$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa File: 28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa (raw, json) Hash identifier: MjWBkj6qH9imAxSGd5fHUdtC/4RVxE/TwZyeT6AgmkI= Subject key identifier: 9F:D1:54:C8:3E:E6:BA:6A:9D:14:5B:57:51:20:A5:5E:D4:D9:16:79 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D3F64EFDA80DC29E56C591200 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 63023 IP address blocks: 72.14.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:da:80:dc:29:e5:6c:59:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=a6532922-8206-4aca-ab8f-f020a398cef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2c:9f:f2:8e:36:a7:eb:7d:18:1b:38:4e:04: e5:eb:f8:51:b1:1a:69:1f:52:2d:df:1e:45:ae:2c: 87:77:91:fe:12:8d:2a:64:87:06:02:d4:d0:00:8a: 0d:aa:78:fe:05:1b:ef:96:79:40:10:de:c3:30:ca: b1:b6:5a:59:0b:b3:13:8a:44:0e:b3:bc:82:aa:57: de:ea:7f:e9:48:6f:1c:30:28:db:da:13:77:9b:32: d5:74:79:61:37:44:24:fa:aa:73:63:be:ef:31:66: f2:06:16:b0:e5:d6:5d:d1:15:04:99:5c:22:62:ad: 56:ab:54:2c:33:8d:5e:13:de:8d:54:c4:df:53:f0: 9a:d1:ac:60:5c:7a:a7:31:19:b4:fe:ab:61:5f:a0: 3e:e6:28:42:0a:f1:07:32:50:f8:37:5d:5c:0b:19: 0f:4f:94:7e:4e:4e:b8:17:f8:5e:93:d1:17:c6:30: f4:a4:58:cc:79:34:06:d5:11:f6:30:05:25:11:f9: 50:a3:10:d6:4d:5f:31:b8:28:08:4c:de:c9:58:0c: 29:35:f3:76:ea:85:bc:fa:95:e5:aa:76:47:b2:3b: dd:b7:e0:64:5f:21:69:7b:76:9f:50:53:a0:6a:d8: 2c:40:ae:96:38:58:4b:2b:66:ed:f0:55:70:6b:45: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:54:C8:3E:E6:BA:6A:9D:14:5B:57:51:20:A5:5E:D4:D9:16:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/28e420a5-0f3c-3e64-9dc4-25a946e286fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a3:04:f0:09:13:39:cd:79:6f:54:27:b8:bc:c2:68:f0:10: 2c:83:09:19:68:3a:af:f2:79:39:0c:68:ae:4e:99:c0:d7:34: c1:eb:c0:e8:b6:05:cb:2a:77:3a:b5:66:0e:02:36:56:3e:5f: d9:14:07:dc:c2:6e:51:f1:c6:80:60:09:a4:8b:02:83:96:3d: 53:ec:45:99:7a:4f:1d:ac:c9:02:c5:84:b6:e4:d1:e5:b8:50: 5d:23:ea:71:a5:e1:88:11:3e:2c:d9:0c:4a:50:53:8e:5b:e2: 21:2f:a3:19:2d:2b:76:23:fa:2a:4c:62:e2:a2:10:16:71:4b: 1f:de:ba:97:79:df:28:15:87:d1:5a:e1:5c:58:05:a0:aa:0d: 26:3b:da:c2:d7:06:92:2f:b2:b9:f3:5b:2b:65:91:3e:d7:3f: cc:15:e6:5f:50:8f:2e:1b:f9:43:d5:9b:c0:d6:97:e8:09:1f: 56:08:f7:39:48:73:da:fe:8e:22:e8:cc:97:69:69:2f:af:63: 2f:a0:0a:85:bd:f3:50:f9:85:11:e3:ec:68:6e:4e:04:79:2b: f2:fc:93:25:3c:18:e6:95:7f:d8:4e:5e:35:ee:37:03:87:58: 14:68:e9:11:22:fc:64:dd:a4:e3:8f:dc:fb:d0:3d:27:48:bc: d6:28:ec:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO/agNwp5WxZEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YTY1MzI5MjItODIwNi00YWNhLWFiOGYtZjAyMGEzOThjZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSyf8o42p+t9GBs4TgTl6/hRsRppH1It3x5F riyHd5H+Eo0qZIcGAtTQAIoNqnj+BRvvlnlAEN7DMMqxtlpZC7MTikQOs7yCqlfe 6n/pSG8cMCjb2hN3mzLVdHlhN0Qk+qpzY77vMWbyBhaw5dZd0RUEmVwiYq1Wq1Qs M41eE96NVMTfU/Ca0axgXHqnMRm0/qthX6A+5ihCCvEHMlD4N11cCxkPT5R+Tk64 F/hek9EXxjD0pFjMeTQG1RH2MAUlEflQoxDWTV8xuCgITN7JWAwpNfN26oW8+pXl qnZHsjvdt+BkXyFpe3afUFOgatgsQK6WOFhLK2bt8FVwa0WRkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/RVMg+5rpqnRRbV1EgpV7U2RZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMjhlNDIwYTUtMGYzYy0z ZTY0LTlkYzQtMjVhOTQ2ZTI4NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByjBPAJEznNeW9UJ7i8wmjwECyDCRloOq/yeTkMaK5OmcDXNMHrwOi2 Bcsqdzq1Zg4CNlY+X9kUB9zCblHxxoBgCaSLAoOWPVPsRZl6Tx2syQLFhLbk0eW4 UF0j6nGl4YgRPizZDEpQU45b4iEvoxktK3Yj+ipMYuKiEBZxSx/eupd53ygVh9Fa 4VxYBaCqDSY72sLXBpIvsrnzWytlkT7XP8wV5l9Qjy4b+UPVm8DWl+gJH1YI9zlI c9r+jiLozJdpaS+vYy+gCoW981D5hRHj7GhuTgR5K/L8kyU8GOaVf9hOXjXuNwOH WBRo6REi/GTdpOOP3PvQPSdIvNYo7FY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:23 2026 by rpki-client