$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa File: a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa (raw, json) Hash identifier: zQG6NfZz8s+l6WMGsy2rx7iy8j8plmBQmrcibU6+7JI= Subject key identifier: E0:54:32:20:AD:96:2D:A1:B7:22:E5:B8:04:F1:8B:DF:A7:BC:F1:1D Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584DF210B8B8685A025779847680 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 33507 IP address blocks: 72.59.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:b8:b8:68:5a:02:57:79:84:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=8e695d41-ea15-4111-92f9-12b4cdd6c5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:93:54:0e:09:51:2c:30:0c:3c:43:c1:cb: 43:59:b5:62:e7:84:1e:0a:4c:dd:d5:d5:28:3c:88: 0e:0b:82:1e:e6:b2:e9:13:b4:74:fe:d9:b4:31:ed: 00:3f:e3:6e:03:70:ef:e4:26:4a:3b:bc:94:62:18: eb:b4:51:9b:df:99:10:30:9b:38:e0:b1:90:d9:79: e0:84:d1:27:ee:22:f2:3a:19:e4:d8:55:fc:5b:62: 0f:62:73:e9:9e:8a:28:cd:28:85:9b:fc:d7:91:0b: 12:14:0b:c9:75:45:5c:e9:41:fc:3f:1d:bf:8c:1c: 8b:6c:12:b2:e9:3b:9f:eb:37:34:33:aa:92:23:a3: f6:63:98:05:ae:24:52:cb:07:53:a5:76:be:fa:4b: 74:61:d4:4c:b0:da:a0:f6:3c:d9:73:61:1a:4f:f5: 49:eb:47:a1:fd:66:a8:15:dc:41:71:d0:1d:6c:41: 58:97:51:7d:58:c7:41:2e:74:a1:9e:8b:b3:d2:68: 78:3b:fb:3a:3a:7a:53:b0:b0:e4:44:bf:5a:43:d5: c8:bc:39:42:4b:d2:9f:48:38:fa:86:5e:95:01:52: ae:28:2f:93:58:d3:69:85:63:8a:41:7a:61:8c:01: 0a:18:ef:9d:e7:31:c9:55:ee:27:98:c1:d8:c8:ee: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:54:32:20:AD:96:2D:A1:B7:22:E5:B8:04:F1:8B:DF:A7:BC:F1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/a31ae8e3-cd9e-3192-a69c-cb944f3762e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d0:0e:39:00:0a:a0:bf:2e:41:3e:07:33:4f:46:ac:16:21: 3f:4d:4c:15:0e:25:d0:9b:ac:22:41:5c:a2:d6:f7:11:c2:bd: 77:ae:7a:b8:d3:26:d3:24:68:d4:37:ff:0f:2b:27:b6:eb:d6: 21:c8:5a:4f:b4:c9:ea:55:ea:7a:3e:b4:56:c7:5e:d4:0e:82: 59:0a:80:04:a2:ad:cf:d5:88:53:3f:46:07:43:95:20:99:1f: f7:cc:79:2a:a2:26:e0:3d:70:42:64:9b:f1:f2:cc:c6:93:30: 32:e8:fb:52:64:7e:99:1e:4c:0d:a4:d2:a9:9f:ab:d8:96:3e: 91:8e:46:63:51:4c:ea:c5:79:fa:a6:13:3a:36:21:68:d5:19: 0c:60:40:42:6c:98:c3:69:dc:4e:f2:0f:4c:31:ce:7a:7a:b5: 68:c1:55:c7:dc:d0:98:f2:63:3d:18:22:8e:13:3b:81:df:d0: 4b:c8:9b:27:2c:03:7c:85:fb:9b:bb:af:86:7d:f2:d5:2a:58: f9:90:84:ac:7b:e6:73:2c:d2:10:00:62:1a:00:ef:5a:b1:e0: 5a:42:be:76:d7:0e:22:a3:16:9a:4d:a6:b7:b4:a3:64:18:2e: 6f:c1:75:0f:97:b2:f2:54:bc:a8:cb:05:0d:0b:fa:b6:b5:72: bf:3f:37:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yELi4aFoCV3mEdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk OGU2OTVkNDEtZWExNS00MTExLTkyZjktMTJiNGNkZDZjNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S2TVA4JUSwwDDxDwctDWbVi54QeCkzd1dUo PIgOC4Ie5rLpE7R0/tm0Me0AP+NuA3Dv5CZKO7yUYhjrtFGb35kQMJs44LGQ2Xng hNEn7iLyOhnk2FX8W2IPYnPpnooozSiFm/zXkQsSFAvJdUVc6UH8Px2/jByLbBKy 6Tuf6zc0M6qSI6P2Y5gFriRSywdTpXa++kt0YdRMsNqg9jzZc2EaT/VJ60eh/Wao FdxBcdAdbEFYl1F9WMdBLnShnouz0mh4O/s6OnpTsLDkRL9aQ9XIvDlCS9KfSDj6 hl6VAVKuKC+TWNNphWOKQXphjAEKGO+d5zHJVe4nmMHYyO6w9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBUMiCtli2htyLluATxi9+nvPEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvYTMxYWU4ZTMtY2Q5ZS0z MTkyLWE2OWMtY2I5NDRmMzc2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSDvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfQDjkACqC/LkE+BzNPRqwWIT9NTBUOJdCbrCJBXKLW9xHCvXeuerjT JtMkaNQ3/w8rJ7br1iHIWk+0yepV6no+tFbHXtQOglkKgASirc/ViFM/RgdDlSCZ H/fMeSqiJuA9cEJkm/HyzMaTMDLo+1JkfpkeTA2k0qmfq9iWPpGORmNRTOrFefqm Ezo2IWjVGQxgQEJsmMNp3E7yD0wxznp6tWjBVcfc0JjyYz0YIo4TO4Hf0EvImycs A3yF+5u7r4Z98tUqWPmQhKx75nMs0hAAYhoA71qx4FpCvnbXDiKjFppNpre0o2QY Lm/BdQ+XsvJUvKjLBQ0L+ra1cr8/N0o= -----END CERTIFICATE-----Generated at Wed Jun 3 20:14:16 2026 by rpki-client