$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa File: 4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa (raw, json) Hash identifier: Je4eKsQm7UIN1UnyQ67i0R/i+hR/1la9PyYrE6ML5WQ= Subject key identifier: 27:EA:D6:86:56:F7:D5:4F:2B:18:C6:F5:40:CD:45:77:8D:6D:B6:60 Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584D55BA3DFE8334391C0F661F80 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 40232 IP address blocks: 69.72.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3d:fe:83:34:39:1c:0f:66:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0cf37b7e-4b15-47a5-ae74-fccb1cd0d114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:84:e5:f4:71:c4:13:3e:ac:3a:8c:81:f4: 33:e9:0e:9f:cc:10:92:50:9a:1e:e4:6f:66:db:4b: 31:77:fd:32:79:84:4f:4c:54:7e:48:08:e2:b4:23: 77:58:bc:41:d6:15:7f:a8:14:3e:e4:c8:de:1f:a0: da:23:92:f9:1d:24:76:a7:a0:10:8f:05:f4:f2:62: 11:32:f3:71:9c:4f:dc:2a:a3:b1:22:90:bc:e0:16: 67:92:5d:37:6d:c2:d4:82:bf:89:54:97:fa:93:c8: f5:b1:f6:af:d1:11:2d:c9:2f:76:a4:ae:a6:b3:cf: 2b:1f:69:1e:a5:27:b6:32:33:1d:46:55:29:12:0a: 68:bc:9d:3d:87:1d:94:00:4b:22:ec:79:6a:83:b4: c6:5e:8f:94:72:f0:c2:f7:6f:e0:a9:55:56:fb:61: 84:20:94:12:cb:6f:15:74:30:89:49:d4:a6:54:b2: b4:79:da:6f:9c:f2:f5:fd:62:20:b7:6c:d9:a7:a0: f7:ca:c2:a8:62:95:5f:44:c1:4a:fd:99:ee:e3:36: 75:be:f4:d1:d1:03:7f:22:b9:6b:e3:38:36:c0:a8: 2b:89:30:56:1c:98:0f:f2:15:be:c2:5c:27:ac:02: ee:ba:27:a8:b4:20:e6:f8:a6:30:ab:95:7f:e1:db: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EA:D6:86:56:F7:D5:4F:2B:18:C6:F5:40:CD:45:77:8D:6D:B6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/4dc41826-c2f5-3673-b947-f97fd3be3e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv4: 69.72.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ba:6d:bc:8d:23:0c:e8:bd:ea:2a:81:d9:9a:44:61:d5:a8: 58:37:c1:af:90:d8:e7:be:5b:d9:2e:b3:32:23:4a:41:aa:91: 66:20:f2:ae:2f:9f:5d:67:ab:a2:7e:24:ba:bb:72:06:bc:ae: 57:25:85:de:04:1a:d6:4e:4c:c2:3c:c6:a5:fe:84:d9:18:1f: 0c:1f:d2:b8:72:60:5a:c1:79:a2:4a:c1:ee:95:ec:0f:2b:d9: ab:3d:ca:9c:f8:80:b3:4b:5f:71:6c:75:c0:fd:1a:b9:ca:b8: 0c:85:ee:df:7a:89:c0:ca:9d:5d:80:4b:13:b1:93:72:eb:05: 64:f1:fb:38:d4:f9:86:bd:59:4d:87:c4:dc:10:39:d8:c9:95: e1:34:fd:3f:28:0e:fe:da:27:08:17:de:36:40:53:b5:e3:cb: ad:16:ed:77:f8:a4:f7:c4:6c:d4:55:d2:d8:8e:98:2f:f9:b5: 90:03:2d:e3:09:88:d2:4d:76:45:92:72:10:60:06:66:67:2e: 82:d3:5e:3b:fd:3f:2c:bf:d7:8d:b3:74:85:5f:3e:17:c4:c4: fd:d4:1f:3c:7a:ac:e6:3d:8c:6f:e5:42:12:7c:eb:68:80:a1: 65:f7:81:0c:4d:39:24:2e:b8:fe:01:6b:35:f4:89:0f:eb:74: 7c:f4:d6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj3+gzQ5HA9mH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGNmMzdiN2UtNGIxNS00N2E1LWFlNzQtZmNjYjFjZDBkMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy6E5fRxxBM+rDqMgfQz6Q6fzBCSUJoe5G9m 20sxd/0yeYRPTFR+SAjitCN3WLxB1hV/qBQ+5MjeH6DaI5L5HSR2p6AQjwX08mIR MvNxnE/cKqOxIpC84BZnkl03bcLUgr+JVJf6k8j1sfav0REtyS92pK6ms88rH2ke pSe2MjMdRlUpEgpovJ09hx2UAEsi7Hlqg7TGXo+UcvDC92/gqVVW+2GEIJQSy28V dDCJSdSmVLK0edpvnPL1/WIgt2zZp6D3ysKoYpVfRMFK/Znu4zZ1vvTR0QN/Irlr 4zg2wKgriTBWHJgP8hW+wlwnrALuuieotCDm+KYwq5V/4duONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfq1oZW99VPKxjG9UDNRXeNbbZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvNGRjNDE4MjYtYzJmNS0z NjczLWI5NDctZjk3ZmQzYmUzZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa6bbyNIwzoveoqgdmaRGHVqFg3wa+Q2Oe+W9kuszIjSkGqkWYg8q4v n11nq6J+JLq7cga8rlclhd4EGtZOTMI8xqX+hNkYHwwf0rhyYFrBeaJKwe6V7A8r 2as9ypz4gLNLX3FsdcD9GrnKuAyF7t96icDKnV2ASxOxk3LrBWTx+zjU+Ya9WU2H xNwQOdjJleE0/T8oDv7aJwgX3jZAU7Xjy60W7Xf4pPfEbNRV0tiOmC/5tZADLeMJ iNJNdkWSchBgBmZnLoLTXjv9Pyy/142zdIVfPhfExP3UHzx6rOY9jG/lQhJ862iA oWX3gQxNOSQuuP4BazX0iQ/rdHz01s0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:17:44 2026 by rpki-client