$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa File: 5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa (raw, json) Hash identifier: aMBQLQVxf6auN87wqaoGWt4iwr1J7PM3WsjNhHyFYzw= Subject key identifier: AF:33:4C:30:AC:9A:D8:36:0F:D9:FD:9F:4D:64:50:35:E8:39:5D:94 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24E11573AFFDE4485C65B980 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:15:73:af:fd:e4:48:5c:65:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4a9c824b-2a24-439b-8eca-2649697df36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:c6:a0:f6:ba:03:70:6e:1d:38:74:b4:e5: fa:09:a3:1d:f7:ed:e8:fb:dd:81:62:43:e2:98:fd: 8a:f9:c8:9f:73:95:e0:aa:ce:b3:dc:bb:fd:95:af: 01:e8:c5:ee:b3:25:b9:1a:67:f2:68:41:31:e8:2d: c1:9b:40:c9:aa:1a:38:f8:3d:f4:cf:00:29:1c:fc: 50:c7:0c:ec:c7:ea:00:af:34:dd:54:81:d2:5e:0c: b2:98:91:58:58:46:bc:2e:e3:32:09:46:bd:d3:56: eb:d2:02:fd:d0:57:d2:1a:4a:de:7c:8b:69:0b:78: cd:74:6c:bf:e8:39:66:b9:25:2e:0a:b3:0f:94:d8: bb:24:6d:a4:6e:a1:52:93:02:1e:0a:01:05:18:ed: a5:95:f5:0c:65:a1:f4:8c:23:97:33:01:e0:5f:c9: 03:16:cb:0a:18:23:86:e8:86:b3:5c:12:a1:d0:0d: b9:86:c1:91:01:68:bb:33:35:d4:45:a6:56:3c:7d: 7b:00:5a:60:46:cd:d3:51:c4:b2:10:b8:f8:c4:64: 7d:bd:d5:0a:c2:71:1e:bb:71:c8:5a:7b:e0:66:47: 6e:ac:b2:ee:b1:96:df:e2:49:13:99:43:92:9a:87: 6d:0c:90:ff:b6:97:d5:68:16:2a:ff:a1:07:1d:b9: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:4C:30:AC:9A:D8:36:0F:D9:FD:9F:4D:64:50:35:E8:39:5D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/5d2714ce-14fc-34c2-9ac9-e7c3620e5ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:84:97:9a:f9:65:ad:f5:7e:56:a6:28:1c:a9:6b:b7:b4:7f: b6:66:b4:75:a7:7d:29:07:83:2e:04:60:70:ab:e7:b9:ae:00: 76:24:8c:07:b1:5e:13:8d:14:4d:43:e3:8f:88:12:3d:c2:9f: d8:e9:7d:1d:f6:4e:cc:93:89:35:7c:ab:53:da:47:a7:3d:f5: ee:09:cd:e6:23:ab:98:6a:d0:c6:5f:2c:f4:db:fe:a5:17:e0: 22:00:13:22:3c:fb:f8:e2:b1:89:ef:c0:98:7d:e3:ad:eb:17: 0d:1d:d7:31:7d:c6:cb:31:03:ab:99:9f:d1:27:33:ae:24:5c: 94:c9:ca:4d:a6:dc:cc:46:4b:cb:7d:49:de:d3:22:22:23:a2: ec:0c:01:94:34:e8:3d:ca:42:4c:47:50:bb:6a:c1:01:3d:a5: 43:7a:de:2d:e6:22:b9:a6:61:9a:eb:fb:dc:ed:38:c1:64:e0: a7:6d:e7:11:9e:9c:8b:7e:89:ad:68:d3:90:ce:07:78:b4:98: 8e:fc:c6:4e:1e:49:da:b6:da:e8:db:19:23:99:f1:1c:54:cd: fe:43:49:87:ea:c0:45:50:02:6b:6a:0a:88:14:42:ee:73:0f: dd:64:0f:d0:db:2a:46:e2:29:d7:f2:c3:c0:73:c3:36:59:bf: bc:13:da:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RVzr/3kSFxluYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGE5YzgyNGItMmEyNC00MzliLThlY2EtMjY0OTY5N2RmMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpHGoPa6A3BuHTh0tOX6CaMd9+3o+92BYkPi mP2K+cifc5Xgqs6z3Lv9la8B6MXusyW5GmfyaEEx6C3Bm0DJqho4+D30zwApHPxQ xwzsx+oArzTdVIHSXgyymJFYWEa8LuMyCUa901br0gL90FfSGkrefItpC3jNdGy/ 6DlmuSUuCrMPlNi7JG2kbqFSkwIeCgEFGO2llfUMZaH0jCOXMwHgX8kDFssKGCOG 6IazXBKh0A25hsGRAWi7MzXURaZWPH17AFpgRs3TUcSyELj4xGR9vdUKwnEeu3HI WnvgZkdurLLusZbf4kkTmUOSmodtDJD/tpfVaBYq/6EHHblECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8zTDCsmtg2D9n9n01kUDXoOV2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNWQyNzE0Y2UtMTRmYy0z NGMyLTlhYzktZTdjMzYyMGU1YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOEl5r5Za31flamKBypa7e0f7ZmtHWnfSkHgy4EYHCr57muAHYkjAex XhONFE1D44+IEj3Cn9jpfR32TsyTiTV8q1PaR6c99e4JzeYjq5hq0MZfLPTb/qUX 4CIAEyI8+/jisYnvwJh9463rFw0d1zF9xssxA6uZn9EnM64kXJTJyk2m3MxGS8t9 Sd7TIiIjouwMAZQ06D3KQkxHULtqwQE9pUN63i3mIrmmYZrr+9ztOMFk4Kdt5xGe nIt+ia1o05DOB3i0mI78xk4eSdq22ujbGSOZ8RxUzf5DSYfqwEVQAmtqCogUQu5z D91kD9DbKkbiKdfyw8BzwzZZv7wT2o8= -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:21 2026 by rpki-client