$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json) Hash identifier: J6QoTRAW31AzLNDGX8atbhzGB1NhpafHFUkna1PdsmE= Subject key identifier: CE:8B:BA:83:D6:64:75:FD:99:B7:74:6C:97:C0:D0:2B:71:C3:45:7B Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584ECBD1D9D83828D2360FCE96B0 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 54032 IP address blocks: 72.233.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d9:d8:38:28:d2:36:0f:ce:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=f612b78e-3144-4010-aee0-cd8391795152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:50:9d:7b:99:61:d7:a2:92:b5:6e:7f:fa: d7:dd:91:dd:f4:26:1f:f3:7c:be:27:24:92:8e:47: ad:ce:dd:d4:54:9f:a9:39:83:b3:75:dc:78:a5:88: 3f:14:19:ac:c5:f1:f6:cb:24:4b:76:dc:28:88:cb: 3f:e7:5b:71:a7:90:fc:17:af:95:79:e7:ab:0d:06: ed:9b:90:0b:18:88:8a:a6:35:80:eb:e1:b2:cb:69: 99:37:a2:6c:1a:48:8b:d4:54:17:f9:93:93:64:30: 0e:b5:b2:f9:1b:e9:a4:74:02:4f:d5:21:17:8d:4e: c2:89:64:a6:76:ce:46:be:b1:3c:13:be:e7:fb:19: 4f:c5:dd:1c:b9:bd:d2:ba:43:d9:b9:8e:67:84:0d: 6d:70:b0:c9:a9:c1:07:7c:bf:e8:1f:b4:d7:0a:b2: 7b:a2:a0:ac:e6:c2:86:00:88:5e:68:13:2d:d6:0f: d1:3b:2b:45:8f:37:96:21:aa:a4:08:93:1d:d3:fa: 5f:79:c2:a2:06:12:60:fe:97:fa:d2:3d:86:53:85: 31:94:ff:d6:21:5b:09:e6:d9:3a:72:b4:0d:1c:26: 95:41:bc:45:6d:71:3d:cb:83:d7:e1:3e:03:d6:37: 92:c1:9a:d9:55:29:e8:e0:57:96:c8:60:ef:fc:4b: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8B:BA:83:D6:64:75:FD:99:B7:74:6C:97:C0:D0:2B:71:C3:45:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b6:1b:b3:e3:94:68:76:7e:7d:b7:c4:1b:75:4a:44:4f:1f: 52:f0:d7:a7:cd:ae:58:d8:af:71:6f:55:04:80:0d:6e:ca:94: cd:23:ac:a0:02:0a:af:b6:85:e5:72:d1:df:ed:ac:f2:e5:27: 46:46:bc:ef:64:0e:75:bf:e4:fc:d2:4c:e0:5b:16:d4:ba:d9: 6a:3f:aa:f4:d2:03:36:c8:60:d5:46:02:98:b4:16:a7:2a:26: fd:75:42:f1:eb:bd:da:d7:10:c2:4b:ba:75:01:c8:10:33:e7: 41:95:7c:56:67:77:33:16:4b:7f:fb:57:d5:ef:0d:ea:e2:c7: a1:5e:ff:53:c9:f8:0b:31:d3:76:82:5e:ab:50:08:8f:ac:aa: c3:6c:9e:f1:28:22:04:e9:98:57:55:d6:15:a1:f2:db:91:d4: 51:7f:28:35:bd:76:1c:ff:ea:46:15:4b:a5:79:65:ef:a8:55: 62:cd:7f:f9:18:96:a2:ec:53:09:4d:62:4f:82:b6:34:7f:f3: aa:8c:92:57:67:91:fb:bd:6a:20:b6:c1:9f:54:1e:05:73:b1: d9:88:9f:05:26:82:c5:08:83:63:6a:a1:9b:56:c4:42:00:70: 7a:fe:b3:2e:1d:fb:4b:cb:dd:0a:70:83:62:b1:23:3c:3c:d2: f0:4d:e5:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dnYOCjSNg/OlrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZjYxMmI3OGUtMzE0NC00MDEwLWFlZTAtY2Q4MzkxNzk1MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1QnXuZYdeikrVuf/rX3ZHd9CYf83y+JySS jketzt3UVJ+pOYOzddx4pYg/FBmsxfH2yyRLdtwoiMs/51txp5D8F6+VeeerDQbt m5ALGIiKpjWA6+Gyy2mZN6JsGkiL1FQX+ZOTZDAOtbL5G+mkdAJP1SEXjU7CiWSm ds5GvrE8E77n+xlPxd0cub3SukPZuY5nhA1tcLDJqcEHfL/oH7TXCrJ7oqCs5sKG AIheaBMt1g/ROytFjzeWIaqkCJMd0/pfecKiBhJg/pf60j2GU4UxlP/WIVsJ5tk6 crQNHCaVQbxFbXE9y4PX4T4D1jeSwZrZVSno4FeWyGDv/EuTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6LuoPWZHX9mbd0bJfA0Ctxw0V7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDI2OTVhMWEtNzkwNS0z MmMzLTgzMDUtNmE5YzU3OWFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH62G7PjlGh2fn23xBt1SkRPH1Lw16fNrljYr3FvVQSADW7KlM0jrKAC Cq+2heVy0d/trPLlJ0ZGvO9kDnW/5PzSTOBbFtS62Wo/qvTSAzbIYNVGApi0Fqcq Jv11QvHrvdrXEMJLunUByBAz50GVfFZndzMWS3/7V9XvDerix6Fe/1PJ+Asx03aC XqtQCI+sqsNsnvEoIgTpmFdV1hWh8tuR1FF/KDW9dhz/6kYVS6V5Ze+oVWLNf/kY lqLsUwlNYk+CtjR/86qMkldnkfu9aiC2wZ9UHgVzsdmInwUmgsUIg2NqoZtWxEIA cHr+sy4d+0vL3Qpwg2KxIzw80vBN5bE= -----END CERTIFICATE-----Generated at Thu Aug 13 10:01:14 2026 by rpki-client