$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa File: a12f5a20-4630-3449-b490-92e7eed140c1.roa (raw, json) Hash identifier: fmAkPB9IJM0vqOYsoXnkq9K6wh+ibfrKqe5efM0FYxg= Subject key identifier: 38:C8:EE:E5:B6:5B:1A:C4:B1:14:D6:31:9E:8D:F2:5F:D1:11:9D:49 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D2644BF4A0D63081B7FCF0900 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 834 IP address blocks: 72.14.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bf:4a:0d:63:08:1b:7f:cf:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=2f7f2279-fcd3-4d80-8507-104a66220cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3a:48:e3:9c:6c:13:1d:e5:6f:2e:b2:d7:e3: ef:e0:00:cb:b1:c4:f0:5e:77:9f:cb:81:83:e5:3e: b6:11:08:36:32:4a:10:d6:e8:87:66:d8:18:39:58: af:c0:bd:f1:e4:d2:e5:e2:f7:24:3a:6b:6f:8a:f5: 52:65:30:c3:32:79:bc:1f:17:76:6c:1a:72:af:d3: e4:29:21:5d:da:ea:d8:34:fd:be:78:43:ef:50:8d: e7:26:27:f4:4c:3b:85:97:9b:0d:6a:af:e2:77:d5: d7:a3:bd:8a:0a:b1:14:6e:68:a0:3b:13:e0:96:d2: 68:49:d1:a3:63:26:15:46:f3:36:d4:fc:bc:64:82: f7:ef:74:0a:d0:55:65:7d:1b:9f:8f:a3:77:55:fb: 1e:d1:11:a9:e5:c7:21:80:2f:5f:b0:96:0c:43:74: 43:d7:e9:98:36:75:87:cf:b3:0d:74:3f:5c:85:39: 58:2d:70:80:ec:f7:9f:fd:a7:df:1e:c2:0b:be:a3: fe:1e:7c:a6:c2:e1:f9:9e:3d:a5:6b:f7:c5:7f:24: 9a:e6:98:37:3b:bf:b0:c1:57:59:00:61:bb:93:a1: c4:27:b2:ba:bc:d4:8e:f4:dc:0c:5f:d5:c5:69:b4: f0:d6:45:3c:c9:c1:80:27:cd:73:72:5f:7f:e3:16: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C8:EE:E5:B6:5B:1A:C4:B1:14:D6:31:9E:8D:F2:5F:D1:11:9D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a12f5a20-4630-3449-b490-92e7eed140c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cb:5d:9b:22:1f:b8:50:bf:29:f7:f0:a6:de:5a:b8:ff:70: 04:7b:a2:50:27:41:9d:32:be:de:b0:1d:66:f8:1f:46:61:06: f8:53:43:ef:5e:22:64:3d:75:1d:14:e6:c2:86:35:fe:d5:1f: ad:1c:7e:5e:22:17:c5:05:71:60:58:a1:f1:da:2d:7b:91:a8: aa:93:cb:10:0e:c7:2c:3d:a2:d5:e4:aa:c5:a3:97:72:08:e1: 76:03:00:89:da:48:81:8e:92:90:e9:45:48:4d:35:2e:9a:64: 01:6f:f7:5b:7a:50:1f:aa:59:6d:b1:66:17:93:b6:2b:25:bc: 69:8d:ec:d0:76:29:87:b9:a9:22:cc:73:05:a7:af:2b:d7:68: 6b:96:ce:b8:f8:dc:e8:04:19:b4:f6:cc:b2:14:bf:95:e7:cd: 37:98:b3:7d:22:d8:c5:4b:7a:3b:29:08:65:e7:25:b6:70:3b: dc:f8:49:65:4d:33:5c:b8:ae:a5:2a:ef:8c:c6:a8:6e:4f:4b: dc:64:9f:d6:97:30:12:d9:27:c7:39:d2:62:70:2a:3c:a4:25: ba:42:6e:9a:a1:7a:26:cf:8d:75:fe:37:50:cf:3a:27:7c:e0: ce:30:93:aa:f6:56:a6:60:4a:21:b5:4d:9f:39:5f:a7:16:bf: fe:59:0f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRL9KDWMIG3/PCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MmY3ZjIyNzktZmNkMy00ZDgwLTg1MDctMTA0YTY2MjIwY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTpI45xsEx3lby6y1+Pv4ADLscTwXnefy4GD 5T62EQg2MkoQ1uiHZtgYOVivwL3x5NLl4vckOmtvivVSZTDDMnm8Hxd2bBpyr9Pk KSFd2urYNP2+eEPvUI3nJif0TDuFl5sNaq/id9XXo72KCrEUbmigOxPgltJoSdGj YyYVRvM21Py8ZIL373QK0FVlfRufj6N3Vfse0RGp5cchgC9fsJYMQ3RD1+mYNnWH z7MNdD9chTlYLXCA7Pef/affHsILvqP+HnymwuH5nj2la/fFfySa5pg3O7+wwVdZ AGG7k6HEJ7K6vNSO9NwMX9XFabTw1kU8ycGAJ81zcl9/4xZPGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjI7uW2WxrEsRTWMZ6N8l/REZ1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTEyZjVhMjAtNDYzMC0z NDQ5LWI0OTAtOTJlN2VlZDE0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7LXZsiH7hQvyn38KbeWrj/cAR7olAnQZ0yvt6wHWb4H0ZhBvhTQ+9e ImQ9dR0U5sKGNf7VH60cfl4iF8UFcWBYofHaLXuRqKqTyxAOxyw9otXkqsWjl3II 4XYDAInaSIGOkpDpRUhNNS6aZAFv91t6UB+qWW2xZheTtislvGmN7NB2KYe5qSLM cwWnryvXaGuWzrj43OgEGbT2zLIUv5XnzTeYs30i2MVLejspCGXnJbZwO9z4SWVN M1y4rqUq74zGqG5PS9xkn9aXMBLZJ8c50mJwKjykJbpCbpqheibPjXX+N1DPOid8 4M4wk6r2VqZgSiG1TZ85X6cWv/5ZD50= -----END CERTIFICATE-----Generated at Thu Mar 26 23:09:10 2026 by rpki-client