$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa File: 6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa (raw, json) Hash identifier: aXe/l8iarZT1BChBhcwVVcN8bLEcUHIvr2/yabwg0AQ= Subject key identifier: 44:FA:72:3B:BC:12:EB:EB:2E:26:58:78:31:1D:E1:30:9C:59:D3:FC Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24E12EA3FF099EB140A00800 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2e:a3:ff:09:9e:b1:40:a0:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d5a0a638-e1a4-44b0-8a30-46078b329e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:df:60:da:ea:3e:3b:90:03:8b:c3:53:d9: af:c9:ea:fd:f3:14:31:0e:de:6c:63:a9:1a:b4:eb: 1e:85:fc:d2:d9:f6:28:33:1a:93:c0:af:86:de:29: 0c:94:df:93:ea:d1:99:35:52:c4:f1:69:7c:33:ec: d5:ae:94:2a:ea:98:c1:f9:7e:52:30:fc:a1:19:6e: 99:ba:90:7f:86:e6:d7:1f:9f:de:d1:a2:01:a6:f6: 09:be:5f:dd:c5:8d:c5:95:8c:83:c6:17:7e:bf:f9: dc:ee:77:44:71:fd:26:33:54:54:3f:5b:52:73:75: 4b:a8:4d:78:fc:21:9f:2a:1e:d2:25:3f:e1:62:59: 69:e0:2d:9c:ab:72:7b:01:17:56:eb:1c:ad:ef:ed: c8:c8:5e:63:a5:ea:75:b1:b0:3f:ff:7d:c1:68:f1: cb:95:0f:0f:21:4b:7e:6e:72:a9:e0:f0:71:79:c8: a4:1c:c8:b1:e8:b7:df:13:45:5e:a4:d2:1a:4c:bb: 3a:71:fd:42:74:2e:b1:78:3f:aa:d6:6d:23:0b:b5: 06:da:ec:cf:91:76:e5:85:48:3a:88:c7:0a:a0:47: f8:43:e7:f1:8f:67:87:79:c1:45:2f:c8:c8:54:6c: 71:3b:a3:f1:aa:be:b1:45:8c:db:2f:da:ce:af:f9: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FA:72:3B:BC:12:EB:EB:2E:26:58:78:31:1D:E1:30:9C:59:D3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6d684cbf-5dc7-359e-bab2-d5b92d5eed9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c4:d1:ee:3c:38:e6:05:7f:a8:09:f9:28:03:6e:e4:13:d2: 4c:c0:5e:1f:d6:f8:d3:dc:c2:a9:06:07:06:af:2d:74:bc:82: 7c:65:5e:82:e7:ae:45:9d:cd:ac:86:61:68:ba:18:54:53:95: 5c:f3:61:04:ac:f8:cc:51:c5:58:41:58:17:79:0b:02:5f:15: 66:96:7a:b7:82:79:21:75:7a:41:59:d8:ce:e2:15:5f:75:8d: 64:ab:68:93:a4:d1:e9:e3:73:f6:62:5d:f8:90:94:7e:81:5e: 0d:56:25:df:2b:fe:c2:e0:09:2e:fc:17:ed:99:d7:ef:22:94: 31:f4:c2:3f:00:26:9d:ee:b6:a3:92:49:40:f1:41:df:fd:1e: 83:3a:c7:57:0e:1d:82:6e:ce:f5:23:df:bd:9d:84:fe:20:3b: 68:2b:6b:d6:0b:f6:75:84:aa:29:75:83:4d:a3:74:44:c3:b8: 00:fb:ce:06:30:03:d0:5b:f3:ff:bf:f8:ae:32:e4:b5:52:41: b7:c9:a7:67:69:24:7b:90:27:06:84:07:78:81:5d:b9:5b:34: 62:7c:9a:1d:df:bb:25:98:75:49:cb:fa:d4:10:a9:62:6b:33: a7:a7:99:ad:7b:a6:43:5a:08:04:b5:3c:0c:9b:4f:37:55:81: 13:2c:4d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4S6j/wmesUCgCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDVhMGE2MzgtZTFhNC00NGIwLThhMzAtNDYwNzhiMzI5ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvDfYNrqPjuQA4vDU9mvyer98xQxDt5sY6ka tOsehfzS2fYoMxqTwK+G3ikMlN+T6tGZNVLE8Wl8M+zVrpQq6pjB+X5SMPyhGW6Z upB/hubXH5/e0aIBpvYJvl/dxY3FlYyDxhd+v/nc7ndEcf0mM1RUP1tSc3VLqE14 /CGfKh7SJT/hYllp4C2cq3J7ARdW6xyt7+3IyF5jpep1sbA//33BaPHLlQ8PIUt+ bnKp4PBxecikHMix6LffE0VepNIaTLs6cf1CdC6xeD+q1m0jC7UG2uzPkXblhUg6 iMcKoEf4Q+fxj2eHecFFL8jIVGxxO6Pxqr6xRYzbL9rOr/nALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET6cju8EuvrLiZYeDEd4TCcWdP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNmQ2ODRjYmYtNWRjNy0z NTllLWJhYjItZDViOTJkNWVlZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLE0e48OOYFf6gJ+SgDbuQT0kzAXh/W+NPcwqkGBwavLXS8gnxlXoLn rkWdzayGYWi6GFRTlVzzYQSs+MxRxVhBWBd5CwJfFWaWereCeSF1ekFZ2M7iFV91 jWSraJOk0enjc/ZiXfiQlH6BXg1WJd8r/sLgCS78F+2Z1+8ilDH0wj8AJp3utqOS SUDxQd/9HoM6x1cOHYJuzvUj372dhP4gO2gra9YL9nWEqil1g02jdETDuAD7zgYw A9Bb8/+/+K4y5LVSQbfJp2dpJHuQJwaEB3iBXblbNGJ8mh3fuyWYdUnL+tQQqWJr M6enma17pkNaCAS1PAybTzdVgRMsTVw= -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:57 2026 by rpki-client