$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa File: a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa (raw, json) Hash identifier: M0qAuptj2DNzUcKWJIV8/Dx7wO+mHO+xWXFrbMA/ePU= Subject key identifier: 11:F6:00:FD:6B:44:53:2D:99:CE:6A:63:97:BC:F8:22:02:49:05:80 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D2644B09A0117CFDBBA966DA8 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 200017 IP address blocks: 72.14.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b0:9a:01:17:cf:db:ba:96:6d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=6d7e9fd2-2c1d-4148-9c54-1f1d6a4f43b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:91:45:de:29:51:4c:5a:e1:58:f0:a7:c4: 08:77:d5:3b:00:09:bc:10:9d:b3:ce:52:86:55:a0: 72:9b:49:f6:4f:55:53:2d:e9:c7:c2:d6:0a:0d:a2: c0:7e:2c:6c:32:07:83:8b:67:63:c8:71:53:07:59: 7a:50:4d:08:68:18:11:d6:fe:5a:46:1e:50:e9:18: 5f:05:ae:5a:ee:d7:fd:94:83:19:2c:a4:37:f6:b2: 37:b8:35:85:48:77:0b:1d:81:8a:94:82:3e:3a:0d: 50:72:4d:94:71:99:09:58:e7:2c:f2:b1:d0:e3:11: 7b:ce:c0:73:4d:d9:15:71:4d:a8:8d:fc:8b:16:4a: da:5a:cb:d9:12:6e:53:bf:af:52:b0:31:ad:3c:17: e0:a0:39:09:92:c4:23:ae:91:56:12:79:29:e1:fc: 88:d6:61:66:ec:ae:55:9f:14:2c:f1:f2:c0:97:a6: e6:22:ce:d5:10:fa:b4:bc:c3:89:9e:61:a4:39:52: 93:75:33:00:be:34:8a:fc:74:00:85:d3:bc:4e:4c: 93:03:1b:f6:54:bd:f5:5a:d3:7b:17:d4:4c:e0:ca: fc:48:34:29:c1:7e:00:7c:c0:9c:c6:f5:43:8a:44: d4:52:e4:7f:27:85:ac:20:a8:5f:fc:4a:d3:e8:b2: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:00:FD:6B:44:53:2D:99:CE:6A:63:97:BC:F8:22:02:49:05:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/a389dbd4-a2d7-3ac1-9484-5d1b64728900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b1:0b:30:16:d7:9d:90:0a:77:20:e7:79:7b:95:e0:63:c9: 32:51:ed:4d:65:a7:1b:9d:93:69:78:28:81:fc:b0:18:98:b3: 86:6e:ee:f4:de:7b:5f:5e:e2:bd:9c:c3:60:2f:87:20:6c:ed: 6f:03:d9:69:a0:8a:c6:43:4f:bf:86:d8:d4:5b:83:a3:db:f7: 95:7d:60:4d:7c:e0:d1:7f:b6:4b:aa:fc:ae:fc:d5:c8:a8:54: 53:e5:af:f0:15:ed:ac:2c:3d:50:55:ea:50:ef:ec:92:80:19: 3b:1d:2a:00:d2:57:62:8c:2a:c4:dc:94:98:49:a2:0f:60:f6: 76:01:28:4f:52:a4:9e:96:bb:a6:7b:41:02:84:d5:2e:c6:0d: 6d:5c:c1:e9:97:8f:26:e6:6b:b9:84:3b:af:1d:68:e1:64:40: 03:2a:cd:34:eb:85:8b:05:7e:73:d0:d8:2e:32:3a:86:5d:39: 93:2a:15:0d:d2:a2:cf:86:e7:b0:8b:6e:e9:83:bd:b6:26:98: ce:e5:53:c9:44:94:4f:7d:00:44:c9:4b:ce:3a:fb:30:3e:1f: dd:69:8f:dc:26:81:f4:d9:7d:b9:37:e9:d1:91:f3:a2:10:1b: cf:ef:e3:fc:f1:0e:83:36:0e:03:e1:0a:dc:bc:8d:95:53:c8: 5c:e0:83:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLCaARfP27qWbagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NmQ3ZTlmZDItMmMxZC00MTQ4LTljNTQtMWYxZDZhNGY0M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG2RRd4pUUxa4Vjwp8QId9U7AAm8EJ2zzlKG VaBym0n2T1VTLenHwtYKDaLAfixsMgeDi2djyHFTB1l6UE0IaBgR1v5aRh5Q6Rhf Ba5a7tf9lIMZLKQ39rI3uDWFSHcLHYGKlII+Og1Qck2UcZkJWOcs8rHQ4xF7zsBz TdkVcU2ojfyLFkraWsvZEm5Tv69SsDGtPBfgoDkJksQjrpFWEnkp4fyI1mFm7K5V nxQs8fLAl6bmIs7VEPq0vMOJnmGkOVKTdTMAvjSK/HQAhdO8TkyTAxv2VL31WtN7 F9RM4Mr8SDQpwX4AfMCcxvVDikTUUuR/J4WsIKhf/ErT6LKo/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH2AP1rRFMtmc5qY5e8+CICSQWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYTM4OWRiZDQtYTJkNy0z YWMxLTk0ODQtNWQxYjY0NzI4OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCxCzAW152QCncg53l7leBjyTJR7U1lpxudk2l4KIH8sBiYs4Zu7vTe e19e4r2cw2AvhyBs7W8D2WmgisZDT7+G2NRbg6Pb95V9YE184NF/tkuq/K781cio VFPlr/AV7awsPVBV6lDv7JKAGTsdKgDSV2KMKsTclJhJog9g9nYBKE9SpJ6Wu6Z7 QQKE1S7GDW1cwemXjybma7mEO68daOFkQAMqzTTrhYsFfnPQ2C4yOoZdOZMqFQ3S os+G57CLbumDvbYmmM7lU8lElE99AETJS846+zA+H91pj9wmgfTZfbk36dGR86IQ G8/v4/zxDoM2DgPhCty8jZVTyFzgg18= -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:10 2026 by rpki-client