$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa File: e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa (raw, json) Hash identifier: BrbDJyfcoOqnwHmEtfCAaukFpEeiYyzIzfyl3dWpa0c= Subject key identifier: C2:AC:0E:0E:5B:00:2E:B4:AC:58:97:03:98:7A:A7:C7:74:74:3A:63 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0CA0E938BA80DFA3F76E9280 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa Signing time: Tue 03 Mar 2026 20:35:29 +0000 ROA not before: Tue 03 Mar 2026 20:35:29 +0000 ROA not after: Mon 01 Jun 2026 19:35:29 +0000 asID: 53959 IP address blocks: 72.29.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:a0:e9:38:ba:80:df:a3:f7:6e:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 20:35:29 2026 GMT Not After : Jun 1 19:35:29 2026 GMT Subject: CN=1e65e4ff-1ea8-498f-a6d7-cbcf0c35d2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6c:01:10:f0:a7:0e:5c:32:2b:67:9d:11:7c: a1:86:2c:72:10:ac:f7:61:0b:92:9d:93:93:4e:9f: b9:24:46:56:e6:ce:ba:97:be:c7:ca:bb:f6:05:17: 70:09:e7:c1:e7:28:21:ab:4a:d6:b5:f1:ca:94:09: 4a:4e:36:a5:fb:b5:81:95:ae:53:bb:e0:7d:1b:88: c0:2f:27:5c:ba:b9:d4:c2:32:30:1b:46:5a:aa:b9: 05:34:6b:97:7d:5b:78:1e:91:66:f8:76:3d:85:6f: f8:88:8e:6c:58:92:a0:aa:0f:cd:b4:a2:3f:7c:8f: fd:b0:2f:ed:f5:4b:b1:b8:7b:c1:92:ee:d6:e8:3f: 2d:d0:96:15:93:c0:1d:b0:95:c6:e6:b0:97:08:b7: 60:0a:25:5d:16:f8:b0:49:f8:a9:8c:85:c1:a1:19: d5:22:44:66:48:08:d8:19:5a:4d:35:93:f2:ed:35: 0b:6f:51:49:eb:ae:22:1e:20:c0:68:18:b8:ef:df: 0e:c6:f6:b4:49:aa:09:25:15:e4:37:b2:52:b7:bb: b6:46:2d:a6:29:7d:2f:51:08:5e:04:4a:17:df:37: 93:11:cd:dc:44:fc:37:da:5f:9f:86:fc:c7:29:79: fa:27:b0:c9:06:a9:2b:81:6c:00:c3:e5:6a:c2:98: 9e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AC:0E:0E:5B:00:2E:B4:AC:58:97:03:98:7A:A7:C7:74:74:3A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/e3273c79-2df0-38c8-84cd-a45f8b63e2f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 72.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:b0:5f:6a:11:9d:5f:da:dd:f4:a3:5f:1b:56:ce:d6:02: 8a:b0:e1:f0:3d:d9:cb:ef:43:07:2f:7d:26:08:83:1c:08:d3: a8:43:6d:5b:dd:67:63:89:9e:43:c1:62:0d:7a:37:ca:c5:ef: 41:54:16:ba:25:22:e6:66:0b:d1:88:64:5d:a5:c2:21:fe:4d: 3e:96:56:c7:15:aa:e5:c2:6f:d0:f7:d2:db:e6:12:2d:67:7a: ea:86:39:49:2a:15:9b:0e:a3:d1:c0:34:74:77:44:66:ca:89: 90:fc:8a:2f:d9:21:df:a6:6b:59:a9:05:81:83:55:ab:39:cb: 2e:8e:97:7e:2b:c6:cc:00:11:17:c3:c9:c9:f1:79:69:99:8d: ed:ad:58:8c:5b:ba:ca:11:7a:35:97:73:10:0f:39:4a:10:ec: da:26:2b:82:94:96:7e:66:1c:cb:05:25:ce:01:e3:43:a7:c7: 13:4d:86:3d:fe:38:4e:86:3c:a5:3f:58:60:d6:5c:bc:50:ad: 7e:bf:96:1e:28:96:e3:d2:7a:29:15:36:b3:fd:a1:a3:99:be: 45:42:cd:71:70:7e:c4:56:bf:9d:66:77:84:bb:4c:94:ee:2d: 47:bc:a7:48:80:3a:10:0f:17:cc:e3:8c:5e:f9:32:ed:ce:12: b6:c9:8c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MoOk4uoDfo/dukoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIwMzUyOVoXDTI2MDYwMTE5MzUyOVowLzEtMCsGA1UEAxMk MWU2NWU0ZmYtMWVhOC00OThmLWE2ZDctY2JjZjBjMzVkMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmwBEPCnDlwyK2edEXyhhixyEKz3YQuSnZOT Tp+5JEZW5s66l77Hyrv2BRdwCefB5yghq0rWtfHKlAlKTjal+7WBla5Tu+B9G4jA LydcurnUwjIwG0ZaqrkFNGuXfVt4HpFm+HY9hW/4iI5sWJKgqg/NtKI/fI/9sC/t 9UuxuHvBku7W6D8t0JYVk8AdsJXG5rCXCLdgCiVdFviwSfipjIXBoRnVIkRmSAjY GVpNNZPy7TULb1FJ664iHiDAaBi4798Oxva0SaoJJRXkN7JSt7u2Ri2mKX0vUQhe BEoX3zeTEc3cRPw32l+fhvzHKXn6J7DJBqkrgWwAw+VqwpieGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKsDg5bAC60rFiXA5h6p8d0dDpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZTMyNzNjNzktMmRmMC0z OGM4LTg0Y2QtYTQ1ZjhiNjNlMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUsF9qEZ1f2t30o18bVs7WAoqw4fA92cvvQwcvfSYIgxwI06hDbVvd Z2OJnkPBYg16N8rF70FUFrolIuZmC9GIZF2lwiH+TT6WVscVquXCb9D30tvmEi1n euqGOUkqFZsOo9HANHR3RGbKiZD8ii/ZId+ma1mpBYGDVas5yy6Ol34rxswAERfD ycnxeWmZje2tWIxbusoRejWXcxAPOUoQ7NomK4KUln5mHMsFJc4B40OnxxNNhj3+ OE6GPKU/WGDWXLxQrX6/lh4oluPSeikVNrP9oaOZvkVCzXFwfsRWv51md4S7TJTu LUe8p0iAOhAPF8zjjF75Mu3OErbJjM0= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:23 2026 by rpki-client