ny00M2QxLWE1M2ItYjc1M2U5MzQ3NGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLbmHqOndpPWms2vdgWz/yrF6BU0E2z67Hdq v+lFRKkB4/fSP/Z3oWRSwMVllEMUDCIOvmTGO4EF5KSoCWQR3KZX2n+AqlNV0s+O ORhbb24yT85OM/pXHjUFVJGEY5mTjyMH6SjlsW9GTeyv/KDYuhrz2F/THAhogH6I fOPeR5oaBTnfo3ML2Sms3WX2/P6nyagSi4NlSImpLkXr9Zl0gqO5UrS/Sf8OZMoj r12HLYbK35VWiC7bONrYypFkBkuzI3P/bJTdIaxJ4GvGRVqaCECMdMoO7lzQsSt5 +Ti1KT4pYdOnqjUaCdkQuSiYWeOZmpOhu696Eoir+1TRwPvNlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx0yHHiKP1/DfnxksliCOJRd+WvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMWE1MjI5YjQtMDZiOS0z MWM2LThjNDEtOWNjYzhkMDc2MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJjQr7XtnJyKKKGLBksh2SdDi8CgQ8QjOoLptdAFHW3INIw8dXjy1Im 7tvfOU54Gwnecgh+FPJUhvYVA/E8zoIQ1sX+DVZAA6JooW2KgZ+RS9awgYSuI+P6 gmJjWeipBGFtPxsfje6AQVp1kAznAQbFcxw2s2Vw85+M69LcN3Z6Dr4uzGp4fNqR dNFET0chCXE8x8W0t38bR3SbsxHgz/Jzargv4jG/IAmXZon0MB2jQPeyZxJIqmru T4lyfEtZ2PGlXiL58XVWPQnrN3fGPWPKhGvW4ZJGdRaUS6cIX93/kAZzbNFRuKbu M3VaWVmWt2ItK95XSZWcRnMTPSOi5Wg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:13:58 2026 by rpki-client