$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa File: 395230d0-3cf8-35a4-bfa2-c07d5555c094.roa (raw, json) Hash identifier: Y1dBU/AlIpIy85MIkIri27w4oW6CvLKBAwFrB8mAsjI= Subject key identifier: F5:45:C8:B6:AD:E9:22:67:6B:C2:E4:30:AA:6C:08:66:9A:CA:70:38 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584F49872066F7F3BDD01D7FA730 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14813 IP address blocks: 72.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:20:66:f7:f3:bd:d0:1d:7f:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=12b77b13-f9fc-4402-bae5-6b84fc3f8ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:ad:c0:db:f3:2d:82:25:4b:a4:0b:8a:7a: a6:be:01:5b:59:3a:32:fc:3c:49:74:5c:33:92:26: 89:2a:3c:53:dd:bf:c1:67:10:14:26:16:10:6d:32: 3d:b4:e8:bd:1c:7d:52:e7:a3:70:60:d3:cb:68:af: 4c:a1:68:a6:e8:e5:31:7f:45:c6:b0:c0:3e:be:13: dc:2c:50:10:2a:ad:ab:ab:ae:69:7f:db:58:1d:01: 25:93:a5:33:7c:6d:02:b7:ce:6c:9b:f6:4d:bb:6e: c1:10:26:7d:e0:ae:4d:e2:de:ad:66:21:0e:3f:51: 5d:ee:20:35:b6:dd:1d:ed:25:c9:8d:7d:75:da:3e: 64:24:bc:f6:d8:6e:17:4a:90:5d:fa:1d:82:77:22: 11:96:5c:08:36:4d:79:b5:bd:bc:31:02:c2:16:bf: 0d:1b:8e:75:0b:ef:8d:3a:d6:0b:d8:71:aa:8d:43: af:5c:76:6b:80:5a:99:99:00:4a:85:70:17:e0:95: 90:37:a9:0d:79:0d:d2:10:d3:42:3d:c8:1c:99:9e: b5:65:1a:20:a9:fa:fc:60:e4:b5:a6:86:84:f5:4d: 72:a4:67:90:6f:7f:54:d5:a3:9c:15:82:f6:9c:57: b1:d3:c8:26:5d:67:0e:1a:98:be:c6:07:1c:e8:83: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:C8:B6:AD:E9:22:67:6B:C2:E4:30:AA:6C:08:66:9A:CA:70:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/395230d0-3cf8-35a4-bfa2-c07d5555c094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fe:7d:5c:71:f7:1a:35:e3:8e:ec:c7:32:65:ff:3b:d5:85: 63:ab:64:92:76:10:92:81:d8:12:6e:65:3c:f2:b4:9f:a4:d3: 76:fc:ea:9d:d8:fe:43:94:b5:6d:b1:82:16:a7:47:10:67:30: 25:2c:c7:44:a7:a9:92:5c:35:42:73:6c:a8:06:60:d6:3c:40: 92:21:66:31:48:f5:d1:7f:00:17:eb:2d:34:48:fc:bf:66:25: 0c:89:93:ca:9c:4e:cc:ce:b5:9c:ab:9c:72:ae:b9:49:e0:dd: 14:81:50:25:15:d0:a3:58:9c:0d:63:28:61:94:47:01:62:29: 68:a6:2f:bb:c6:a9:f8:4c:e3:c5:ea:36:25:90:c4:de:d9:28: 7c:f9:e2:ea:5c:a6:26:ce:12:cf:c4:f3:85:ba:0f:a0:fb:26: 1d:38:3a:f3:32:d3:0a:f0:b6:2f:08:e0:c9:c1:4c:92:fd:fc: 2e:91:a3:54:cb:9d:76:16:5a:33:72:b4:84:d1:4b:bd:aa:8b: 1b:15:29:18:78:ec:a9:ca:4c:62:1b:3b:71:e7:c5:19:38:ec: 32:2b:b1:ca:5e:d4:ae:49:e0:49:21:1c:50:6f:7f:b0:2b:25: ff:42:16:ea:9a:e4:e8:8a:5f:5b:7d:2a:ba:b1:9e:b7:f4:87: b5:06:30:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyBm9/O90B1/pzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTJiNzdiMTMtZjlmYy00NDAyLWJhZTUtNmI4NGZjM2Y4ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPmtwNvzLYIlS6QLinqmvgFbWToy/DxJdFwz kiaJKjxT3b/BZxAUJhYQbTI9tOi9HH1S56NwYNPLaK9MoWim6OUxf0XGsMA+vhPc LFAQKq2rq65pf9tYHQElk6UzfG0Ct85sm/ZNu27BECZ94K5N4t6tZiEOP1Fd7iA1 tt0d7SXJjX112j5kJLz22G4XSpBd+h2CdyIRllwINk15tb28MQLCFr8NG451C++N OtYL2HGqjUOvXHZrgFqZmQBKhXAX4JWQN6kNeQ3SENNCPcgcmZ61ZRogqfr8YOS1 poaE9U1ypGeQb39U1aOcFYL2nFex08gmXWcOGpi+xgcc6IMtRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVFyLat6SJna8LkMKpsCGaaynA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMzk1MjMwZDAtM2NmOC0z NWE0LWJmYTItYzA3ZDU1NTVjMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz+fVxx9xo1447sxzJl/zvVhWOrZJJ2EJKB2BJuZTzytJ+k03b86p3Y /kOUtW2xghanRxBnMCUsx0SnqZJcNUJzbKgGYNY8QJIhZjFI9dF/ABfrLTRI/L9m JQyJk8qcTszOtZyrnHKuuUng3RSBUCUV0KNYnA1jKGGURwFiKWimL7vGqfhM48Xq NiWQxN7ZKHz54upcpibOEs/E84W6D6D7Jh04OvMy0wrwti8I4MnBTJL9/C6Ro1TL nXYWWjNytITRS72qixsVKRh47KnKTGIbO3HnxRk47DIrscpe1K5J4EkhHFBvf7Ar Jf9CFuqa5OiKX1t9Krqxnrf0h7UGMOA= -----END CERTIFICATE-----Generated at Tue Sep 29 11:33:19 2026 by rpki-client