$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa File: 2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa (raw, json) Hash identifier: z2i7TA13PRzDS+9YilAmcYqlBV8rhMixAQW9e/Bsj+w= Subject key identifier: 88:A7:EF:BA:4B:EF:71:CC:BE:34:C5:0A:2A:BA:1B:F6:45:4E:F7:59 Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584D981B43CF874DB15641FB8580 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa Signing time: Wed 22 Apr 2026 19:39:23 +0000 ROA not before: Wed 22 Apr 2026 19:39:23 +0000 ROA not after: Tue 21 Jul 2026 19:39:23 +0000 asID: 13536 IP address blocks: 72.12.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:1b:43:cf:87:4d:b1:56:41:fb:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Apr 22 19:39:23 2026 GMT Not After : Jul 21 19:39:23 2026 GMT Subject: CN=cedbc291-578a-4d68-a1ef-393ebb8715f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:72:3f:ae:fd:77:4a:3f:94:7e:87:55:16: d9:1d:b1:36:da:48:0e:a2:37:93:6d:3e:e9:c0:09: 82:76:36:cb:59:2c:6b:16:69:76:c9:21:01:56:85: 8e:2f:a3:e9:ac:f4:d0:90:1f:68:e7:24:72:f0:75: 15:a4:f3:af:c4:99:2f:ce:c5:59:2e:a1:e1:44:12: 2c:08:3d:c4:d8:d6:2f:2a:50:65:93:43:4d:da:eb: 15:2b:92:e9:f9:68:4b:19:13:c0:37:d7:25:45:85: 2c:04:51:ae:bd:88:57:45:17:ed:9a:ce:52:4b:14: cd:39:19:cb:a4:c4:a4:fc:20:2c:b0:65:08:5c:76: 07:77:01:25:81:1c:28:bd:6a:94:c1:ed:42:cb:86: 3b:49:78:bd:b4:c3:fc:b8:59:13:28:15:3e:d8:9e: ae:cf:35:8a:55:de:dc:93:a8:92:65:8f:ab:f7:e0: f9:13:e3:43:f0:4b:36:d8:6b:97:8a:0f:51:dd:01: 21:73:a0:41:ff:91:60:42:aa:de:6a:16:09:99:13: 85:5d:f5:49:db:62:3a:8e:61:bd:63:30:7b:c0:93: a9:99:0f:d8:ef:03:4f:1e:1d:a4:37:80:de:16:19: fd:1c:3a:56:11:1b:f6:3a:62:43:96:52:3c:8a:41: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:EF:BA:4B:EF:71:CC:BE:34:C5:0A:2A:BA:1B:F6:45:4E:F7:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 72.12.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d0:eb:d7:b4:59:79:fa:fe:c0:3f:d9:ff:63:ac:41:b4:06: c6:b6:1c:21:9c:31:da:02:72:03:4a:8e:bd:65:de:a4:9d:5d: b7:93:17:6e:21:71:6a:16:44:b6:80:7e:26:93:00:dd:ec:5b: c1:ec:85:73:ea:07:d0:1b:65:1f:30:58:44:51:22:8b:0b:f7: 9f:66:48:59:38:1b:6c:91:91:5e:fe:89:af:62:4c:c8:4c:5f: ff:af:3d:7a:cf:65:1f:99:08:f5:36:ab:ba:7b:2f:71:29:ac: bb:2a:65:a4:d4:89:24:5c:17:55:64:59:ea:85:ef:3f:36:2e: a4:39:f1:52:e2:9b:3d:d7:b6:e5:ec:65:9a:3e:46:c7:0d:2b: 3a:d1:f5:03:14:47:13:a6:21:3c:31:3f:f5:b8:82:fb:ca:91: ed:62:25:dd:85:af:21:76:b5:34:3f:70:d4:e4:0f:5f:71:57: 54:04:6d:91:d9:96:f3:52:25:0a:78:1f:e9:4e:91:58:c8:14: 3a:ba:5e:4d:8d:5e:59:71:b4:38:4f:4d:ba:c9:25:73:b1:fb: d7:12:83:05:a2:96:77:fd:48:6f:8f:0c:09:7c:e1:31:d7:79: e8:ea:a4:96:05:02:b4:9c:26:0c:de:d5:2a:7b:92:74:64:15: 18:56:eb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YG0PPh02xVkH7hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDQyMjE5MzkyM1oXDTI2MDcyMTE5MzkyM1owLzEtMCsGA1UEAxMk Y2VkYmMyOTEtNTc4YS00ZDY4LWExZWYtMzkzZWJiODcxNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtyP679d0o/lH6HVRbZHbE22kgOojeTbT7p wAmCdjbLWSxrFml2ySEBVoWOL6PprPTQkB9o5yRy8HUVpPOvxJkvzsVZLqHhRBIs CD3E2NYvKlBlk0NN2usVK5Lp+WhLGRPAN9clRYUsBFGuvYhXRRftms5SSxTNORnL pMSk/CAssGUIXHYHdwElgRwovWqUwe1Cy4Y7SXi9tMP8uFkTKBU+2J6uzzWKVd7c k6iSZY+r9+D5E+ND8Es22GuXig9R3QEhc6BB/5FgQqreahYJmROFXfVJ22I6jmG9 YzB7wJOpmQ/Y7wNPHh2kN4DeFhn9HDpWERv2OmJDllI8ikHPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIin77pL73HMvjTFCiq6G/ZFTvdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMmFhMDNhN2ItZmEzYS0z Y2U5LWFlMzYtMGIzZmExZDFmZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAxTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnQ69e0WXn6/sA/2f9jrEG0Bsa2HCGcMdoCcgNKjr1l3qSdXbeTF24h cWoWRLaAfiaTAN3sW8HshXPqB9AbZR8wWERRIosL959mSFk4G2yRkV7+ia9iTMhM X/+vPXrPZR+ZCPU2q7p7L3EprLsqZaTUiSRcF1VkWeqF7z82LqQ58VLimz3XtuXs ZZo+RscNKzrR9QMURxOmITwxP/W4gvvKke1iJd2FryF2tTQ/cNTkD19xV1QEbZHZ lvNSJQp4H+lOkVjIFDq6Xk2NXllxtDhPTbrJJXOx+9cSgwWilnf9SG+PDAl84THX eejqpJYFArScJgze1Sp7knRkFRhW63s= -----END CERTIFICATE-----Generated at Wed May 13 05:43:52 2026 by rpki-client