$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa File: ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa (raw, json) Hash identifier: vLAE/Rm4aR+jG0dWK9eQd60fbNNQV5TuZkw7vYqS8Uc= Subject key identifier: 81:B7:85:F8:96:04:79:72:25:FB:33:E5:E7:F8:99:F2:32:7D:DD:FA Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D343A11628E355B79BAB4A3A0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 151872 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:11:62:8e:35:5b:79:ba:b4:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=8d6cb249-214f-4cd5-a767-cfa963410c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:dc:1c:d0:79:f4:e0:3d:f1:0a:69:9c:d1: 6a:58:b4:38:f2:50:2b:05:c4:12:a3:c7:ac:d1:e2: a5:21:3e:a5:bb:03:9b:0d:db:62:63:5f:03:42:1d: 7b:c5:7c:ae:f4:b6:0f:e3:59:ae:8a:c1:22:2c:db: 12:77:d3:ad:e8:a8:03:3c:74:fe:01:6a:f1:99:00: d5:ca:85:09:24:87:72:ce:70:15:37:d2:04:34:d9: 27:48:30:33:16:cc:63:a2:22:fd:90:0f:e3:99:c8: 59:20:c2:08:5a:6f:fb:22:fb:98:28:ef:90:16:73: fc:21:f1:bf:f4:b5:82:58:99:e4:96:5f:fe:be:22: 93:59:29:f8:f5:c0:6c:83:af:83:8c:ad:7c:ba:b1: e3:b6:49:8e:d1:34:f2:50:80:77:8d:b0:78:36:ba: 98:64:a9:b0:85:f9:93:06:3b:56:ca:01:a4:5e:cb: 8b:73:d4:c2:34:12:35:92:08:c6:71:0e:0b:84:01: 60:cd:df:9a:44:ac:d6:1c:a2:4c:9d:d1:7b:b9:82: d1:af:3a:43:95:b3:59:a7:99:de:11:42:f2:a8:10: 3b:db:d0:34:f2:43:2e:70:73:b5:5c:84:50:36:30: b1:3e:e9:f6:f4:13:5f:59:7b:0c:86:50:d0:36:f9: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B7:85:F8:96:04:79:72:25:FB:33:E5:E7:F8:99:F2:32:7D:DD:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:67:f1:ab:b1:b8:36:f3:ab:56:02:2c:22:27:d7:1a:df:f8: ad:e0:78:70:b3:ab:ef:1f:54:bc:fa:d7:57:92:db:36:a1:b5: 0b:f7:23:34:0a:1a:63:d6:89:5a:a1:a7:16:af:72:2c:00:2f: fe:4c:e3:51:fe:ee:b6:71:4a:4c:c7:6d:14:48:7f:00:8f:3f: b0:9b:46:12:fa:cd:18:47:1b:cc:a5:25:96:c0:b2:fa:68:3b: d5:74:4f:60:3b:c9:00:9c:39:f9:bc:d9:f7:3e:ce:05:36:83: 1f:9e:36:62:f2:c7:b8:8c:24:57:2b:fe:a8:35:65:2d:c9:6e: fd:5a:69:c0:2d:d3:50:ed:de:7f:38:7e:a0:fa:81:d2:7d:9c: 9c:21:f0:24:58:be:c8:74:b1:60:a3:26:12:bc:e6:4c:1d:8e: ee:56:15:38:c2:57:c6:1c:db:22:38:96:a4:00:4a:02:12:a8: 2d:45:dd:e7:9d:30:0b:a7:d5:54:d6:25:91:45:88:05:be:69: 8c:4b:76:22:72:cb:a0:bd:02:93:01:01:8e:6c:c3:e0:00:ee: 1f:7c:51:2a:29:30:8e:63:78:85:dd:71:b2:53:e8:05:44:03: 84:01:56:cf:d2:93:06:2f:ac:ad:0e:9b:b1:36:f4:9e:cf:ea: 4f:91:85:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhFijjVbebq0o6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk OGQ2Y2IyNDktMjE0Zi00Y2Q1LWE3NjctY2ZhOTYzNDEwYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZfcHNB59OA98QppnNFqWLQ48lArBcQSo8es 0eKlIT6luwObDdtiY18DQh17xXyu9LYP41muisEiLNsSd9Ot6KgDPHT+AWrxmQDV yoUJJIdyznAVN9IENNknSDAzFsxjoiL9kA/jmchZIMIIWm/7IvuYKO+QFnP8IfG/ 9LWCWJnkll/+viKTWSn49cBsg6+DjK18urHjtkmO0TTyUIB3jbB4NrqYZKmwhfmT BjtWygGkXsuLc9TCNBI1kgjGcQ4LhAFgzd+aRKzWHKJMndF7uYLRrzpDlbNZp5ne EULyqBA729A08kMucHO1XIRQNjCxPun29BNfWXsMhlDQNvm/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG3hfiWBHlyJfsz5ef4mfIyfd36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmY0MzAxYTQtNGE0Yi0z MzBhLTlmMDMtZTg2YmM5ZWI0ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVn8auxuDbzq1YCLCIn1xrf+K3geHCzq+8fVLz611eS2zahtQv3IzQK GmPWiVqhpxavciwAL/5M41H+7rZxSkzHbRRIfwCPP7CbRhL6zRhHG8ylJZbAsvpo O9V0T2A7yQCcOfm82fc+zgU2gx+eNmLyx7iMJFcr/qg1ZS3Jbv1aacAt01Dt3n84 fqD6gdJ9nJwh8CRYvsh0sWCjJhK85kwdju5WFTjCV8Yc2yI4lqQASgISqC1F3eed MAun1VTWJZFFiAW+aYxLdiJyy6C9ApMBAY5sw+AA7h98USopMI5jeIXdcbJT6AVE A4QBVs/SkwYvrK0Om7E29J7P6k+Rhec= -----END CERTIFICATE-----Generated at Thu Mar 26 13:30:29 2026 by rpki-client