$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa File: 4db01a54-154f-32c5-a540-8f9f89529b1c.roa (raw, json) Hash identifier: n1Q4hjnBO/7XnKYqVjaWqvHJHs66OseNP7FhvDriCko= Subject key identifier: B5:20:A1:FA:B3:7D:33:56:E1:C8:72:C2:98:0D:98:74:9B:06:61:37 Certificate issuer: /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Certificate serial: 010D0C9F4328584D40CA4F06CF3204541CD6F100 Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 72.13.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4f:06:cf:32:04:54:1c:d6:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d9f6a332-2162-4e80-9be7-498a9c2fcf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:ce:7f:0a:b1:e2:e7:8d:b6:e0:e8:b4:0b: 36:43:73:df:70:8a:28:5a:71:f3:4b:9b:6d:4d:ac: 17:a2:3a:30:ab:98:01:d0:76:c8:74:a7:3d:87:d7: ba:c6:9e:0b:82:de:c3:97:a5:37:3c:48:9a:05:ca: 52:9a:14:d8:3f:05:2c:95:64:12:32:9d:e1:46:ce: cd:dd:38:36:95:7a:3d:f3:f8:2d:a2:9b:0e:d6:ff: e6:21:0a:c1:9a:74:50:8d:36:c0:6c:c8:83:90:5d: 2c:31:4f:85:85:c9:8f:b0:d9:01:58:bb:17:60:f5: 66:fc:f8:82:85:84:a7:3f:c7:d3:fa:69:6f:10:32: 10:97:08:c9:45:05:97:ef:7f:13:61:40:0c:91:c3: 12:b0:51:d0:df:0a:0c:21:2c:54:ef:d9:2b:b3:47: 63:ff:32:6a:c4:07:cf:41:73:f1:a4:53:34:03:99: 9d:41:d4:37:ac:ba:65:63:24:0b:bb:aa:59:b2:b0: 56:db:b5:98:ac:4a:9d:6e:4b:2c:51:2e:3d:79:75: c3:d4:9f:74:83:70:f3:8d:c4:05:bf:3d:1f:0d:34: 49:bb:fd:0b:fa:a6:2d:9d:02:3c:a9:0f:77:54:28: 98:76:99:dd:f8:d1:1c:12:ec:a7:a7:97:1d:bc:61: 9e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:A1:FA:B3:7D:33:56:E1:C8:72:C2:98:0D:98:74:9B:06:61:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/4db01a54-154f-32c5-a540-8f9f89529b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl X509v3 Authority Key Identifier: keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer sbgp-ipAddrBlock: critical IPv4: 72.13.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:16:9f:2d:d9:66:dc:8e:db:78:55:09:cd:72:16:36:dc:9a: ea:30:a3:93:aa:70:2f:f7:db:c5:ba:67:c9:bc:9e:a7:62:4a: 6d:24:df:66:85:3c:fc:ef:65:d7:83:8b:41:52:8e:0a:bf:f9: 79:36:62:50:74:d7:76:d1:d4:9a:45:b3:cf:59:33:35:39:c1: bd:8c:01:46:ed:28:c7:0d:bc:95:42:b1:8a:3b:28:57:03:1e: 4a:ab:6e:fe:09:35:35:a3:45:96:df:fc:ba:1e:b3:80:b9:32: ba:39:84:bb:84:b0:10:64:7a:7c:b9:3f:01:34:88:45:2e:ec: 60:cf:f3:7c:4a:93:15:ec:7c:60:a2:59:0d:1b:a6:b8:b0:b1: 0d:94:d2:01:44:c8:93:87:1d:a7:92:b1:ca:d1:41:7e:70:82: 68:01:cb:cc:7d:72:6c:1e:e1:e2:e7:bb:db:83:4e:d0:fd:e8: f4:2e:3b:4e:40:c1:fa:4b:d2:6e:56:2c:48:dd:9f:da:67:89: 7e:39:73:07:5b:13:e0:12:d1:68:2b:15:e4:2a:47:c9:38:29: 71:93:13:57:27:9f:ef:85:09:b0:f4:f6:9d:b6:b4:72:55:e8: fd:b2:3f:f5:fc:94:81:b6:d7:4b:2b:6b:fe:52:db:ec:78:a1: 08:dc:60:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayk8GzzIEVBzW8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NiY2ZmNjgtMjNiYi00ZDRlLWE3MDMtYmFiMzExNWJm MDU0MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDlmNmEzMzItMjE2Mi00ZTgwLTliZTctNDk4YTljMmZjZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZzOfwqx4ueNtuDotAs2Q3PfcIooWnHzS5tt TawXojowq5gB0HbIdKc9h9e6xp4Lgt7Dl6U3PEiaBcpSmhTYPwUslWQSMp3hRs7N 3Tg2lXo98/gtopsO1v/mIQrBmnRQjTbAbMiDkF0sMU+FhcmPsNkBWLsXYPVm/PiC hYSnP8fT+mlvEDIQlwjJRQWX738TYUAMkcMSsFHQ3woMISxU79krs0dj/zJqxAfP QXPxpFM0A5mdQdQ3rLplYyQLu6pZsrBW27WYrEqdbkssUS49eXXD1J90g3DzjcQF vz0fDTRJu/0L+qYtnQI8qQ93VCiYdpnd+NEcEuynp5cdvGGe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUgofqzfTNW4chywpgNmHSbBmE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2Jj ZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIzMTE1YmYwNTQvNGRiMDFhNTQtMTU0Zi0z MmM1LWE1NDAtOGY5Zjg5NTI5YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2NiY2ZmNjgtMjNiYi00ZDRlLWE3 MDMtYmFiMzExNWJmMDU0LzdjYmNmZjY4LTIzYmItNGQ0ZS1hNzAzLWJhYjMxMTVi ZjA1NC5jcmwwHwYDVR0jBBgwFoAUQTLwjOuyBIwI1/fc1CVU2Xg9GGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Y2JjZmY2OC0yM2JiLTRkNGUtYTcwMy1iYWIz MTE1YmYwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkWny3ZZtyO23hVCc1yFjbcmuowo5OqcC/328W6Z8m8nqdiSm0k32aF PPzvZdeDi0FSjgq/+Xk2YlB013bR1JpFs89ZMzU5wb2MAUbtKMcNvJVCsYo7KFcD Hkqrbv4JNTWjRZbf/Loes4C5Mro5hLuEsBBkeny5PwE0iEUu7GDP83xKkxXsfGCi WQ0bpriwsQ2U0gFEyJOHHaeSscrRQX5wgmgBy8x9cmwe4eLnu9uDTtD96PQuO05A wfpL0m5WLEjdn9pniX45cwdbE+AS0WgrFeQqR8k4KXGTE1cnn++FCbD09p22tHJV 6P2yP/X8lIG210sra/5S2+x4oQjcYBk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:03:16 2026 by rpki-client