$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa File: 8f131c90-42de-3c64-a439-0262a963f769.roa (raw, json) Hash identifier: vSAWEjtoZJGAcdv05DID3AgTcfDeNuJvXjKx6MoCLe4= Subject key identifier: 55:BC:6E:5A:BD:2A:AE:F5:E1:E2:82:95:70:F8:33:44:33:24:15:A2 Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584DA54AC411731DAD20C872BB00 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa Signing time: Mon 27 Apr 2026 13:00:30 +0000 ROA not before: Mon 27 Apr 2026 13:00:30 +0000 ROA not after: Sun 26 Jul 2026 13:00:30 +0000 asID: 31898 IP address blocks: 72.22.87.0/24 maxlen: 24 72.22.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:4a:c4:11:73:1d:ad:20:c8:72:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Apr 27 13:00:30 2026 GMT Not After : Jul 26 13:00:30 2026 GMT Subject: CN=1fc31e8d-a5ad-4099-b135-4378145c422e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:5a:4c:4c:a4:ef:fb:dd:a6:8f:db:5c:6b: 94:ba:0b:a5:20:40:71:3e:da:0f:b6:fb:ad:b4:9b: f4:42:bb:90:8f:60:ef:e2:e6:0a:c2:bc:99:05:67: 40:33:55:d8:85:de:64:4f:7f:d1:0e:13:33:68:3b: 48:59:38:7e:50:e4:07:63:4c:8b:38:ab:e2:15:ca: 20:63:56:4c:e5:9a:48:48:7e:c8:b7:5c:04:6d:43: 4c:01:d6:0c:8a:87:cc:43:41:e3:1d:75:d6:e5:25: 52:c1:75:09:c2:03:aa:94:77:9f:bf:15:6d:a7:3b: 81:7b:d6:a6:c2:11:20:24:43:85:74:87:58:55:c4: 1a:e5:52:75:cc:e9:e6:64:fc:e0:9a:92:ec:5a:80: ad:94:26:1b:a9:e1:ef:34:39:32:b3:1c:74:6b:94: 82:cf:61:0a:71:ba:8a:50:d0:68:43:a3:d5:fc:03: cc:9c:09:a6:6f:8e:e2:ee:5d:53:0b:30:bd:4d:14: a4:21:c5:4b:88:c1:94:0f:ed:27:6a:1a:dd:88:6f: 14:aa:a5:d6:14:e1:d1:e0:45:bb:a9:a2:75:17:96: 42:ca:d6:dc:44:44:4d:5a:c8:9a:e7:0a:e8:87:77: 3a:69:54:23:dc:02:ba:93:10:f9:a3:85:67:c9:05: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BC:6E:5A:BD:2A:AE:F5:E1:E2:82:95:70:F8:33:44:33:24:15:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/8f131c90-42de-3c64-a439-0262a963f769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 72.22.87.0-72.22.95.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:14:bb:6f:b1:86:59:35:f4:0d:2c:cd:62:13:92:a6:13:f8: 43:06:a6:38:05:f9:b2:24:bf:e5:2e:5f:6e:0d:fe:6b:31:a7: 70:99:69:15:ec:d8:43:01:ba:82:bf:3f:e9:20:e4:af:b6:cb: b1:9f:70:5c:0f:9b:f3:c1:d9:f6:02:e6:52:ab:da:57:bd:80: be:2d:aa:f5:f3:70:c6:56:01:80:14:49:af:bc:08:dd:96:56: 7d:80:da:94:49:54:c3:86:c9:49:03:1c:36:e2:ea:29:45:f3: 7b:47:1e:d0:5f:81:39:46:c0:55:1d:ad:b0:34:d4:4b:b7:a0: e6:b1:de:21:5d:d6:f8:ab:df:dd:fe:ab:2e:b9:81:f9:8e:55: 14:fc:ce:80:3f:5a:38:9e:ba:67:7d:66:d1:18:86:02:4a:08: c7:c8:33:31:95:e7:16:95:d0:a8:a2:88:ad:a0:f7:2a:43:7d: de:e6:0b:e9:0e:4e:5c:b2:1a:c4:0b:ab:49:95:80:6e:cb:ce: 6c:b7:08:f7:8b:ca:89:e4:8c:13:f6:a9:df:62:64:47:f5:9d: 4c:d6:98:a2:ae:8f:2d:7e:94:43:ec:4a:ee:ea:9a:77:29:43: f0:1e:1d:3f:b9:ea:95:b9:10:ca:d4:de:48:27:fd:c2:27:73: 5c:26:c4:db -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2lSsQRcx2tIMhyuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI2MDQyNzEzMDAzMFoXDTI2MDcyNjEzMDAzMFowLzEtMCsGA1UEAxMk MWZjMzFlOGQtYTVhZC00MDk5LWIxMzUtNDM3ODE0NWM0MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt1aTEyk7/vdpo/bXGuUugulIEBxPtoPtvut tJv0QruQj2Dv4uYKwryZBWdAM1XYhd5kT3/RDhMzaDtIWTh+UOQHY0yLOKviFcog Y1ZM5ZpISH7It1wEbUNMAdYMiofMQ0HjHXXW5SVSwXUJwgOqlHefvxVtpzuBe9am whEgJEOFdIdYVcQa5VJ1zOnmZPzgmpLsWoCtlCYbqeHvNDkysxx0a5SCz2EKcbqK UNBoQ6PV/APMnAmmb47i7l1TCzC9TRSkIcVLiMGUD+0nahrdiG8UqqXWFOHR4EW7 qaJ1F5ZCytbcRERNWsia5wroh3c6aVQj3AK6kxD5o4VnyQUoFwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFW8blq9Kq714eKClXD4M0QzJBWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvOGYxMzFjOTAtNDJkZS0z YzY0LWE0MzktMDI2MmE5NjNmNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABIFlcD BAVIFkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeRS7b7GGWTX0DSzNYhOSphP4QwamOAX5siS/5S5fbg3+ azGncJlpFezYQwG6gr8/6SDkr7bLsZ9wXA+b88HZ9gLmUqvaV72Avi2q9fNwxlYB gBRJr7wI3ZZWfYDalElUw4bJSQMcNuLqKUXze0ce0F+BOUbAVR2tsDTUS7eg5rHe IV3W+Kvf3f6rLrmB+Y5VFPzOgD9aOJ66Z31m0RiGAkoIx8gzMZXnFpXQqKKIraD3 KkN93uYL6Q5OXLIaxAurSZWAbsvObLcI94vKieSME/ap32JkR/WdTNaYoq6PLX6U Q+xK7uqadylD8B4dP7nqlbkQytTeSCf9widzXCbE2w== -----END CERTIFICATE-----Generated at Wed May 13 13:39:57 2026 by rpki-client