$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa File: 982467e0-bb30-39d1-b029-5277f662fd9c.roa (raw, json) Hash identifier: ZFfssJFR0xQ/NMvHf6x2b1ovLvrPO22TYybGyeM1zao= Subject key identifier: E2:D9:10:D2:EB:C8:24:7C:31:A5:11:52:DC:19:95:33:85:F4:51:FB Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584D2A74F8BDD88DA72C3E4E69E0 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 72.0.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f8:bd:d8:8d:a7:2c:3e:4e:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5ab67db6-e36b-4b49-abc5-692472400136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:be:e4:27:10:5f:47:82:a0:41:b7:3e:c5: 14:cb:f0:41:1c:05:58:a4:56:26:eb:6a:d5:99:33: a8:4f:e0:37:fb:74:c0:49:55:5b:0e:9a:3b:3a:b2: cb:0a:f2:a8:71:a0:84:8c:92:0c:1f:fc:60:f7:c2: d1:32:a8:fd:56:65:eb:58:74:a5:8d:9f:67:d2:2f: cd:bd:6a:86:4d:7e:cc:0a:1e:6e:3d:4b:32:99:17: 3e:b0:15:d5:fc:29:00:4c:85:0e:92:57:79:b0:e6: 54:70:b6:13:29:b5:27:65:9e:15:38:04:4d:38:e6: 6c:55:c5:1c:08:34:b3:4c:6b:8c:15:87:08:80:4e: dc:fb:1e:7b:b2:4b:16:4d:fc:12:d0:91:b8:93:98: 2e:d3:80:0c:ae:b1:19:e7:0f:8a:1f:0d:2d:f7:d0: 79:d4:9e:4f:a0:29:e1:fb:1a:b8:5d:88:64:ef:d0: 63:9c:0f:e6:27:a2:fc:1b:21:72:c4:b1:f4:f0:0b: 13:50:81:71:62:44:e0:9a:13:b0:c0:b3:58:d6:43: 83:b1:63:cc:43:56:8d:ba:91:63:b3:c3:4d:ea:1c: 85:dd:f9:61:e1:fb:22:8f:fb:35:bd:bb:c9:58:4a: 38:4a:f6:75:60:b2:16:4b:a7:14:9e:f0:c1:52:20: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:10:D2:EB:C8:24:7C:31:A5:11:52:DC:19:95:33:85:F4:51:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:67:43:d2:40:29:5a:b4:ae:af:ca:24:0a:a0:e6:6d:97:5e: 03:af:a5:75:28:fb:07:30:1d:74:ca:f0:11:27:ea:1d:16:85: ae:d3:0f:eb:92:92:1a:f0:b0:5c:95:22:8b:0b:ac:8a:10:9b: 58:69:4f:45:ff:29:9f:ab:4f:46:2d:40:4f:f4:fb:05:eb:52: 1a:a6:79:95:d6:4a:f9:d2:ad:b0:6c:bd:a1:25:37:42:62:60: 0c:a2:d1:7f:3a:16:6e:25:eb:6d:da:37:02:e5:cf:ec:c8:f9: db:c9:24:bd:fb:94:34:31:a1:93:c6:25:8c:e0:cb:95:09:3f: ce:7c:1e:46:47:65:97:d2:38:d2:ae:3a:60:41:98:2f:63:a9: 8b:0a:83:5d:47:e5:f5:52:4b:41:1d:04:bc:b1:27:a5:1a:f5: dd:1c:91:c9:51:2e:97:1e:48:14:80:62:ef:81:44:7f:4f:71: b8:18:55:3c:1d:32:ef:e9:97:f5:74:fa:58:dd:f5:b4:31:32: 89:ad:f2:59:c6:21:e2:25:09:09:d6:08:2b:4f:45:3c:84:e9: a8:2a:70:5a:d2:b7:5f:cf:d1:53:42:77:f7:94:b0:71:24:94: 70:79:75:6f:26:59:94:80:da:95:34:50:26:89:52:c6:df:d7: e5:f7:0d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPi92I2nLD5OaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NWFiNjdkYjYtZTM2Yi00YjQ5LWFiYzUtNjkyNDcyNDAwMTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5y+5CcQX0eCoEG3PsUUy/BBHAVYpFYm62rV mTOoT+A3+3TASVVbDpo7OrLLCvKocaCEjJIMH/xg98LRMqj9VmXrWHSljZ9n0i/N vWqGTX7MCh5uPUsymRc+sBXV/CkATIUOkld5sOZUcLYTKbUnZZ4VOARNOOZsVcUc CDSzTGuMFYcIgE7c+x57sksWTfwS0JG4k5gu04AMrrEZ5w+KHw0t99B51J5PoCnh +xq4XYhk79BjnA/mJ6L8GyFyxLH08AsTUIFxYkTgmhOwwLNY1kODsWPMQ1aNupFj s8NN6hyF3flh4fsij/s1vbvJWEo4SvZ1YLIWS6cUnvDBUiABbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLZENLryCR8MaURUtwZlTOF9FH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvOTgyNDY3ZTAtYmIzMC0z OWQxLWIwMjktNTI3N2Y2NjJmZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASADuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9nQ9JAKVq0rq/KJAqg5m2XXgOvpXUo+wcwHXTK8BEn6h0Wha7TD+uS khrwsFyVIosLrIoQm1hpT0X/KZ+rT0YtQE/0+wXrUhqmeZXWSvnSrbBsvaElN0Ji YAyi0X86Fm4l623aNwLlz+zI+dvJJL37lDQxoZPGJYzgy5UJP858HkZHZZfSONKu OmBBmC9jqYsKg11H5fVSS0EdBLyxJ6Ua9d0ckclRLpceSBSAYu+BRH9PcbgYVTwd Mu/pl/V0+ljd9bQxMomt8lnGIeIlCQnWCCtPRTyE6agqcFrSt1/P0VNCd/eUsHEk lHB5dW8mWZSA2pU0UCaJUsbf1+X3DYs= -----END CERTIFICATE-----Generated at Thu Mar 19 12:32:20 2026 by rpki-client