$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa File: 58426963-8e9f-3d0f-bef2-b544d3e74968.roa (raw, json) Hash identifier: gOyMsJvIfR3R2POHiVx3lzIJtlIBshiGa0Jtbi2V81U= Subject key identifier: 0E:33:2E:E2:DE:DD:12:5B:4F:84:A9:EA:C3:08:A7:AA:31:47:06:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D52434AC86236D687403258C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 0 IP address blocks: 72.13.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4a:c8:62:36:d6:87:40:32:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=30d8d4d6-a70a-44f9-bc4d-cac035fa3970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:7c:74:ef:a2:b0:25:b5:a8:5a:2a:aa:bc: f8:f8:10:69:d9:cd:5e:0c:4e:e4:02:9f:06:24:ef: 4c:05:03:a9:e5:f5:25:42:c8:b2:fc:b2:fc:9a:03: 76:a1:9d:6b:5f:11:86:de:25:1a:46:08:78:e5:55: bd:3a:42:be:a5:1e:d8:95:5b:e4:09:83:97:70:4e: 15:42:3a:5c:1b:76:46:7f:79:75:16:46:9d:92:e7: 02:32:cb:fb:84:d9:18:37:0a:0b:80:8e:1f:90:02: 3d:f4:31:40:a4:ae:4f:54:ae:12:19:25:fa:14:d6: ec:28:94:86:4e:64:ed:3c:61:c2:76:0c:e5:0e:51: 8a:5e:0e:86:c5:e5:3a:01:d3:ec:89:33:ae:b0:02: be:fe:39:0c:8f:44:aa:ea:e6:71:ce:fd:8d:fe:04: 51:5d:c5:67:88:08:b1:a9:33:87:99:53:f7:da:6a: 20:e6:17:5a:93:97:96:6a:15:36:c7:ea:c4:76:f5: e9:1d:4d:d4:ab:d9:70:25:fa:b8:d5:35:26:88:4e: 55:d1:d0:9c:49:ba:dc:12:9a:dd:72:ff:9f:b7:ed: 8f:2d:14:39:1d:8b:20:e3:44:58:f2:8f:e7:ca:a7: 04:68:6f:a4:e4:8f:c6:98:f6:70:79:c2:f4:2c:76: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:2E:E2:DE:DD:12:5B:4F:84:A9:EA:C3:08:A7:AA:31:47:06:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e5:5e:e1:bd:53:2e:fb:0e:f9:91:31:b9:48:1b:b5:23:dc: 8a:4b:ce:44:f5:99:1c:1c:ff:4b:28:7f:86:5b:57:56:68:15: f7:64:19:42:8d:a5:8e:42:95:ca:ac:77:a7:70:41:1d:1c:f0: 50:dc:b6:f0:c8:f9:d5:eb:d2:1b:d7:cd:1c:72:bb:fd:36:98: 10:9a:c9:ee:b1:40:3c:6b:71:3b:6e:3f:58:bb:b2:3b:3c:d0: a6:64:f1:20:9e:e6:be:af:a0:5e:36:15:6c:16:f0:58:29:ed: 74:91:e3:f4:60:fe:ed:f7:52:e6:bb:2e:1e:d1:60:a4:10:9c: 07:e4:42:11:12:13:a7:d6:9c:37:1b:4c:88:44:c5:c2:a8:5e: c1:16:22:2d:f9:ba:e5:69:54:76:42:5e:2e:6e:29:55:3b:3d: f7:be:ae:d8:9f:ad:98:1c:8e:c9:b9:34:c7:f8:58:36:71:f8: da:95:48:db:e3:cc:fb:cf:dd:37:48:7d:66:f0:97:7b:a7:38: 72:66:09:c5:78:d3:07:ea:5f:05:61:d8:51:29:a5:43:04:ff: 16:d5:ee:51:3d:36:ea:68:8b:43:66:de:14:e4:33:8b:a8:cb: 60:bd:f3:b7:d1:fc:04:84:97:22:0c:54:15:da:7f:0b:e3:71: b8:e0:88:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0rIYjbWh0AyWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MzBkOGQ0ZDYtYTcwYS00NGY5LWJjNGQtY2FjMDM1ZmEzOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUt8dO+isCW1qFoqqrz4+BBp2c1eDE7kAp8G JO9MBQOp5fUlQsiy/LL8mgN2oZ1rXxGG3iUaRgh45VW9OkK+pR7YlVvkCYOXcE4V QjpcG3ZGf3l1FkadkucCMsv7hNkYNwoLgI4fkAI99DFApK5PVK4SGSX6FNbsKJSG TmTtPGHCdgzlDlGKXg6GxeU6AdPsiTOusAK+/jkMj0Sq6uZxzv2N/gRRXcVniAix qTOHmVP32mog5hdak5eWahU2x+rEdvXpHU3Uq9lwJfq41TUmiE5V0dCcSbrcEprd cv+ft+2PLRQ5HYsg40RY8o/nyqcEaG+k5I/GmPZwecL0LHZ7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4zLuLe3RJbT4Sp6sMIp6oxRwarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg0MjY5NjMtOGU5Zi0z ZDBmLWJlZjItYjU0NGQzZTc0OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDlXuG9Uy77DvmRMblIG7Uj3IpLzkT1mRwc/0sof4ZbV1ZoFfdkGUKN pY5Clcqsd6dwQR0c8FDctvDI+dXr0hvXzRxyu/02mBCaye6xQDxrcTtuP1i7sjs8 0KZk8SCe5r6voF42FWwW8Fgp7XSR4/Rg/u33Uua7Lh7RYKQQnAfkQhESE6fWnDcb TIhExcKoXsEWIi35uuVpVHZCXi5uKVU7Pfe+rtifrZgcjsm5NMf4WDZx+NqVSNvj zPvP3TdIfWbwl3unOHJmCcV40wfqXwVh2FEppUME/xbV7lE9Nupoi0Nm3hTkM4uo y2C987fR/ASElyIMVBXafwvjcbjgiBs= -----END CERTIFICATE-----Generated at Mon Mar 30 04:20:46 2026 by rpki-client