$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa File: 395230d0-3cf8-35a4-bfa2-c07d5555c094.roa (raw, json) Hash identifier: 0qLXfB3/tWl35ECctHE73WA3Z7tKqCbc5uTshISu3VI= Subject key identifier: 7D:1D:51:87:35:D5:5D:AC:36:7A:7A:80:70:B7:47:C0:49:94:8E:67 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24E10E763826693C4EBBEC00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0e:76:38:26:69:3c:4e:bb:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d9ad0b0f-729b-403c-94c8-aa01ab02203c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:9f:84:4c:72:78:d3:63:e1:9d:e4:ea:e9: 53:21:52:56:48:43:a7:b8:71:9c:d7:e4:46:06:db: 74:14:41:ac:ea:de:41:39:1b:83:0e:dd:b6:83:4c: 54:b0:3b:c6:f7:61:e7:b0:f8:9c:65:0c:1c:38:64: f5:0c:21:53:7b:f5:71:98:cc:d6:6d:a4:ab:82:ff: 0c:25:16:99:c0:68:1c:49:45:87:f6:c4:98:b8:e1: 50:7a:ec:86:09:33:4c:6b:0e:55:42:16:c1:30:20: 23:40:a1:82:2d:e7:73:b7:5c:22:5d:8f:09:16:0e: e1:e7:fd:81:d1:42:c2:a6:7e:de:60:91:1e:f3:8d: aa:6d:4f:84:2d:37:16:bf:f8:96:f9:ae:87:d0:06: 34:d5:34:af:99:1d:38:29:41:e2:71:dc:6f:e2:fa: 07:b7:7e:a3:85:88:42:f7:07:17:4c:8a:6d:26:87: f7:0c:09:47:07:8d:02:df:7b:bd:a2:6d:53:23:2e: c4:42:e7:a6:eb:e3:74:d0:56:fd:62:22:2d:4b:11: 73:44:f1:6d:75:1a:7a:95:e2:30:a3:d4:61:7c:ba: 2b:df:45:a9:44:a8:47:11:ef:82:f5:e0:c2:ac:7e: f4:3f:32:0a:e9:08:23:f5:2d:72:0d:18:3e:1f:7f: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:51:87:35:D5:5D:AC:36:7A:7A:80:70:B7:47:C0:49:94:8E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:11:b0:69:88:d8:fd:a9:02:dd:bf:02:ae:c4:2c:c0:6e:57: ee:e0:91:c6:95:8a:0b:26:ff:75:30:46:00:1e:fa:20:9c:73: 68:ea:f5:33:7a:00:e1:b5:f0:70:09:a6:83:90:09:82:6d:db: f5:d8:55:4a:44:14:1e:57:38:75:30:44:29:8b:a5:a2:dc:e9: 12:ee:7d:4b:8d:f4:ee:aa:31:48:c7:58:66:b4:44:5a:87:b4: 98:62:f7:31:13:0b:5c:30:fa:25:f0:8b:d9:f5:8c:f3:8c:80: c2:6f:bc:35:c5:04:8e:05:29:71:c3:5b:e8:b2:f2:d8:31:1d: 96:60:78:0f:ff:2d:2c:58:da:f1:5b:9a:7f:0a:ce:74:76:59: 3b:fe:da:95:c1:15:20:65:ba:13:d3:e7:72:35:60:ec:a4:ce: f1:22:86:49:90:ea:bf:3a:23:87:f1:49:eb:ea:6f:d1:82:c5: bb:c5:ad:7b:f5:72:8b:13:78:09:e8:3b:bd:24:0e:d1:1b:59: f1:9b:10:7c:ac:8c:7d:e9:88:0b:33:dc:e3:74:d5:ae:b5:ad: f7:d1:e9:ec:c5:f8:05:94:14:1e:9c:ae:fd:4b:04:45:b8:58: e9:84:06:d3:2a:51:8c:8e:21:1e:98:12:b1:70:30:2a:e4:81: bb:78:2b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q52OCZpPE677AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDlhZDBiMGYtNzI5Yi00MDNjLTk0YzgtYWEwMWFiMDIyMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsmfhExyeNNj4Z3k6ulTIVJWSEOnuHGc1+RG Btt0FEGs6t5BORuDDt22g0xUsDvG92HnsPicZQwcOGT1DCFTe/VxmMzWbaSrgv8M JRaZwGgcSUWH9sSYuOFQeuyGCTNMaw5VQhbBMCAjQKGCLedzt1wiXY8JFg7h5/2B 0ULCpn7eYJEe842qbU+ELTcWv/iW+a6H0AY01TSvmR04KUHicdxv4voHt36jhYhC 9wcXTIptJof3DAlHB40C33u9om1TIy7EQuem6+N00Fb9YiItSxFzRPFtdRp6leIw o9RhfLor30WpRKhHEe+C9eDCrH70PzIK6Qgj9S1yDRg+H39n2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0dUYc11V2sNnp6gHC3R8BJlI5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMzk1MjMwZDAtM2NmOC0z NWE0LWJmYTItYzA3ZDU1NTVjMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIRsGmI2P2pAt2/Aq7ELMBuV+7gkcaVigsm/3UwRgAe+iCcc2jq9TN6 AOG18HAJpoOQCYJt2/XYVUpEFB5XOHUwRCmLpaLc6RLufUuN9O6qMUjHWGa0RFqH tJhi9zETC1ww+iXwi9n1jPOMgMJvvDXFBI4FKXHDW+iy8tgxHZZgeA//LSxY2vFb mn8KznR2WTv+2pXBFSBluhPT53I1YOykzvEihkmQ6r86I4fxSevqb9GCxbvFrXv1 cosTeAnoO70kDtEbWfGbEHysjH3piAsz3ON01a61rffR6ezF+AWUFB6crv1LBEW4 WOmEBtMqUYyOIR6YErFwMCrkgbt4KwE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:49:20 2026 by rpki-client