$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa File: ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa (raw, json) Hash identifier: MvEQeUl7chUz5BOJOp9eJAyLXW/P4cCTLaxxguQMehg= Subject key identifier: E5:A4:1A:D2:19:2F:75:4D:A5:95:8F:88:FB:73:8E:7A:F8:1B:A8:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D4D5A85E2B5C7BC77885B8500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 0 IP address blocks: 72.13.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:85:e2:b5:c7:bc:77:88:5b:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=035c45b3-38a6-40c6-bb9c-ba2cd1211799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:71:9a:ad:72:39:9e:46:46:12:3a:aa:7c:d5: 4f:a3:72:f9:b2:3b:6d:65:20:74:63:6f:5f:90:03: 3f:ad:b7:de:4f:c1:f8:63:c7:b4:b1:65:ee:17:82: a8:67:84:a8:67:9e:e7:0b:6c:da:8e:45:bf:67:4d: f2:0a:25:f6:7f:be:d7:28:07:28:3f:5e:e7:76:cf: 4f:7b:67:f6:6f:59:cd:f6:0a:d4:ca:b5:5f:9c:31: 66:13:a0:6f:3d:0b:33:49:73:79:0b:81:c6:63:93: 36:3d:0e:ec:9a:04:3a:f6:d1:6d:e9:5b:5e:85:29: 81:7c:fc:98:be:12:fb:62:52:08:73:bd:63:f6:0a: 4d:56:c3:a3:74:0f:e9:97:2d:fc:7a:0d:6e:6b:95: 01:13:33:f9:6d:2c:2f:9c:6c:e8:95:11:66:f4:83: fc:81:8d:0b:d8:4f:a5:79:de:ec:70:58:6f:72:06: bc:6c:b4:d0:0a:23:0f:ec:a7:88:ae:db:62:51:39: bb:a4:64:f8:8a:14:ec:02:a6:70:53:75:b0:10:95: 2d:21:3f:a8:6b:45:ae:e1:7b:dd:8c:5f:69:54:a4: 15:92:5c:22:a5:37:6e:02:47:7f:9d:a2:30:c1:60: b8:ff:92:c0:ef:77:56:95:84:21:75:c3:09:d5:45: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A4:1A:D2:19:2F:75:4D:A5:95:8F:88:FB:73:8E:7A:F8:1B:A8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0c:99:cf:e8:18:c3:8a:11:76:72:6a:78:9d:6a:a9:ac:0d: 3d:6f:fe:50:18:07:87:8d:3b:27:ed:ea:95:0e:11:14:fa:ae: a9:e6:89:01:b4:62:09:db:21:0d:cb:63:37:f1:bd:be:bb:c9: f8:42:89:e9:cc:93:49:18:8a:7a:72:5e:8c:4c:22:25:ee:ed: 3a:de:ad:ec:41:27:d4:b9:39:c4:ee:89:fa:05:ed:12:fc:9a: f0:e8:17:46:97:59:11:d0:11:a4:89:4b:cb:33:35:7c:f7:50: 9e:7d:a5:eb:dd:6c:29:13:79:0c:37:58:c0:f2:75:10:a9:86: 35:98:36:83:9b:a2:bc:ca:3e:6f:83:6a:84:e7:44:6d:25:fa: a4:d0:4a:22:78:70:1a:d0:13:94:27:72:d4:9e:ac:98:8e:4f: fd:c6:db:f5:b4:e2:e9:e8:2b:b4:0d:74:26:6c:a5:5a:84:52: dc:2c:43:10:19:74:e3:85:fa:3d:1b:f4:ae:81:7f:b3:0a:70: 18:d7:1b:84:3e:fe:c2:b9:22:0a:87:84:19:23:76:7b:08:67: ed:61:a1:b5:33:97:93:8a:11:8c:ca:3a:5b:eb:d2:60:40:33: 1e:12:9e:ea:14:da:1c:b3:aa:ea:df:41:c4:71:ce:35:39:37: 69:cd:07:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWoXitce8d4hbhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MDM1YzQ1YjMtMzhhNi00MGM2LWJiOWMtYmEyY2QxMjExNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3GarXI5nkZGEjqqfNVPo3L5sjttZSB0Y29f kAM/rbfeT8H4Y8e0sWXuF4KoZ4SoZ57nC2zajkW/Z03yCiX2f77XKAcoP17nds9P e2f2b1nN9grUyrVfnDFmE6BvPQszSXN5C4HGY5M2PQ7smgQ69tFt6VtehSmBfPyY vhL7YlIIc71j9gpNVsOjdA/ply38eg1ua5UBEzP5bSwvnGzolRFm9IP8gY0L2E+l ed7scFhvcga8bLTQCiMP7KeIrttiUTm7pGT4ihTsAqZwU3WwEJUtIT+oa0Wu4Xvd jF9pVKQVklwipTduAkd/naIwwWC4/5LA73dWlYQhdcMJ1UXkYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWkGtIZL3VNpZWPiPtzjnr4G6gPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMzYTdlZDMtYzRkZi0z YjgyLWE3OTUtN2YyYzQ1NGE2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkMmc/oGMOKEXZyanidaqmsDT1v/lAYB4eNOyft6pUOERT6rqnmiQG0 YgnbIQ3LYzfxvb67yfhCienMk0kYinpyXoxMIiXu7TrerexBJ9S5OcTuifoF7RL8 mvDoF0aXWRHQEaSJS8szNXz3UJ59pevdbCkTeQw3WMDydRCphjWYNoOborzKPm+D aoTnRG0l+qTQSiJ4cBrQE5QnctSerJiOT/3G2/W04unoK7QNdCZspVqEUtwsQxAZ dOOF+j0b9K6Bf7MKcBjXG4Q+/sK5IgqHhBkjdnsIZ+1hobUzl5OKEYzKOlvr0mBA Mx4SnuoU2hyzqurfQcRxzjU5N2nNBxg= -----END CERTIFICATE-----Generated at Mon Mar 30 04:20:47 2026 by rpki-client