$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa File: 5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa (raw, json) Hash identifier: xNNaOp5epaOsiJGDsGwo5Ps3jb2uga1F54viFRAJqEM= Subject key identifier: 46:B3:69:76:1A:FF:73:33:B2:19:93:82:C7:19:DB:AC:79:23:F6:85 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584C69F15ACB860F258BA0F86500 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa Signing time: Sun 04 Jan 2026 14:00:38 +0000 ROA not before: Sun 04 Jan 2026 14:00:38 +0000 ROA not after: Sat 04 Apr 2026 13:00:38 +0000 asID: 54032 IP address blocks: 72.233.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:f1:5a:cb:86:0f:25:8b:a0:f8:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jan 4 14:00:38 2026 GMT Not After : Apr 4 13:00:38 2026 GMT Subject: CN=f979d0b2-9a42-4a00-9d25-6cb49b508860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:eb:3e:97:42:2d:40:26:41:56:e3:db:15: f8:16:ba:46:62:ad:e3:9a:6f:ba:e2:d8:78:d1:fd: f7:90:08:10:6a:d6:8a:19:d7:ea:5b:f2:e2:a1:2a: 26:52:ed:3d:e0:85:45:aa:5a:af:c2:3b:da:89:ef: 02:05:9c:6c:8b:64:6d:7a:31:47:52:0b:98:c2:93: 56:ec:84:19:17:90:b7:b7:7a:0e:65:86:9f:e2:e0: 38:a2:eb:60:04:00:8c:8a:38:30:13:b8:e5:4c:4d: 68:ad:61:31:d2:47:75:b3:7e:d2:b0:ab:dc:df:74: 2a:5f:0e:3e:62:68:f8:b4:65:5e:32:8a:66:3b:87: f5:cc:09:aa:22:31:78:b4:13:99:8d:2e:e7:03:8c: 0c:2c:6f:1d:68:a0:02:de:42:36:76:9e:3d:51:f2: cf:38:8b:1d:44:71:67:bd:6e:8d:6a:a4:ce:29:c8: e2:49:1c:0e:be:d0:f5:f0:24:de:02:04:68:aa:d0: 92:57:a9:52:47:7b:17:eb:c0:5e:1a:60:7c:2e:b9: 53:06:52:3f:ea:42:91:90:ea:44:03:ef:9d:4a:7f: 88:dd:bf:82:9f:6e:ee:cf:ca:26:dd:de:95:7a:ac: 78:82:b6:69:9b:bb:bd:fb:72:f6:46:29:29:7e:29: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B3:69:76:1A:FF:73:33:B2:19:93:82:C7:19:DB:AC:79:23:F6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5cd6e8ba-29d2-3d88-8c99-331e083c3358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2b:62:6d:34:da:44:b3:a4:54:b1:63:25:ed:98:48:e4:c2: b0:6c:94:89:02:07:b6:98:ac:85:7c:13:2f:69:28:0b:64:12: 83:0d:2e:ab:16:2f:88:30:f7:cd:43:37:d8:9d:f8:c9:e0:35: a3:c4:b2:57:c7:cc:42:13:3c:b0:af:e8:63:b2:0b:d4:d3:0f: 34:69:fb:87:85:74:1d:7e:9e:a2:02:3f:c0:26:6f:90:7b:78: e8:ff:16:7d:9d:cb:11:ba:0c:8a:0d:12:c2:0d:78:95:c1:5f: 3a:41:c6:9e:bd:f2:65:1a:61:2b:3e:da:60:f4:e0:e2:16:df: 9f:78:c3:23:12:b1:d7:1a:da:e0:43:f6:f3:a4:22:e8:15:6c: c6:81:14:9e:55:07:e6:c1:e7:68:4e:16:e4:ee:37:54:89:7a: 16:1d:df:28:c6:2a:94:e9:b3:c0:3c:e3:c4:62:7b:9e:b5:bd: f2:90:21:e1:49:37:22:0b:b2:be:65:a7:a5:39:12:e6:4d:da: 84:91:ba:da:ad:18:e7:78:59:39:05:04:c0:9b:8a:69:ee:29: d0:10:2f:83:b0:df:45:08:d3:28:b3:dd:f0:6e:1e:2e:7b:d7: 62:24:9e:57:88:89:a1:e2:0f:e5:8f:a3:15:12:4a:bf:3c:f0: 5c:5e:e6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8VrLhg8li6D4ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk Zjk3OWQwYjItOWE0Mi00YTAwLTlkMjUtNmNiNDliNTA4ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDrPpdCLUAmQVbj2xX4FrpGYq3jmm+64th4 0f33kAgQataKGdfqW/LioSomUu094IVFqlqvwjvaie8CBZxsi2RtejFHUguYwpNW 7IQZF5C3t3oOZYaf4uA4outgBACMijgwE7jlTE1orWEx0kd1s37SsKvc33QqXw4+ Ymj4tGVeMopmO4f1zAmqIjF4tBOZjS7nA4wMLG8daKAC3kI2dp49UfLPOIsdRHFn vW6NaqTOKcjiSRwOvtD18CTeAgRoqtCSV6lSR3sX68BeGmB8LrlTBlI/6kKRkOpE A++dSn+I3b+Cn27uz8om3d6Veqx4grZpm7u9+3L2RikpfikWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEazaXYa/3MzshmTgscZ26x5I/aFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNWNkNmU4YmEtMjlkMi0z ZDg4LThjOTktMzMxZTA4M2MzMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSOmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQrYm002kSzpFSxYyXtmEjkwrBslIkCB7aYrIV8Ey9pKAtkEoMNLqsW L4gw981DN9id+MngNaPEslfHzEITPLCv6GOyC9TTDzRp+4eFdB1+nqICP8Amb5B7 eOj/Fn2dyxG6DIoNEsINeJXBXzpBxp698mUaYSs+2mD04OIW3594wyMSsdca2uBD 9vOkIugVbMaBFJ5VB+bB52hOFuTuN1SJehYd3yjGKpTps8A848Rie561vfKQIeFJ NyILsr5lp6U5EuZN2oSRutqtGOd4WTkFBMCbimnuKdAQL4Ow30UI0yiz3fBuHi57 12IknleIiaHiD+WPoxUSSr888Fxe5vg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:04:44 2026 by rpki-client