$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa File: a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa (raw, json) Hash identifier: sl9HA0mHZ1K854QJyF9xPnwffhateHluQYjt6P1sy2o= Subject key identifier: C0:A2:54:AA:F9:62:3A:07:99:5E:E7:5A:A4:A3:6E:15:1A:B2:7D:E3 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584F498858260DF769E517716800 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33507 IP address blocks: 72.59.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:58:26:0d:f7:69:e5:17:71:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af667335-785a-4d0c-a5ca-741be454a68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:ec:9b:1a:be:fb:fe:59:53:1d:ed:86:33: 3c:64:58:71:cd:3c:b0:cc:68:80:c3:36:8e:0a:a0: 1e:5e:3d:0b:98:87:59:9e:ab:59:07:29:c1:65:f7: ed:05:df:53:59:91:94:51:61:26:73:c8:6a:0d:cd: 75:e6:9e:44:b3:0f:ee:de:7f:c5:e3:1e:af:e8:65: 55:49:9a:d0:a5:b9:44:98:71:42:ed:0a:a0:d0:66: 56:6d:3a:a0:25:d7:a9:70:fa:a6:3e:e8:3b:85:32: c4:e5:55:b9:75:60:52:fd:15:23:2e:85:1a:bd:3d: e0:21:21:f7:9b:62:de:a9:b7:c8:db:50:d5:76:30: f8:ab:5e:f0:8e:42:8e:23:f8:6f:7b:b7:c8:3b:43: 8d:e6:5b:bf:81:70:4c:52:5d:55:bf:64:54:8d:32: 37:73:09:3a:56:51:62:47:b1:11:cf:2a:e7:14:15: 14:90:8b:1f:ae:07:91:9b:15:59:ab:c2:fc:f8:8c: 98:3e:45:9e:9c:25:48:9c:bd:b7:b4:81:c7:0a:21: e1:30:fa:66:1c:6f:d3:aa:28:40:fc:45:00:91:1a: 1a:0d:6f:de:a4:ba:65:14:34:fa:f9:f7:ad:ea:6c: e5:d6:0d:62:64:73:f5:b8:d1:70:7c:1c:18:0c:86: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:54:AA:F9:62:3A:07:99:5E:E7:5A:A4:A3:6E:15:1A:B2:7D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d7:49:fe:e3:96:56:79:5e:59:fa:23:82:e1:c7:37:63:92: 29:ae:65:bc:2d:02:bb:4d:97:64:b0:76:c9:51:82:14:68:53: 32:b7:5d:73:14:b7:19:dc:f7:19:71:a8:44:e0:34:78:0f:5c: 8a:45:fd:65:3d:7c:4b:04:4a:f0:16:a8:d4:bb:83:3d:d1:81: 3e:bd:f7:74:be:2c:0a:21:29:a0:f3:ab:0b:69:b4:2a:0e:1e: bc:4e:44:76:b5:fd:55:0d:e5:65:db:27:54:85:bf:96:52:de: e3:0f:a5:8f:f5:06:01:0a:c0:f5:d7:50:8f:1b:27:44:4b:3c: e3:68:a5:43:c4:66:ab:14:ed:34:47:98:2b:61:c1:a4:a9:0f: 61:e3:58:be:a9:aa:25:05:f2:46:f6:d9:bd:cf:18:cd:b1:b7: 4c:63:4e:bb:91:51:1a:c5:d9:c1:9f:a5:42:2c:d4:09:b2:c7: d0:21:a6:b4:b2:ba:3b:42:45:7d:00:5b:a0:7e:1c:fd:cc:e7: 1c:15:1e:a4:17:ff:ee:21:ac:b6:29:3a:09:46:54:6c:ab:9e: 59:87:1b:2d:33:7d:2b:07:90:53:8f:be:31:f7:c4:cb:a1:a6: f2:76:ed:85:90:06:8d:03:94:ef:a2:ba:73:d0:67:a9:6a:87: 4e:3a:64:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiFgmDfdp5RdxaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY2NjczMzUtNzg1YS00ZDBjLWE1Y2EtNzQxYmU0NTRhNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+7smxq++/5ZUx3thjM8ZFhxzTywzGiAwzaO CqAeXj0LmIdZnqtZBynBZfftBd9TWZGUUWEmc8hqDc115p5Esw/u3n/F4x6v6GVV SZrQpblEmHFC7Qqg0GZWbTqgJdepcPqmPug7hTLE5VW5dWBS/RUjLoUavT3gISH3 m2LeqbfI21DVdjD4q17wjkKOI/hve7fIO0ON5lu/gXBMUl1Vv2RUjTI3cwk6VlFi R7ERzyrnFBUUkIsfrgeRmxVZq8L8+IyYPkWenCVInL23tIHHCiHhMPpmHG/TqihA /EUAkRoaDW/epLplFDT6+fet6mzl1g1iZHP1uNFwfBwYDIZHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCiVKr5YjoHmV7nWqSjbhUasn3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTMxYWU4ZTMtY2Q5ZS0z MTkyLWE2OWMtY2I5NDRmMzc2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSDvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3XSf7jllZ5Xln6I4LhxzdjkimuZbwtArtNl2SwdslRghRoUzK3XXMU txnc9xlxqETgNHgPXIpF/WU9fEsESvAWqNS7gz3RgT6993S+LAohKaDzqwtptCoO HrxORHa1/VUN5WXbJ1SFv5ZS3uMPpY/1BgEKwPXXUI8bJ0RLPONopUPEZqsU7TRH mCthwaSpD2HjWL6pqiUF8kb22b3PGM2xt0xjTruRURrF2cGfpUIs1Amyx9AhprSy ujtCRX0AW6B+HP3M5xwVHqQX/+4hrLYpOglGVGyrnlmHGy0zfSsHkFOPvjH3xMuh pvJ27YWQBo0DlO+iunPQZ6lqh046ZLk= -----END CERTIFICATE-----Generated at Fri Sep 25 22:04:35 2026 by rpki-client