$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa File: a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa (raw, json) Hash identifier: VcZX2iGkjgZZ48zMvXMOQBeJDbT81tYpBsuqPSuto9Y= Subject key identifier: 6B:3B:B5:71:E5:62:D4:8E:78:28:1C:C8:4B:BB:B5:12:1C:DE:FB:51 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584EA7959116DF97E8EBE2A49D00 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33507 IP address blocks: 72.59.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:91:16:df:97:e8:eb:e2:a4:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ced18b2e-f9bd-4138-b6d5-c08ff4c79837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:10:55:70:07:41:71:24:49:ec:90:dd:b5: 0b:23:ab:70:d5:9f:2f:64:a3:7c:f8:01:37:af:67: ab:d7:ea:78:28:83:96:94:0f:f9:c3:41:4f:7d:11: 8c:5f:b2:7e:5d:4a:84:db:75:eb:b3:d2:06:5a:f7: ef:7b:09:f0:de:ae:55:42:2c:18:a2:fa:63:22:c3: 35:df:72:e0:37:35:c7:07:46:35:70:40:c3:fb:d8: 9f:a2:32:66:ca:ef:36:b7:90:c1:e0:a3:94:38:ad: fc:92:a9:a9:13:92:2a:07:a4:68:ae:8d:2e:23:24: a9:11:d8:97:7f:8a:82:c3:cd:6b:30:13:5b:7d:ab: 82:80:35:aa:75:c4:e6:4c:41:e5:dd:53:9f:0f:c6: cf:f5:a0:c5:cc:01:22:33:53:8b:59:88:9f:7d:ab: 9e:1d:dc:7c:7b:00:c1:18:99:04:1b:ee:6b:fa:5a: dd:86:95:12:a5:1e:b8:71:82:9b:cb:62:3c:a0:83: 9c:8c:e1:26:54:f5:7b:79:53:dd:72:75:23:c2:79: 19:6d:d8:81:9f:65:b5:7c:05:5d:cd:be:10:e3:cd: d6:67:e4:e9:35:e8:ef:af:a2:08:92:07:d9:83:95: 4a:51:23:58:fb:82:e7:8b:69:6c:61:d0:6a:ae:8a: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3B:B5:71:E5:62:D4:8E:78:28:1C:C8:4B:BB:B5:12:1C:DE:FB:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:0e:36:f7:94:9d:7c:da:00:9a:64:68:0e:ee:44:51:74:bc: 15:e0:e8:6e:14:74:7f:57:37:41:f9:47:74:93:ee:ee:ba:bb: 36:fa:a2:de:31:67:b1:44:b9:3e:66:0c:fc:98:ca:22:cf:19: 8d:02:ce:3e:ac:7f:27:72:a4:9f:f3:88:04:4d:8f:27:c9:29: cb:bf:f2:f4:57:1d:2f:6b:11:0a:69:87:6c:7d:2c:7d:51:c3: e5:24:08:fc:59:32:7a:85:b2:65:e2:a9:a6:45:93:a4:3c:88: 00:77:6a:97:32:0d:fa:c8:dd:f2:f1:ec:44:61:e1:85:99:c1: 5b:72:cf:4c:74:73:cc:a5:15:16:fc:f9:10:e4:e2:2c:59:52: 05:60:b8:d9:65:40:3b:97:5e:2d:fc:36:ed:10:96:cb:e5:46: 22:28:1f:03:d5:64:84:9e:8f:8a:95:7e:6f:79:a6:65:4f:db: 63:85:4c:7c:d3:c8:76:5d:ba:fa:91:9e:c4:64:04:bf:59:19: 7a:8b:4b:c5:10:c4:27:75:65:da:e5:8b:34:32:95:64:66:b2: 90:04:c8:79:bc:2b:53:8d:85:87:7b:eb:c2:93:17:0a:de:8a: 89:07:3f:76:76:e0:e1:9a:93:a6:17:d8:94:d8:84:aa:3d:94: 27:bd:ee:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlZEW35fo6+KknQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2VkMThiMmUtZjliZC00MTM4LWI2ZDUtYzA4ZmY0Yzc5ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY4QVXAHQXEkSeyQ3bULI6tw1Z8vZKN8+AE3 r2er1+p4KIOWlA/5w0FPfRGMX7J+XUqE23Xrs9IGWvfvewnw3q5VQiwYovpjIsM1 33LgNzXHB0Y1cEDD+9ifojJmyu82t5DB4KOUOK38kqmpE5IqB6Roro0uIySpEdiX f4qCw81rMBNbfauCgDWqdcTmTEHl3VOfD8bP9aDFzAEiM1OLWYiffaueHdx8ewDB GJkEG+5r+lrdhpUSpR64cYKby2I8oIOcjOEmVPV7eVPdcnUjwnkZbdiBn2W1fAVd zb4Q483WZ+TpNejvr6IIkgfZg5VKUSNY+4Lni2lsYdBqropFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs7tXHlYtSOeCgcyEu7tRIc3vtRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTMxYWU4ZTMtY2Q5ZS0z MTkyLWE2OWMtY2I5NDRmMzc2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSDvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwONveUnXzaAJpkaA7uRFF0vBXg6G4UdH9XN0H5R3ST7u66uzb6ot4x Z7FEuT5mDPyYyiLPGY0Czj6sfydypJ/ziARNjyfJKcu/8vRXHS9rEQpph2x9LH1R w+UkCPxZMnqFsmXiqaZFk6Q8iAB3apcyDfrI3fLx7ERh4YWZwVtyz0x0c8ylFRb8 +RDk4ixZUgVguNllQDuXXi38Nu0QlsvlRiIoHwPVZISej4qVfm95pmVP22OFTHzT yHZduvqRnsRkBL9ZGXqLS8UQxCd1ZdrlizQylWRmspAEyHm8K1ONhYd768KTFwre iokHP3Z24OGak6YX2JTYhKo9lCe97g4= -----END CERTIFICATE-----Generated at Wed Jul 29 10:10:26 2026 by rpki-client