$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa File: 0967f533-314b-31fa-9f37-b33da500d8a5.roa (raw, json) Hash identifier: radltkzG6S2DIBGv0JjZDEEsiANJQoO1SLlBT0Y4GD4= Subject key identifier: 2C:41:C5:90:1E:F2:66:B0:51:85:D2:D7:D5:FA:D0:97:C6:32:B9:C4 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF7D04D4EE7FFB53D609B0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7d:04:d4:ee:7f:fb:53:d6:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=20884fbf-e388-4f95-a3d7-1a35a01f1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:49:81:fd:30:00:d8:a9:0c:ef:f0:73:ef: 85:ca:c6:fc:08:d5:d8:d1:bd:ee:10:22:90:06:38: d3:8f:12:a7:12:25:a3:75:67:22:77:cf:4d:5f:b5: 9a:79:dc:b1:ae:24:a5:a0:a0:cd:00:3f:aa:7b:5f: a8:2e:73:49:b7:59:c5:2e:8e:b6:c5:73:47:50:1a: 1a:5c:aa:1e:78:46:72:b8:5f:cd:ef:fd:4b:6e:20: 8d:e4:84:ff:cf:6d:ca:82:96:fb:23:f3:f5:48:e9: c4:79:64:ca:d6:3c:a0:c6:7f:26:dd:99:67:c3:d2: 04:44:36:37:22:99:b5:c7:e4:0c:a1:b2:fa:f4:29: 20:8c:dd:04:cc:c7:28:27:c6:92:28:55:93:52:e4: 25:e7:a1:b2:de:0f:ba:cd:75:5a:65:aa:c6:bc:9a: ec:f5:7a:8f:44:12:b5:96:8a:fd:32:6b:dc:92:b9: 33:bf:d1:c9:65:be:88:96:01:6f:97:03:9b:a3:73: cf:5d:db:cb:0d:6c:58:d9:b4:57:23:7e:8e:55:c9: 87:f2:c4:a0:bb:70:3f:ea:57:59:12:d0:f4:f9:d0: 9b:70:1d:01:03:83:08:dd:df:87:06:10:e7:b5:9c: 85:f5:46:ef:12:08:61:be:d6:9a:50:6b:8c:f5:12: e2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:C5:90:1E:F2:66:B0:51:85:D2:D7:D5:FA:D0:97:C6:32:B9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0967f533-314b-31fa-9f37-b33da500d8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:21:c9:1b:58:29:64:18:e3:e1:3e:32:40:24:62:02:a1:c8: c1:3a:6e:e5:85:43:13:6f:b0:ea:84:60:24:76:83:0e:5d:00: d7:3d:e9:8d:c4:0e:d5:71:5b:93:ae:4d:57:53:02:05:8c:12: 33:34:46:e4:07:7b:ec:e0:84:eb:64:0f:4f:fc:20:e0:78:d2: 8d:b0:24:f6:4e:10:a1:ac:96:14:18:9b:29:40:e3:e9:92:a6: 0c:76:8a:83:f4:fa:c7:a2:5b:ef:15:ca:08:a2:05:f5:40:32: 4b:bb:77:5c:a4:c2:32:3c:e6:a8:47:b4:b6:6f:70:fe:44:a3: 79:17:b0:f3:02:60:39:5b:c5:f8:a3:25:a9:61:b2:d1:f9:5b: a6:66:0d:ef:62:38:32:f8:ad:ac:82:bf:f6:77:ad:16:92:23: f0:fd:14:8b:52:ee:8f:2f:a8:6a:10:c0:08:70:e6:83:79:b1: 11:8c:a8:cd:4b:3a:59:f9:a5:72:13:b0:3f:68:37:40:6a:ff: ec:62:b9:6a:6e:fc:be:6a:27:8c:cc:95:78:8e:50:a2:8d:95: 31:14:05:a4:45:d3:7a:07:aa:12:6d:95:4f:f6:80:b1:10:47: df:53:09:e7:20:82:44:25:eb:33:bc:ca:4b:38:4a:df:6b:23: 22:6e:d4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k330E1O5/+1PWCbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjA4ODRmYmYtZTM4OC00Zjk1LWEzZDctMWEzNWEwMWYxY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl95Jgf0wANipDO/wc++Fysb8CNXY0b3uECKQ BjjTjxKnEiWjdWcid89NX7WaedyxriSloKDNAD+qe1+oLnNJt1nFLo62xXNHUBoa XKoeeEZyuF/N7/1LbiCN5IT/z23Kgpb7I/P1SOnEeWTK1jygxn8m3Zlnw9IERDY3 Ipm1x+QMobL69CkgjN0EzMcoJ8aSKFWTUuQl56Gy3g+6zXVaZarGvJrs9XqPRBK1 lor9Mmvckrkzv9HJZb6IlgFvlwObo3PPXdvLDWxY2bRXI36OVcmH8sSgu3A/6ldZ EtD0+dCbcB0BA4MI3d+HBhDntZyF9UbvEghhvtaaUGuM9RLiuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxBxZAe8mawUYXS19X60JfGMrnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDk2N2Y1MzMtMzE0Yi0z MWZhLTlmMzctYjMzZGE1MDBkOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMhyRtYKWQY4+E+MkAkYgKhyME6buWFQxNvsOqEYCR2gw5dANc96Y3E DtVxW5OuTVdTAgWMEjM0RuQHe+zghOtkD0/8IOB40o2wJPZOEKGslhQYmylA4+mS pgx2ioP0+seiW+8VygiiBfVAMku7d1ykwjI85qhHtLZvcP5Eo3kXsPMCYDlbxfij JalhstH5W6ZmDe9iODL4rayCv/Z3rRaSI/D9FItS7o8vqGoQwAhw5oN5sRGMqM1L Oln5pXITsD9oN0Bq/+xiuWpu/L5qJ4zMlXiOUKKNlTEUBaRF03oHqhJtlU/2gLEQ R99TCecggkQl6zO8yks4St9rIyJu1MA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:49 2026 by rpki-client