$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa File: 3f610126-c000-34a1-8bf7-08e6484877a2.roa (raw, json) Hash identifier: foB1hl/HYo0svD7zRAWl3bPq1628P9WYea5YaunFhDg= Subject key identifier: DC:F6:11:D7:88:71:6A:39:F0:05:D3:EA:F8:D8:6E:F7:DD:18:48:BF Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584D67DFB25E20C87B6EF1DD5800 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 22709 IP address blocks: 72.11.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b2:5e:20:c8:7b:6e:f1:dd:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=b7204852-ba91-4b3a-93e9-11c4aa277ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a9:43:b0:50:12:56:ea:b3:cd:f7:57:4d:a4: b5:3d:ac:25:a2:25:09:b1:b1:35:04:e8:18:d8:91: 33:a9:83:6c:59:f1:c9:93:e7:dd:e9:f9:f7:64:40: 54:26:1c:4b:ad:d8:88:0c:2d:13:30:cc:89:5d:75: 6f:f3:19:5a:fa:04:20:36:84:90:96:91:04:ac:b1: 7a:8d:15:36:fa:8e:2d:f4:e4:1c:86:36:32:39:18: 65:6c:2b:03:dd:71:f3:35:4b:98:51:72:1f:e8:1c: bf:9c:3e:fa:8c:ca:b1:9b:47:9a:f6:22:d3:b3:31: f7:55:cb:bd:82:f4:92:e3:d9:6f:49:fb:a0:3d:83: e0:01:e8:22:d6:33:5f:9e:9e:a0:b2:08:54:16:d3: 89:ca:de:ac:b3:4c:a6:89:d6:af:98:e9:10:ff:09: a4:f4:40:82:d4:04:55:c0:41:4a:a3:34:0b:a6:b9: f3:97:ae:8f:7a:28:10:6e:a4:49:cb:99:93:3e:9f: 64:2a:82:6d:cc:0a:8a:46:25:03:9e:b9:89:e7:49: ae:35:cf:f1:c8:0a:cf:4d:48:fb:a7:eb:2d:f5:4d: c4:b6:0b:6b:e4:38:be:e9:68:12:bc:2b:ab:38:a9: 1c:2f:55:47:e6:78:ac:a7:15:c8:d6:c4:0f:60:9f: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F6:11:D7:88:71:6A:39:F0:05:D3:EA:F8:D8:6E:F7:DD:18:48:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:79:b9:72:ab:e7:da:6c:b0:be:20:81:d7:b4:9e:a8:f8:c6: b9:bb:08:f0:58:3c:af:a9:7a:b0:b8:8c:e9:72:d1:e5:ef:f4: 4c:3f:8b:99:d7:2a:60:fd:15:a0:84:ae:e7:4b:1d:32:27:b4: b1:78:d5:1b:82:69:02:f8:c5:43:1a:e2:f5:ff:fb:12:d9:5f: a4:f5:67:25:e4:73:fe:7b:d1:b9:0e:11:61:d9:0a:c9:0e:2c: 64:56:11:81:24:a5:51:3d:f1:8b:ab:a2:bd:e4:f0:64:0f:19: 91:62:25:cf:fa:87:fa:9d:b6:d4:65:3b:62:10:b7:b8:d7:cf: a1:7a:fe:7b:f6:98:15:ac:34:60:bc:02:ce:2b:b9:7a:8b:0f: c6:be:fa:98:68:56:d3:01:92:88:60:06:08:15:c9:a4:83:2d: 7a:af:0f:53:22:1b:16:fe:c1:f6:54:05:9e:e4:30:38:ed:19: 01:1f:e9:e8:54:8e:ce:6f:af:fc:ab:dc:21:b1:8b:17:a0:41: ce:e3:6d:8a:5d:34:6b:c0:09:13:93:2e:54:9c:95:b6:ac:68: eb:0d:7e:50:87:c4:94:1a:2d:ad:b6:5b:d9:72:cf:d8:04:ce: f0:a8:9e:ba:fc:05:99:37:a8:c0:b2:68:7b:27:0e:c3:f1:7f: f7:67:81:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37JeIMh7bvHdWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk YjcyMDQ4NTItYmE5MS00YjNhLTkzZTktMTFjNGFhMjc3Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqlDsFASVuqzzfdXTaS1PawloiUJsbE1BOgY 2JEzqYNsWfHJk+fd6fn3ZEBUJhxLrdiIDC0TMMyJXXVv8xla+gQgNoSQlpEErLF6 jRU2+o4t9OQchjYyORhlbCsD3XHzNUuYUXIf6By/nD76jMqxm0ea9iLTszH3Vcu9 gvSS49lvSfugPYPgAegi1jNfnp6gsghUFtOJyt6ss0ymidavmOkQ/wmk9ECC1ARV wEFKozQLprnzl66PeigQbqRJy5mTPp9kKoJtzAqKRiUDnrmJ50muNc/xyArPTUj7 p+st9U3Etgtr5Di+6WgSvCurOKkcL1VH5nispxXI1sQPYJ/uxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz2EdeIcWo58AXT6vjYbvfdGEi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvM2Y2MTAxMjYtYzAwMC0z NGExLThiZjctMDhlNjQ4NDg3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB5uXKr59pssL4ggde0nqj4xrm7CPBYPK+perC4jOly0eXv9Ew/i5nX KmD9FaCErudLHTIntLF41RuCaQL4xUMa4vX/+xLZX6T1ZyXkc/570bkOEWHZCskO LGRWEYEkpVE98Yuror3k8GQPGZFiJc/6h/qdttRlO2IQt7jXz6F6/nv2mBWsNGC8 As4ruXqLD8a++phoVtMBkohgBggVyaSDLXqvD1MiGxb+wfZUBZ7kMDjtGQEf6ehU js5vr/yr3CGxixegQc7jbYpdNGvACROTLlSclbasaOsNflCHxJQaLa22W9lyz9gE zvConrr8BZk3qMCyaHsnDsPxf/dngWA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:52 2026 by rpki-client