$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa File: 40777e71-9872-3a63-9fd0-6b2abc085644.roa (raw, json) Hash identifier: qGmmzcrxwh96AIF2gH/WhmRyuqW8b2qG1TMqrELzNcE= Subject key identifier: C4:1E:A3:18:BE:C8:A9:5C:9D:C1:C1:B9:60:5C:8A:B6:92:D8:70:EE Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584D5234F5125DB036C05FD3B300 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa Signing time: Sat 28 Mar 2026 18:44:34 +0000 ROA not before: Sat 28 Mar 2026 18:44:34 +0000 ROA not after: Wed 03 Jun 2026 15:40:47 +0000 asID: 397772 IP address blocks: 72.59.172.0/22 maxlen: 24 72.59.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f5:12:5d:b0:36:c0:5f:d3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Mar 28 18:44:34 2026 GMT Not After : Jun 3 15:40:47 2026 GMT Subject: CN=0c69838f-7d08-44a8-a98d-88eca156e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:6a:87:92:91:40:bb:3c:fb:2a:2e:7c:6a: 4a:df:57:a3:53:c6:cc:4e:49:be:25:24:64:d5:8c: 27:49:ca:4e:c6:e2:f0:bb:d6:e4:2d:ae:63:2c:01: 0c:83:14:a4:14:13:3c:dd:1c:1a:3b:a1:ad:ab:9b: e8:bf:99:e4:84:b1:a0:07:c4:ac:d3:af:d2:17:53: 26:45:56:97:f5:94:ba:01:60:15:af:3c:d4:e8:22: af:0c:93:99:6d:32:ff:aa:cc:5b:dd:49:15:42:6f: bf:78:62:96:20:1c:f7:46:6a:a2:bc:ce:02:a7:d2: b6:58:e5:64:5f:b3:93:e3:c4:be:cb:a3:63:58:f0: b6:fa:c7:20:02:a9:d3:8e:2e:b1:ba:39:b3:cf:d8: c8:8e:57:06:83:ff:ea:a0:6f:a7:84:ec:6c:80:f5: f0:b6:03:c1:64:dc:17:57:b5:40:df:cd:44:ef:e8: 96:78:73:82:a4:83:b1:5a:02:01:3d:d2:6d:85:d7: 04:85:74:d1:5b:00:bd:b0:cf:65:c6:ff:fa:39:ae: 84:07:c3:5f:f8:4e:38:71:77:43:f9:04:d1:4c:59: d5:54:f5:e1:87:53:9e:c1:59:e2:21:dd:85:3a:30: b2:14:b6:07:5a:8e:e3:b6:9d:e7:d0:20:66:60:8e: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:A3:18:BE:C8:A9:5C:9D:C1:C1:B9:60:5C:8A:B6:92:D8:70:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/40777e71-9872-3a63-9fd0-6b2abc085644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.172.0/22 72.59.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d1:8c:f7:65:8a:c0:03:bb:bf:ca:12:2e:ec:2a:63:dc:ac: bf:1f:c2:ce:bf:8d:27:e8:0d:31:b5:9c:70:a9:63:68:60:29: 31:d0:5a:85:0b:57:0c:6f:8e:6e:30:1b:4c:88:fd:d5:ce:74: ce:81:35:70:fa:e7:e7:67:10:88:84:13:b2:6d:8a:d8:fd:7d: cd:96:ce:e0:2a:41:b4:be:e9:2d:07:71:af:ee:6c:7a:51:b2: fc:fa:cb:37:3c:a8:82:e5:d2:29:f3:70:7c:21:87:47:f9:1a: 79:d0:08:ab:1c:2b:64:36:37:8b:b9:26:70:49:e2:74:46:76: ee:7a:f7:5d:ac:ae:cc:69:21:e1:b3:7d:3c:cf:39:e4:70:c6: 4f:55:6b:15:7a:3e:85:27:a8:7b:64:98:c7:43:a1:84:57:da: 02:de:1f:aa:3f:7c:9f:12:15:82:5b:58:85:2e:e1:c8:67:e7: b1:07:f1:32:c6:76:0b:9c:91:3a:d0:8e:da:85:07:e7:b0:41: 47:a2:92:f0:a2:96:b0:07:84:b0:88:60:33:27:02:63:32:29: db:b1:82:cb:7f:98:f6:ff:ac:a0:a7:5d:1f:fd:67:09:fe:67: cb:c3:47:a9:b0:e7:e0:c7:64:cf:3f:d1:61:4c:18:53:47:be: 4b:9a:de:60 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPUSXbA2wF/TswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDMyODE4NDQzNFoXDTI2MDYwMzE1NDA0N1owLzEtMCsGA1UEAxMk MGM2OTgzOGYtN2QwOC00NGE4LWE5OGQtODhlY2ExNTZlOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM1qh5KRQLs8+youfGpK31ejU8bMTkm+JSRk 1YwnScpOxuLwu9bkLa5jLAEMgxSkFBM83RwaO6Gtq5vov5nkhLGgB8Ss06/SF1Mm RVaX9ZS6AWAVrzzU6CKvDJOZbTL/qsxb3UkVQm+/eGKWIBz3RmqivM4Cp9K2WOVk X7OT48S+y6NjWPC2+scgAqnTji6xujmzz9jIjlcGg//qoG+nhOxsgPXwtgPBZNwX V7VA381E7+iWeHOCpIOxWgIBPdJthdcEhXTRWwC9sM9lxv/6Oa6EB8Nf+E44cXdD +QTRTFnVVPXhh1OewVniId2FOjCyFLYHWo7jtp3n0CBmYI4T9QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMQeoxi+yKlcncHBuWBciraS2HDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvNDA3NzdlNzEtOTg3Mi0z YTYzLTlmZDAtNmIyYWJjMDg1NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSDusAwQC SDvsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAnRjPdlisADu7/KEi7sKmPcrL8fws6/jSfoDTG1nHCpY2hg KTHQWoULVwxvjm4wG0yI/dXOdM6BNXD65+dnEIiEE7Jtitj9fc2WzuAqQbS+6S0H ca/ubHpRsvz6yzc8qILl0inzcHwhh0f5GnnQCKscK2Q2N4u5JnBJ4nRGdu56912s rsxpIeGzfTzPOeRwxk9VaxV6PoUnqHtkmMdDoYRX2gLeH6o/fJ8SFYJbWIUu4chn 57EH8TLGdguckTrQjtqFB+ewQUeikvCilrAHhLCIYDMnAmMyKduxgst/mPb/rKCn XR/9Zwn+Z8vDR6mw5+DHZM8/0WFMGFNHvkua3mA= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:30 2026 by rpki-client