$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa File: 31c8bc35-faa3-3035-9823-b218dbe0b84a.roa (raw, json) Hash identifier: 4nE6C/jCMdhYlpBBrznM6/7SfC0yulk3OroxcELor8w= Subject key identifier: 43:76:59:D6:2D:74:78:1E:A5:D6:80:DC:92:46:80:DE:F7:80:FD:96 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584E253F02BEB318B1A36FC43DC0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 54032 IP address blocks: 72.233.142.0/24 maxlen: 24 72.233.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:02:be:b3:18:b1:a3:6f:c4:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=e98cd6ab-86a4-4f5b-8adb-3c234581eff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:17:b7:a9:a3:dd:ad:3c:5a:86:d5:e8:3b: ee:70:6b:76:49:bb:4a:f8:f2:02:bb:a4:df:57:5a: 48:39:e5:3b:3b:64:03:b1:6a:0c:64:f5:aa:73:6f: 89:c8:c8:0f:36:04:2d:ed:5d:e9:df:cc:3c:9a:66: c1:b6:9f:93:09:17:42:25:15:2d:4f:18:86:a9:b6: f6:4a:ec:19:39:94:44:c4:ad:d4:e4:7a:d2:05:cb: 97:69:bb:94:c1:4a:1a:02:67:3f:cd:1b:d3:7d:e9: ca:57:4a:a7:63:7d:d0:c0:98:88:4c:a7:f1:8f:4b: e7:cf:b8:7e:bd:e2:d6:ee:a2:fa:80:1c:33:c7:17: ed:80:90:41:52:f5:c2:8d:8b:ba:0a:b7:1c:88:8f: 4e:f2:0a:16:1f:92:ad:9f:71:27:6f:96:d8:31:39: f1:ff:52:5c:e1:12:93:bf:39:7a:83:39:68:b0:75: 7b:38:11:10:f6:7e:ed:c9:65:91:66:bd:f4:b7:2d: 5a:2a:73:6f:81:22:5b:c3:d2:fa:f1:73:a7:b1:d7: 09:a6:44:9f:38:f9:87:04:b3:17:37:a0:5b:a8:3f: 17:46:e1:a7:95:e2:14:3f:ee:e0:ec:e9:b9:7e:45: 07:c2:66:32:bb:a9:b3:64:6f:70:10:a6:d4:72:aa: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:59:D6:2D:74:78:1E:A5:D6:80:DC:92:46:80:DE:F7:80:FD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/31c8bc35-faa3-3035-9823-b218dbe0b84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2b:33:df:0f:7a:ed:54:17:b7:4e:40:3b:4b:3a:05:2c:9b: 23:0e:c4:20:76:0b:a3:42:b2:05:51:6c:d0:15:77:9e:4b:80: 3f:2c:05:55:d9:8d:aa:70:d3:b9:b6:75:44:50:34:2c:c4:b0: 93:ee:41:0d:a4:26:a1:9b:e2:e0:f9:af:95:6f:c0:ca:b7:64: 4f:97:77:fd:07:58:73:4c:55:c7:1f:91:01:e9:78:64:9a:bf: 07:e5:21:ea:5e:75:ca:9b:73:ad:ad:21:c3:0e:68:9c:cb:55: 4c:b3:f1:5f:4b:ee:a8:d0:65:b8:68:3f:9a:44:ad:60:a2:1a: a9:9a:06:9f:b8:24:10:42:08:82:e9:c9:da:22:66:57:8a:73: 3a:fa:68:8f:6d:1a:aa:d4:fc:a1:a1:42:75:81:da:47:c6:2e: a4:19:c0:b6:5f:36:09:1a:10:81:9b:a3:8c:2c:01:cd:30:4e: 1c:4b:53:3d:e4:99:52:d2:a6:d6:51:f5:fe:82:81:2e:b7:84: 25:06:d5:81:36:76:b4:dc:d0:37:0f:67:1c:67:bc:27:a8:ce: d9:5c:17:94:cc:37:f0:e6:76:5c:77:64:9a:90:4d:96:be:c3: c0:1c:19:ed:e9:eb:69:4e:7d:c7:28:d4:57:c0:af:38:6f:d3: 49:1d:6c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwK+sxixo2/EPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk ZTk4Y2Q2YWItODZhNC00ZjViLThhZGItM2MyMzQ1ODFlZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskMXt6mj3a08WobV6DvucGt2SbtK+PICu6Tf V1pIOeU7O2QDsWoMZPWqc2+JyMgPNgQt7V3p38w8mmbBtp+TCRdCJRUtTxiGqbb2 SuwZOZRExK3U5HrSBcuXabuUwUoaAmc/zRvTfenKV0qnY33QwJiITKfxj0vnz7h+ veLW7qL6gBwzxxftgJBBUvXCjYu6CrcciI9O8goWH5Ktn3Enb5bYMTnx/1Jc4RKT vzl6gzlosHV7OBEQ9n7tyWWRZr30ty1aKnNvgSJbw9L68XOnsdcJpkSfOPmHBLMX N6BbqD8XRuGnleIUP+7g7Om5fkUHwmYyu6mzZG9wEKbUcqrQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN2WdYtdHgepdaA3JJGgN73gP2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMzFjOGJjMzUtZmFhMy0z MDM1LTk4MjMtYjIxOGRiZTBiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSOmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGArM98Peu1UF7dOQDtLOgUsmyMOxCB2C6NCsgVRbNAVd55LgD8sBVXZ japw07m2dURQNCzEsJPuQQ2kJqGb4uD5r5VvwMq3ZE+Xd/0HWHNMVccfkQHpeGSa vwflIepedcqbc62tIcMOaJzLVUyz8V9L7qjQZbhoP5pErWCiGqmaBp+4JBBCCILp ydoiZleKczr6aI9tGqrU/KGhQnWB2kfGLqQZwLZfNgkaEIGbo4wsAc0wThxLUz3k mVLSptZR9f6CgS63hCUG1YE2drTc0DcPZxxnvCeoztlcF5TMN/Dmdlx3ZJqQTZa+ w8AcGe3p62lOfcco1FfArzhv00kdbGg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:13:53 2026 by rpki-client