$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa File: 4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa (raw, json) Hash identifier: hnGht9qwVhBiHggS0Yn0MNHTDywYj+WOOd7vkaOWWK8= Subject key identifier: F4:9E:18:D6:AD:FE:93:0B:0C:E4:B2:88:30:0C:A0:D6:7E:E9:FD:C9 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24E11C9EBA4331EB12883600 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1c:9e:ba:43:31:eb:12:88:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f3c4dd97-f447-4f36-86f9-0083f279599c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d3:77:91:8e:a8:0c:76:c7:f0:57:43:48:74: 9a:5c:76:a1:59:0a:79:b8:e9:63:c5:21:d3:b6:f6: b1:6f:2f:0d:fa:08:7a:f6:ab:1e:22:8e:3c:67:0f: 1a:74:e4:e3:3e:69:45:e8:9a:75:1d:3e:3c:ec:30: 50:61:df:f2:4b:52:e2:95:e1:40:fa:47:34:74:0c: 70:5e:6c:41:eb:b3:8c:f4:dc:81:c3:c0:59:71:72: 4b:12:45:3e:7f:12:db:88:88:72:27:4c:1b:1c:5d: a8:b8:74:e0:77:7a:b8:c1:f3:6e:a3:23:54:ba:e6: 18:91:dc:c3:5e:e2:b7:7e:b1:be:9a:af:11:68:18: e2:b8:0f:2f:01:29:c7:42:c6:ee:5d:6e:b7:74:5e: 89:07:99:78:6c:56:37:57:3b:ce:ba:8b:0f:d6:fc: 1c:b4:e1:6d:3d:85:cb:eb:af:29:41:e7:23:73:d0: a9:0e:1f:f8:02:a6:78:75:f8:6e:27:ea:50:3b:ff: 4e:88:00:d5:ee:56:d2:75:c5:c8:79:f9:4d:9a:f8: 00:b3:29:a2:78:2d:88:82:ad:ed:ef:8d:e8:f9:38: 6a:f7:79:5b:30:0b:95:40:a7:91:ab:a9:e9:0b:85: b8:ed:c8:6d:d6:6a:7e:5a:12:3d:a1:5e:73:97:28: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9E:18:D6:AD:FE:93:0B:0C:E4:B2:88:30:0C:A0:D6:7E:E9:FD:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/4f32bdd6-c862-39c9-bfbe-0f0c7171a6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3b:cf:32:57:f0:47:6c:ac:1f:04:af:2c:0e:02:0e:a0:7f: fd:b0:56:d8:02:c4:2e:a5:ae:15:09:fe:32:49:4b:66:b1:54: b1:53:02:ca:a3:e6:dd:04:44:58:bc:d5:9e:95:bd:5d:b9:72: c6:a2:7a:a9:6a:4f:e8:25:89:ee:fe:90:a8:00:f3:0c:25:f9: 4c:8c:68:20:47:52:eb:c1:85:53:f0:95:35:9f:1a:2d:1b:9c: c0:fc:b0:ac:e8:3e:8a:c4:a4:a9:20:04:0e:c5:40:8b:8f:a8: df:84:17:b6:4b:da:69:30:eb:e9:8a:45:22:7e:53:3c:9e:6c: a5:f4:2e:e3:7e:0f:7b:91:d3:8b:96:e6:9d:1e:b9:d2:7d:f8: 4e:ad:7e:29:c5:5a:11:03:71:e3:d1:e9:90:cb:52:03:63:3d: 8e:46:80:d4:84:a6:2c:af:0e:25:05:85:07:b2:2c:6c:b2:7e: 2c:1f:e3:eb:66:a8:48:38:29:8d:20:f3:ae:58:43:79:e0:00: e9:52:4c:ed:0f:d3:f9:30:d3:e6:57:21:43:5c:82:7d:91:8f: a9:4b:a5:1b:7f:cc:84:f7:e1:c8:cb:6d:51:fb:4e:a6:8a:3b: bb:d8:0c:46:dc:3b:98:71:26:0f:10:1b:7e:68:76:e3:d3:47: e7:ba:87:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RyeukMx6xKINgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjNjNGRkOTctZjQ0Ny00ZjM2LTg2ZjktMDA4M2YyNzk1OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tN3kY6oDHbH8FdDSHSaXHahWQp5uOljxSHT tvaxby8N+gh69qseIo48Zw8adOTjPmlF6Jp1HT487DBQYd/yS1LileFA+kc0dAxw XmxB67OM9NyBw8BZcXJLEkU+fxLbiIhyJ0wbHF2ouHTgd3q4wfNuoyNUuuYYkdzD XuK3frG+mq8RaBjiuA8vASnHQsbuXW63dF6JB5l4bFY3VzvOuosP1vwctOFtPYXL 668pQecjc9CpDh/4AqZ4dfhuJ+pQO/9OiADV7lbSdcXIeflNmvgAsymieC2Igq3t 743o+Thq93lbMAuVQKeRq6npC4W47cht1mp+WhI9oV5zlyjALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSeGNat/pMLDOSyiDAMoNZ+6f3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNGYzMmJkZDYtYzg2Mi0z OWM5LWJmYmUtMGYwYzcxNzFhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE7zzJX8EdsrB8ErywOAg6gf/2wVtgCxC6lrhUJ/jJJS2axVLFTAsqj 5t0ERFi81Z6VvV25csaieqlqT+glie7+kKgA8wwl+UyMaCBHUuvBhVPwlTWfGi0b nMD8sKzoPorEpKkgBA7FQIuPqN+EF7ZL2mkw6+mKRSJ+UzyebKX0LuN+D3uR04uW 5p0eudJ9+E6tfinFWhEDcePR6ZDLUgNjPY5GgNSEpiyvDiUFhQeyLGyyfiwf4+tm qEg4KY0g865YQ3ngAOlSTO0P0/kw0+ZXIUNcgn2Rj6lLpRt/zIT34cjLbVH7TqaK O7vYDEbcO5hxJg8QG35oduPTR+e6h6c= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:58 2026 by rpki-client