$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa File: f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa (raw, json) Hash identifier: hOrX3Hlmas4Wcnf+oSWRBOU30rZYKf5V7ftsht+O1f8= Subject key identifier: 38:8A:67:11:CD:33:B0:F7:19:38:4A:78:E4:11:71:A5:74:66:E3:61 Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F4328584F49769BCC3F358BCDF6E31B80 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26337 IP address blocks: 72.22.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:9b:cc:3f:35:8b:cd:f6:e3:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3edb59f6-cca1-4db9-a09e-eb645a5cdca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:aa:15:af:c9:54:3d:99:33:fd:68:38:62: 56:8a:f4:50:06:99:c9:86:d1:bb:82:c7:94:4e:e2: e8:ef:aa:a8:17:cd:d5:cf:f8:48:9f:18:05:b8:b1: 2f:9e:9a:65:d1:7b:95:c0:6b:5f:82:96:f0:68:eb: 24:2e:0f:84:f6:51:fb:fe:b2:c6:b8:6c:02:9e:52: 17:59:e4:f4:f8:44:e5:62:b6:75:34:66:e1:be:c9: 1a:d4:3b:9e:3e:d3:77:3c:b8:27:62:df:40:ef:d1: 91:d8:68:64:7e:a7:57:85:94:57:56:f6:85:c2:6b: e8:bd:db:d4:1d:d9:07:56:f2:ee:fb:e8:0d:a5:b5: 86:72:5f:0b:79:aa:ea:e8:92:bb:23:82:89:fb:6b: 25:f1:b4:9b:72:7b:d0:20:a5:26:33:93:14:00:5b: 6b:6e:9a:7d:ad:62:a8:b9:0a:b5:f4:2a:44:e8:2f: b0:43:9e:ef:ae:02:a7:72:45:e0:ea:f1:b6:b4:e1: cf:97:71:37:c0:b6:ef:1d:75:7a:04:c5:f2:33:56: 3f:f2:23:b7:ec:61:cc:04:d7:e7:5f:7f:93:b2:f2: ff:14:0d:c6:7d:66:e7:0f:6a:01:71:e5:26:3b:19: f9:c8:6a:a0:5c:3c:ec:e0:59:e4:8f:b0:1c:23:30: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:67:11:CD:33:B0:F7:19:38:4A:78:E4:11:71:A5:74:66:E3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f21716bf-d4b1-3c8d-b02c-56a35dd01861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 72.22.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c6:60:c8:af:e3:04:34:ec:2f:8f:d6:a4:f7:05:71:7a:60: 93:87:e8:25:ed:2c:bb:f7:4c:ab:01:d0:a3:33:1e:3e:9a:4e: 21:13:a4:56:94:0b:27:67:c0:72:6b:47:94:48:75:ae:b0:4b: b5:ec:20:79:59:65:e1:19:ba:ec:70:b0:84:70:c7:1d:5d:e2: 62:48:ea:e6:fa:f3:4c:ac:2a:bd:df:cb:36:02:a2:55:64:1c: f1:74:63:cb:4b:d5:8e:f5:98:d4:38:9a:d8:1f:6c:f0:7d:30: 5b:dc:5f:ed:d0:cc:9d:ca:d8:cd:1a:58:10:fc:25:7a:4b:b1: 8f:4d:af:7a:74:e9:a9:76:09:28:a4:05:d7:e7:3b:c8:bc:da: 8f:26:b2:e3:7f:4d:a2:22:fe:71:b8:67:89:0b:07:4a:2b:3d: 6e:16:05:3e:bb:32:1b:ce:d8:bc:b0:72:c0:85:d9:3c:db:b9: 98:04:58:8e:f7:f0:a6:af:58:02:d9:40:44:23:e7:9d:5f:3b: a5:ff:76:51:ee:68:9f:11:99:4d:96:87:07:30:af:f0:55:ff: 80:02:4f:2c:b1:ca:33:5b:b2:46:fb:34:0b:21:7e:9a:d9:95: 72:fd:4b:02:6c:3a:6c:07:73:7e:03:59:ad:64:96:ca:4b:0f: 48:7c:a6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdpvMPzWLzfbjG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2VkYjU5ZjYtY2NhMS00ZGI5LWEwOWUtZWI2NDVhNWNkY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp+qFa/JVD2ZM/1oOGJWivRQBpnJhtG7gseU TuLo76qoF83Vz/hInxgFuLEvnppl0XuVwGtfgpbwaOskLg+E9lH7/rLGuGwCnlIX WeT0+ETlYrZ1NGbhvska1DuePtN3PLgnYt9A79GR2GhkfqdXhZRXVvaFwmvovdvU HdkHVvLu++gNpbWGcl8Learq6JK7I4KJ+2sl8bSbcnvQIKUmM5MUAFtrbpp9rWKo uQq19CpE6C+wQ57vrgKnckXg6vG2tOHPl3E3wLbvHXV6BMXyM1Y/8iO37GHMBNfn X3+TsvL/FA3GfWbnD2oBceUmOxn5yGqgXDzs4Fnkj7AcIzCCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiKZxHNM7D3GThKeOQRcaV0ZuNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZjIxNzE2YmYtZDRiMS0z YzhkLWIwMmMtNTZhMzVkZDAxODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7GYMiv4wQ07C+P1qT3BXF6YJOH6CXtLLv3TKsB0KMzHj6aTiETpFaU CydnwHJrR5RIda6wS7XsIHlZZeEZuuxwsIRwxx1d4mJI6ub680ysKr3fyzYColVk HPF0Y8tL1Y71mNQ4mtgfbPB9MFvcX+3QzJ3K2M0aWBD8JXpLsY9Nr3p06al2CSik BdfnO8i82o8msuN/TaIi/nG4Z4kLB0orPW4WBT67MhvO2LywcsCF2TzbuZgEWI73 8KavWALZQEQj551fO6X/dlHuaJ8RmU2Whwcwr/BV/4ACTyyxyjNbskb7NAshfprZ lXL9SwJsOmwHc34DWa1klspLD0h8pqM= -----END CERTIFICATE-----Generated at Sun Sep 27 00:21:46 2026 by rpki-client