$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/4fbdd5f7-399a-3c50-86ea-56d4f7a1e1d9.roa File: 4fbdd5f7-399a-3c50-86ea-56d4f7a1e1d9.roa (raw, json) Hash identifier: 3/PlKu6uvCLHCXy//MiXQriqbCP69aQN3rVYbowD+Eg= Subject key identifier: 1A:0A:78:2C:E8:6A:F4:70:E4:B9:41:94:62:89:46:52:61:FE:E9:DF Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584F49748AFF4B0BE507E6D51D40 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/4fbdd5f7-399a-3c50-86ea-56d4f7a1e1d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32898 IP address blocks: 72.59.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8a:ff:4b:0b:e5:07:e6:d5:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3285c9d0-d523-4cf8-997a-b10091692e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:15:d8:86:0a:27:31:e5:4f:25:94:67:79: 6c:e7:9f:26:31:e1:9c:38:3d:d9:15:69:4e:fd:fa: 4b:68:ca:7b:7e:4f:b2:73:b2:0c:d5:c5:db:0c:f7: 71:d8:d8:f9:b8:db:bd:97:6c:c6:cd:f1:5b:eb:b9: 14:f0:c2:f9:81:9e:ff:d2:48:9d:a3:c9:9d:57:db: ec:83:63:1b:dd:8a:fd:bd:d4:f3:75:c4:d4:41:93: 5b:59:9c:5b:64:24:ab:45:ee:87:16:1f:8f:ed:6d: ac:95:b3:23:cc:a9:9b:eb:15:0b:9d:27:93:f3:55: c2:ec:ba:f5:98:c0:1f:ab:c0:46:69:59:21:f3:ec: 53:6c:83:b2:7d:cc:75:e5:b0:5d:03:67:30:22:5c: 6f:d7:29:4b:34:42:02:db:1d:de:33:5c:9d:7e:a3: 2c:7b:78:76:94:cc:f0:b3:96:ae:a0:11:0f:22:14: 36:88:34:36:6a:f1:1d:2a:50:70:37:a1:a4:36:6d: fb:8e:0c:b1:68:3b:49:f0:2f:ac:1b:6b:30:ef:b1: c8:d3:ce:c5:c6:25:8e:2b:eb:7d:44:2a:5a:85:2e: ea:05:3b:db:b0:24:52:e5:a5:f7:20:cd:aa:b8:99: d2:e9:e7:72:c9:1e:e1:dc:fb:7e:1a:f2:92:3d:5b: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0A:78:2C:E8:6A:F4:70:E4:B9:41:94:62:89:46:52:61:FE:E9:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/4fbdd5f7-399a-3c50-86ea-56d4f7a1e1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:65:35:69:52:40:fb:72:bc:c6:7e:c3:df:20:6b:a0:25:41: 07:24:8a:44:d2:74:9c:29:ed:14:47:ca:18:ec:ca:11:3f:a5: bd:08:de:ed:d9:12:98:53:62:69:b8:98:7e:b8:4e:68:da:7d: c0:b5:03:d5:33:03:c9:b0:f4:67:b2:de:cf:bb:1b:db:45:59: 78:4a:07:3d:35:bc:50:3e:dd:18:cd:56:0c:7b:93:24:36:a6: a9:3f:cd:c5:81:13:1a:6b:59:87:d1:39:82:61:85:44:ea:50: 0b:24:9f:bd:4d:28:4a:cc:23:df:89:14:26:ee:27:e3:ff:c1: c0:dc:29:f6:5a:13:4e:5e:d3:f1:bd:55:72:3c:a5:8b:c8:9c: 48:96:d5:f0:4d:8d:86:8f:bd:25:a1:f4:3b:cd:ca:74:36:7b: 48:f0:7b:af:d6:bc:fa:50:d7:bc:3e:55:c5:7d:8e:17:83:af: b7:d7:86:ef:d2:1b:05:3c:72:6e:be:43:0d:99:a0:b3:10:da: 7e:a8:a1:21:cd:a6:6e:93:8a:92:94:3e:52:48:27:0c:31:2d: d0:b3:a8:9c:e7:cb:39:e4:19:0b:03:c5:71:05:46:a1:04:d6: ef:1b:68:4f:8a:61:64:bd:34:4b:ce:ea:4d:62:85:7e:6a:ad: 68:89:0d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIr/SwvlB+bVHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI4NWM5ZDAtZDUyMy00Y2Y4LTk5N2EtYjEwMDkxNjkyZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K4V2IYKJzHlTyWUZ3ls558mMeGcOD3ZFWlO /fpLaMp7fk+yc7IM1cXbDPdx2Nj5uNu9l2zGzfFb67kU8ML5gZ7/0kido8mdV9vs g2Mb3Yr9vdTzdcTUQZNbWZxbZCSrRe6HFh+P7W2slbMjzKmb6xULnSeT81XC7Lr1 mMAfq8BGaVkh8+xTbIOyfcx15bBdA2cwIlxv1ylLNEIC2x3eM1ydfqMse3h2lMzw s5auoBEPIhQ2iDQ2avEdKlBwN6GkNm37jgyxaDtJ8C+sG2sw77HI087FxiWOK+t9 RCpahS7qBTvbsCRS5aX3IM2quJnS6edyyR7h3Pt+GvKSPVuJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoKeCzoavRw5LlBlGKJRlJh/unfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvNGZiZGQ1ZjctMzk5YS0z YzUwLTg2ZWEtNTZkNGY3YTFlMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESDuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxlNWlSQPtyvMZ+w98ga6AlQQckikTSdJwp7RRHyhjsyhE/pb0I3u3Z EphTYmm4mH64TmjafcC1A9UzA8mw9Gey3s+7G9tFWXhKBz01vFA+3RjNVgx7kyQ2 pqk/zcWBExprWYfROYJhhUTqUAskn71NKErMI9+JFCbuJ+P/wcDcKfZaE05e0/G9 VXI8pYvInEiW1fBNjYaPvSWh9DvNynQ2e0jwe6/WvPpQ17w+VcV9jheDr7fXhu/S GwU8cm6+Qw2ZoLMQ2n6ooSHNpm6TipKUPlJIJwwxLdCzqJznyznkGQsDxXEFRqEE 1u8baE+KYWS9NEvO6k1ihX5qrWiJDW0= -----END CERTIFICATE-----Generated at Sun Sep 27 07:08:29 2026 by rpki-client