$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa File: 4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa (raw, json) Hash identifier: zrpLwp3o9D5SwhzV3CtANR4Rra2AORgDItKe1YxZ+0c= Subject key identifier: AD:35:38:98:6A:BA:D3:51:DF:88:ED:23:CA:C2:49:A2:31:28:7E:66 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584E0A700F19D6ABF49EC1B29080 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 14618 IP address blocks: 72.0.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:0f:19:d6:ab:f4:9e:c1:b2:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=1c1fc8fb-1807-4ef3-99e4-e2897fadd441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:d5:a8:4c:65:ea:34:73:dc:d8:e3:81:4c: f6:ea:7f:72:98:5e:3c:9c:56:f7:0c:2a:b5:77:90: b7:3e:e8:05:95:54:b4:6f:9d:c4:91:44:47:d4:82: fb:a9:b4:54:c5:62:b4:5c:ce:88:61:d1:85:05:05: 45:a9:3f:d2:35:79:37:29:e9:58:4a:e3:2d:dd:a2: 89:53:62:37:11:d8:94:83:0b:6f:e0:4c:61:05:13: f5:fa:14:fc:8c:40:cb:fa:3a:1c:58:19:54:08:00: 83:a0:10:aa:07:aa:f3:f3:67:60:4d:5d:3b:30:3d: 57:87:cc:dc:3d:22:47:56:b1:10:8e:0d:4e:16:a4: 53:3d:bb:63:a1:70:24:a9:ae:a8:43:38:58:7d:1f: 35:1a:1f:65:1c:d9:31:d8:a2:32:79:9b:0d:54:b8: 72:29:d8:07:39:94:b6:d9:2b:64:d8:29:31:7a:c4: df:e2:7c:27:22:5f:17:63:78:5e:34:8c:c4:90:95: 41:a5:28:af:5b:fa:08:3f:33:6f:15:4c:1b:f9:f3: ce:24:21:fb:76:2a:0a:46:1b:dd:ff:af:16:2a:07: 1c:c9:02:a1:8b:e2:bb:3a:a7:56:50:bf:17:56:9e: 80:df:4b:13:51:05:9a:c7:fe:58:e0:1c:54:c5:6e: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:38:98:6A:BA:D3:51:DF:88:ED:23:CA:C2:49:A2:31:28:7E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/4a0777b7-4686-3530-89c2-8dfa8f2eb1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:29:5e:c2:81:d7:cf:9e:f4:4e:01:a6:ee:76:07:27:46:9f: 4c:9a:ce:67:38:8c:af:67:df:df:65:26:ec:db:75:cd:c7:bb: 68:a6:73:b9:5b:eb:03:95:bd:85:1b:cd:82:ed:6e:a5:7e:f4: a6:8d:43:94:dc:66:50:c8:8f:3e:4f:8f:85:14:2a:c4:83:28: 82:71:1b:a9:1f:03:8a:b5:d8:98:5b:6f:c1:4f:e4:2e:78:ef: 75:e7:42:8d:11:8a:b4:81:1a:1d:c5:1d:fd:e0:2a:44:6e:2e: ae:88:57:f5:7e:28:50:d5:60:0f:d3:77:5d:70:4b:5d:96:e1: ef:9b:01:c0:7d:a0:04:f1:ef:4d:fe:2a:f3:4f:4b:52:46:46: 93:c2:f3:2a:55:3c:c0:1f:db:96:41:fa:db:cc:ba:9e:a9:c1: 38:66:d4:20:77:b6:f9:73:ee:ee:98:fc:d8:89:30:8a:ab:d2: 24:86:fa:22:2b:d6:2b:b2:e8:66:72:19:66:b5:f0:48:9a:ca: 42:43:c9:0b:6d:01:04:fd:ba:40:bc:67:5f:fb:52:ef:57:75: 21:e6:d0:b1:e5:e9:ec:1a:33:7f:34:9a:b5:d8:8e:44:23:f0: be:a9:bf:14:21:b2:2d:75:fd:8b:0d:cf:34:f5:2c:35:bc:f2: 9b:34:d6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcA8Z1qv0nsGykIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MWMxZmM4ZmItMTgwNy00ZWYzLTk5ZTQtZTI4OTdmYWRkNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmnVqExl6jRz3NjjgUz26n9ymF48nFb3DCq1 d5C3PugFlVS0b53EkURH1IL7qbRUxWK0XM6IYdGFBQVFqT/SNXk3KelYSuMt3aKJ U2I3EdiUgwtv4ExhBRP1+hT8jEDL+jocWBlUCACDoBCqB6rz82dgTV07MD1Xh8zc PSJHVrEQjg1OFqRTPbtjoXAkqa6oQzhYfR81Gh9lHNkx2KIyeZsNVLhyKdgHOZS2 2Stk2CkxesTf4nwnIl8XY3heNIzEkJVBpSivW/oIPzNvFUwb+fPOJCH7dioKRhvd /68WKgccyQKhi+K7OqdWUL8XVp6A30sTUQWax/5Y4BxUxW5dOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK01OJhqutNR34jtI8rCSaIxKH5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvNGEwNzc3YjctNDY4Ni0z NTMwLTg5YzItOGRmYThmMmViMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkpXsKB18+e9E4Bpu52BydGn0yazmc4jK9n399lJuzbdc3Hu2imc7lb 6wOVvYUbzYLtbqV+9KaNQ5TcZlDIjz5Pj4UUKsSDKIJxG6kfA4q12Jhbb8FP5C54 73XnQo0RirSBGh3FHf3gKkRuLq6IV/V+KFDVYA/Td11wS12W4e+bAcB9oATx703+ KvNPS1JGRpPC8ypVPMAf25ZB+tvMup6pwThm1CB3tvlz7u6Y/NiJMIqr0iSG+iIr 1iuy6GZyGWa18EiaykJDyQttAQT9ukC8Z1/7Uu9XdSHm0LHl6ewaM380mrXYjkQj 8L6pvxQhsi11/YsNzzT1LDW88ps01gA= -----END CERTIFICATE-----Generated at Sat Jun 13 09:31:37 2026 by rpki-client