$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json) Hash identifier: Off7M3L+LmEAMJ0BY66f06vpe1KXnJaikZwNLg+vp28= Subject key identifier: DD:5E:29:BC:F6:B7:54:7E:3C:66:85:FC:99:16:E7:83:8D:D4:D5:EF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584E296F0BB68E062DFC7CB4ACE0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 54032 IP address blocks: 72.233.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:0b:b6:8e:06:2d:fc:7c:b4:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=9bd3b676-87d6-4d58-b9b9-873a5c3a2874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:bf:8d:d2:17:51:7d:39:2d:a0:95:f9:0b: 17:95:40:d9:6b:b8:6e:bb:8a:58:47:93:e4:b7:53: 40:d1:a2:9b:2f:d4:ef:ee:e5:66:f0:98:d5:d2:ff: 82:c7:66:75:67:38:e8:25:d7:ab:4f:b4:12:b8:27: d5:f2:5e:cb:ee:e7:1f:be:19:fa:72:a4:dd:c8:f3: 42:25:11:b3:d4:af:7c:46:0d:65:43:bd:c5:4a:d8: a7:79:d5:59:ca:4a:c0:33:8c:b4:d8:30:af:02:30: 40:83:42:9a:b8:eb:16:cc:03:1d:87:b8:79:73:36: 8b:9a:9f:99:cf:76:bd:4b:d4:dc:48:fc:1a:5e:16: bb:bf:02:fc:ff:b7:cf:04:c1:b3:82:f2:9b:fc:c6: ba:1f:30:fa:9e:8a:08:18:9a:2b:62:5a:cc:81:c0: 63:bf:f3:07:4d:a2:b9:89:ec:4a:d4:3d:70:49:83: 17:d9:01:bf:21:e2:16:67:90:46:f5:4e:71:e7:70: 9b:01:7f:45:02:21:5b:63:1f:d3:21:7a:ea:a4:b4: c3:11:b3:cb:f7:58:ad:cd:8a:25:67:6b:67:53:0c: 8c:78:6a:27:d4:5c:06:c7:84:ac:d8:7e:be:10:f0: e9:ef:88:27:35:20:ae:30:e3:bd:0a:39:e6:b4:b9: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:29:BC:F6:B7:54:7E:3C:66:85:FC:99:16:E7:83:8D:D4:D5:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:16:e5:44:1b:92:dc:df:b3:f7:f0:c2:49:1f:81:50:00:35: 49:bb:67:82:00:ac:d9:83:36:8c:85:bd:8d:80:30:88:05:c4: 84:5c:43:1c:45:ce:60:79:36:54:ac:cc:e1:56:59:62:18:43: 71:ab:fc:80:0a:aa:6c:0d:ff:48:04:79:f6:e6:44:be:bd:bb: 57:5b:d5:ac:54:21:51:af:85:9c:fb:d7:0f:8a:04:92:0f:dc: 6a:5a:dd:44:6c:82:79:4e:77:54:d7:79:fb:ad:53:1d:de:08: c9:a5:ce:45:36:f4:25:bf:80:5e:fd:18:3c:90:8e:eb:95:4e: c4:a5:47:13:8b:f8:fb:74:7c:95:7b:78:42:2c:b4:0b:43:67: be:42:06:53:63:cc:72:65:9a:1d:21:a5:04:6e:aa:25:f6:2a: 7b:a6:21:76:6f:40:bb:aa:c4:d8:54:98:2a:62:29:1f:50:a6: e6:08:9a:42:06:eb:58:43:6d:a1:04:dd:75:38:30:82:31:92: 12:9e:76:17:15:51:0d:f5:11:1b:78:0f:ba:70:80:14:11:26: 3c:24:58:84:34:9c:f8:fe:94:73:c1:e1:8c:ef:5e:54:68:1d: b8:e7:9f:8c:67:c9:fe:27:38:f2:71:79:ec:40:38:a2:bc:d1: 6e:98:f7:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbwu2jgYt/Hy0rOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk OWJkM2I2NzYtODdkNi00ZDU4LWI5YjktODczYTVjM2EyODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQm/jdIXUX05LaCV+QsXlUDZa7huu4pYR5Pk t1NA0aKbL9Tv7uVm8JjV0v+Cx2Z1ZzjoJderT7QSuCfV8l7L7ucfvhn6cqTdyPNC JRGz1K98Rg1lQ73FStinedVZykrAM4y02DCvAjBAg0KauOsWzAMdh7h5czaLmp+Z z3a9S9TcSPwaXha7vwL8/7fPBMGzgvKb/Ma6HzD6nooIGJorYlrMgcBjv/MHTaK5 iexK1D1wSYMX2QG/IeIWZ5BG9U5x53CbAX9FAiFbYx/TIXrqpLTDEbPL91itzYol Z2tnUwyMeGon1FwGx4Ss2H6+EPDp74gnNSCuMOO9CjnmtLmWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1eKbz2t1R+PGaF/JkW54ON1NXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDI2OTVhMWEtNzkwNS0z MmMzLTgzMDUtNmE5YzU3OWFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAW5UQbktzfs/fwwkkfgVAANUm7Z4IArNmDNoyFvY2AMIgFxIRcQxxF zmB5NlSszOFWWWIYQ3Gr/IAKqmwN/0gEefbmRL69u1db1axUIVGvhZz71w+KBJIP 3Gpa3URsgnlOd1TXefutUx3eCMmlzkU29CW/gF79GDyQjuuVTsSlRxOL+Pt0fJV7 eEIstAtDZ75CBlNjzHJlmh0hpQRuqiX2KnumIXZvQLuqxNhUmCpiKR9QpuYImkIG 61hDbaEE3XU4MIIxkhKedhcVUQ31ERt4D7pwgBQRJjwkWIQ0nPj+lHPB4YzvXlRo Hbjnn4xnyf4nOPJxeexAOKK80W6Y98g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:13:49 2026 by rpki-client