$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa File: a0305856-6db8-33a4-8ea3-9bb02757669f.roa (raw, json) Hash identifier: 4ZKSUQkBNB7iu+DCqG1E3+uqSrXtJe2LJ0JokzePZ0Q= Subject key identifier: A6:EC:BF:A1:28:F2:02:C9:5C:5F:11:13:E7:8B:78:96:01:42:89:48 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584EA79515B3338C2F65A1253E00 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398149 IP address blocks: 72.59.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:15:b3:33:8c:2f:65:a1:25:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0ad18f4f-6024-43e5-ab5d-b6e137be5174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a5:9e:7c:cb:d4:84:0c:b5:83:52:d1:0d:77: fe:2a:ab:2e:50:e2:33:3c:01:49:51:e9:a0:1f:3f: 24:be:90:92:4d:c5:7b:d7:1f:13:e4:15:ba:e3:91: 98:86:1a:da:f3:8d:84:56:07:8c:47:bf:70:1f:04: 98:c6:bc:8c:ea:d0:6a:6b:f9:e9:b3:2f:92:eb:09: c0:53:55:7b:58:cb:5b:4a:a8:3a:75:8d:8f:4e:76: 15:16:71:60:53:71:cc:e5:80:97:32:8f:35:40:2b: bb:e9:47:f1:69:68:07:d5:e0:dd:18:dd:7e:7b:6b: 19:35:e8:f7:0e:59:ea:68:fc:bc:16:d0:52:9e:ae: 82:a0:4f:9f:07:99:c6:83:ac:5c:d2:a5:7a:1e:59: 6a:7b:eb:02:de:05:92:0a:44:ae:c4:f7:16:63:cd: 0b:1b:49:07:35:78:18:29:0a:3b:e0:29:35:71:55: bd:fe:33:0a:91:05:15:a2:e4:7f:98:82:1f:29:c4: ae:96:db:de:ce:1a:9a:43:0d:64:f7:47:ee:a4:75: 6c:96:df:54:94:8d:92:6a:72:8b:43:d3:ab:0a:cc: 2c:01:db:1c:06:a8:ec:b5:f5:83:5e:07:af:83:73: 4f:3f:74:86:07:0e:4e:93:01:46:53:d5:87:ed:b9: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:BF:A1:28:F2:02:C9:5C:5F:11:13:E7:8B:78:96:01:42:89:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a0305856-6db8-33a4-8ea3-9bb02757669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:01:7c:70:ae:cb:42:49:9e:7d:d7:f0:99:ca:f8:aa:15:81: 3c:bb:d4:71:f2:7c:2d:45:90:87:9c:65:26:d4:06:4e:90:87: 95:09:b0:31:a9:83:2b:b3:d9:51:a6:67:eb:fe:99:de:0e:fe: 4d:ed:d3:a2:62:ee:90:b1:d2:ba:aa:ac:5b:f5:ad:cf:50:0a: ee:d4:01:98:35:1e:f2:ad:bd:fe:c0:0e:9c:d0:21:d3:0d:e4: 2c:8f:5b:04:37:d6:98:7e:b4:22:31:14:4f:83:e6:0f:66:de: 4f:8e:0a:20:be:e4:22:ff:2e:5e:13:c6:cc:a5:26:a8:25:bf: 1a:b8:43:81:7e:3b:0c:39:4b:f9:6d:2c:a7:a2:bd:2e:76:ff: 0f:54:00:84:45:7b:f7:49:0d:c3:71:a8:f2:02:8a:4e:92:a4: f7:ee:46:f1:ce:b3:d1:57:f2:69:fc:d2:86:cf:5b:6b:f9:8b: af:96:31:5b:87:d6:52:b2:92:a7:07:aa:39:a6:15:0a:da:2a: 87:4a:12:72:22:90:8a:4d:68:15:85:b1:30:8f:a6:83:63:ac: 17:68:97:75:50:e6:97:15:d7:15:0a:e2:3f:63:c3:75:24:0c: f7:86:91:95:aa:ed:20:99:db:ae:e7:d4:02:57:9f:b4:c5:31: e2:63:75:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlRWzM4wvZaElPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGFkMThmNGYtNjAyNC00M2U1LWFiNWQtYjZlMTM3YmU1MTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKWefMvUhAy1g1LRDXf+KqsuUOIzPAFJUemg Hz8kvpCSTcV71x8T5BW645GYhhra842EVgeMR79wHwSYxryM6tBqa/npsy+S6wnA U1V7WMtbSqg6dY2PTnYVFnFgU3HM5YCXMo81QCu76UfxaWgH1eDdGN1+e2sZNej3 DlnqaPy8FtBSnq6CoE+fB5nGg6xc0qV6Hllqe+sC3gWSCkSuxPcWY80LG0kHNXgY KQo74Ck1cVW9/jMKkQUVouR/mIIfKcSultvezhqaQw1k90fupHVslt9UlI2SanKL Q9OrCswsAdscBqjstfWDXgevg3NPP3SGBw5OkwFGU9WH7bkudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbsv6Eo8gLJXF8RE+eLeJYBQolIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTAzMDU4NTYtNmRiOC0z M2E0LThlYTMtOWJiMDI3NTc2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwBfHCuy0JJnn3X8JnK+KoVgTy71HHyfC1FkIecZSbUBk6Qh5UJsDGp gyuz2VGmZ+v+md4O/k3t06Ji7pCx0rqqrFv1rc9QCu7UAZg1HvKtvf7ADpzQIdMN 5CyPWwQ31ph+tCIxFE+D5g9m3k+OCiC+5CL/Ll4TxsylJqglvxq4Q4F+Oww5S/lt LKeivS52/w9UAIRFe/dJDcNxqPICik6SpPfuRvHOs9FX8mn80obPW2v5i6+WMVuH 1lKykqcHqjmmFQraKodKEnIikIpNaBWFsTCPpoNjrBdol3VQ5pcV1xUK4j9jw3Uk DPeGkZWq7SCZ267n1AJXn7TFMeJjdY0= -----END CERTIFICATE-----Generated at Wed Jul 29 12:27:54 2026 by rpki-client