$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa File: e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa (raw, json) Hash identifier: tGGAh6To+d18oaNeYhCp5vVlM6vh1bsuR5SD1CXJtmU= Subject key identifier: 52:56:1E:17:D1:58:64:49:D9:24:2A:1F:91:3E:EE:EB:98:09:C7:29 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584C8A0C66CC0EDA6F4792A5DDC0 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 393233 IP address blocks: 173.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:66:cc:0e:da:6f:47:92:a5:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=c1d0c65c-2289-4ecf-9863-b3c169397b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f9:c1:17:5d:33:8b:5a:2c:9e:29:8c:c5:ed: de:2e:64:b9:67:79:ba:c8:95:8a:78:89:a1:05:16: 08:45:47:3c:8f:a2:5a:f7:38:bc:b4:9a:1b:bf:96: 69:ec:ae:43:0e:01:33:54:0b:88:fc:6e:e9:e2:ce: 63:f4:bb:07:7c:25:9d:09:39:2b:a8:fd:2f:94:58: 80:12:34:8d:ac:76:27:eb:6c:a5:a5:86:5f:31:d4: 4e:a9:61:39:6d:e1:f8:8b:62:23:8c:d0:24:85:21: 2f:cd:43:ca:82:a9:a3:38:6d:2c:bc:1b:ff:9b:ee: a2:06:0a:fd:a4:d0:60:52:6b:f8:8c:a9:17:d2:96: 79:e9:33:88:6e:09:5e:4f:0a:c9:ac:9a:a0:f6:eb: 1b:af:18:c1:cf:ec:08:cb:c7:8b:37:51:26:d7:f7: 50:b0:09:6e:b7:d0:d5:6f:89:a3:9a:69:6a:e3:e3: 5f:25:24:84:c8:6a:2b:e1:8d:46:9f:f3:9d:04:77: ca:12:14:8e:6e:8d:e9:d4:c9:18:cb:27:d4:4b:dc: 81:06:4d:5e:8d:b8:d9:f7:2b:f9:2a:05:57:6e:fe: 1e:ea:66:b1:70:b2:23:1d:64:36:8f:62:b9:12:90: 8d:e6:b3:df:00:65:6d:4a:a3:72:6f:64:59:95:3d: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:56:1E:17:D1:58:64:49:D9:24:2A:1F:91:3E:EE:EB:98:09:C7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 173.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8c:bb:ff:0b:d7:6e:ce:34:42:1f:c3:91:dc:81:c0:be:dd: e1:fe:8a:07:f0:86:f2:f8:79:58:76:ec:84:fe:9a:7e:26:87: 0f:62:df:4d:d8:c5:2e:75:a1:37:ea:51:07:56:d5:f0:44:4e: d9:dc:a1:cb:22:75:d5:4e:62:7b:66:12:4e:19:32:59:5c:45: 47:39:49:84:2d:29:6b:e3:87:d6:47:2f:da:64:e4:50:35:43: 45:06:5b:66:69:ed:15:2f:7a:40:7f:87:88:eb:af:0f:29:d3: 19:92:8b:e7:62:49:bd:25:18:d7:54:63:bd:a1:09:e9:62:05: e1:b9:c3:15:ff:7c:26:1d:48:84:a5:04:5e:75:a4:1b:69:74: 9a:70:3c:55:35:87:49:1b:79:90:4b:7e:46:4b:6c:07:c4:53: 7f:0a:23:c1:9b:91:04:ac:4a:4e:aa:68:1a:a8:30:06:47:69: 77:31:48:4c:5c:12:ad:d3:bf:dc:07:91:2e:95:b8:01:d1:97: 50:cb:1a:c4:34:74:f8:c0:3a:f1:92:d9:f3:aa:47:aa:dd:4a: c7:2d:2f:e3:a7:8a:67:07:92:52:c1:e0:f2:74:68:f2:c5:f6: 5a:51:0a:94:bb:3c:5f:0c:6c:82:f3:2c:eb:65:70:a1:82:71: 79:f3:b3:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDGbMDtpvR5Kl3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk YzFkMGM2NWMtMjI4OS00ZWNmLTk4NjMtYjNjMTY5Mzk3YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfnBF10zi1osnimMxe3eLmS5Z3m6yJWKeImh BRYIRUc8j6Ja9zi8tJobv5Zp7K5DDgEzVAuI/G7p4s5j9LsHfCWdCTkrqP0vlFiA EjSNrHYn62ylpYZfMdROqWE5beH4i2IjjNAkhSEvzUPKgqmjOG0svBv/m+6iBgr9 pNBgUmv4jKkX0pZ56TOIbgleTwrJrJqg9usbrxjBz+wIy8eLN1Em1/dQsAlut9DV b4mjmmlq4+NfJSSEyGor4Y1Gn/OdBHfKEhSObo3p1MkYyyfUS9yBBk1ejbjZ9yv5 KgVXbv4e6maxcLIjHWQ2j2K5EpCN5rPfAGVtSqNyb2RZlT0M/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJWHhfRWGRJ2SQqH5E+7uuYCccpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvZTdmYzAwMjItOWJmYS0z NmViLTgzYjctYzVkZTVhZDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqMu/8L127ONEIfw5HcgcC+3eH+igfwhvL4eVh27IT+mn4mhw9i303Y xS51oTfqUQdW1fBETtncocsiddVOYntmEk4ZMllcRUc5SYQtKWvjh9ZHL9pk5FA1 Q0UGW2Zp7RUvekB/h4jrrw8p0xmSi+diSb0lGNdUY72hCeliBeG5wxX/fCYdSISl BF51pBtpdJpwPFU1h0kbeZBLfkZLbAfEU38KI8GbkQSsSk6qaBqoMAZHaXcxSExc Eq3Tv9wHkS6VuAHRl1DLGsQ0dPjAOvGS2fOqR6rdSsctL+OnimcHklLB4PJ0aPLF 9lpRCpS7PF8MbILzLOtlcKGCcXnzs14= -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:24 2026 by rpki-client