$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa File: 72f5aca1-48bc-321c-beb1-4f0419492a94.roa (raw, json) Hash identifier: sfDHgz+hZLV15j3DlxrM1Vhw89xaCDSDGa0zOPIDCvk= Subject key identifier: C2:7B:F2:45:F9:40:44:65:BF:A8:26:16:C7:0F:76:B0:44:32:2E:B4 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF73CA6328EFE462984180 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.51.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:73:ca:63:28:ef:e4:62:98:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bfaf2c15-81de-4813-890b-15018b983bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:c2:54:27:12:b3:47:24:2f:86:8d:8f:9b: cf:46:25:ce:8a:5e:d2:fb:01:96:1e:1d:1a:9d:51: bb:63:41:88:52:05:ca:cd:85:d8:d2:9f:40:26:46: 44:65:1b:fc:f6:22:65:e1:4e:ad:c3:6b:ec:86:76: a4:20:4c:6f:74:15:7b:99:7f:fc:9b:0a:55:e9:d9: 2a:8b:45:33:75:b5:76:c8:90:ba:3a:65:60:de:15: 9d:2c:a4:be:7d:5c:cb:98:0f:93:1a:e4:9e:a0:6c: 32:a9:57:66:1c:a8:19:6a:03:39:9b:8c:09:4e:fd: 90:34:49:dc:ee:1f:25:89:31:20:ca:c7:e9:1f:0f: 04:35:35:1f:54:ed:fc:e3:e8:2f:55:c7:d8:d9:92: c9:6c:8b:eb:be:85:43:b9:4a:9c:dc:9c:1b:12:7d: 37:b9:54:bc:ae:46:37:53:d0:44:c3:94:28:3e:8f: a2:55:ca:01:eb:33:6b:53:ab:89:6d:87:78:1e:a8: e9:1c:57:18:f3:77:7d:c0:53:2b:81:4a:cf:49:e6: 34:fa:3f:ea:df:31:6f:0a:3e:c8:c4:e3:df:c5:3f: 88:b5:02:ad:36:ec:1a:57:12:f9:8e:a1:6f:95:18: a0:ac:5b:1e:0c:53:b0:5a:80:f0:f3:ad:e6:92:e6: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7B:F2:45:F9:40:44:65:BF:A8:26:16:C7:0F:76:B0:44:32:2E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/72f5aca1-48bc-321c-beb1-4f0419492a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:7e:d8:d9:c9:09:4b:f9:8a:60:e2:30:b2:9b:7d:57:3d:96: 7d:d9:6e:71:0c:b9:cb:12:df:bc:c1:ec:ee:6e:2b:1f:fb:ca: 0d:ae:8f:96:99:4a:c0:00:1e:b1:5b:6e:f7:ab:cd:d8:4b:29: 5f:40:b2:b3:84:52:34:cf:76:b3:47:fa:47:c6:5e:14:c7:0b: 2e:19:32:0a:7b:69:2b:c8:55:af:16:54:3b:95:d1:dc:6b:e1: 1f:f8:13:42:0d:e4:09:6f:92:39:96:f8:82:35:2a:b7:48:cd: e0:f4:bc:5e:cc:96:96:59:8c:3a:f8:63:8d:7b:22:66:6d:86: 7f:f6:14:e3:3c:b2:56:4c:d2:e5:d5:08:e0:d5:4d:84:fa:09: 1b:dd:a1:86:d2:5e:e4:93:91:ce:fe:18:af:48:e4:5f:2f:53: 71:d1:91:ef:ec:a7:2a:f7:b8:a1:7e:a8:d5:82:6c:60:55:fc: d6:89:0f:97:81:80:3d:91:ca:75:2f:6b:48:9f:ba:cd:01:5d: 35:7b:7d:7a:e0:c3:66:f2:f3:02:ee:9d:d3:3b:44:8d:df:46: 8b:95:ea:a3:b4:d1:02:0d:88:65:f5:66:3e:e4:01:ca:04:84: 9e:ad:54:51:28:ce:3b:e9:30:ca:d8:9e:55:b9:ae:c2:5f:50: a9:79:2a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33PKYyjv5GKYQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmZhZjJjMTUtODFkZS00ODEzLTg5MGItMTUwMThiOTgzYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvzCVCcSs0ckL4aNj5vPRiXOil7S+wGWHh0a nVG7Y0GIUgXKzYXY0p9AJkZEZRv89iJl4U6tw2vshnakIExvdBV7mX/8mwpV6dkq i0UzdbV2yJC6OmVg3hWdLKS+fVzLmA+TGuSeoGwyqVdmHKgZagM5m4wJTv2QNEnc 7h8liTEgysfpHw8ENTUfVO384+gvVcfY2ZLJbIvrvoVDuUqc3JwbEn03uVS8rkY3 U9BEw5QoPo+iVcoB6zNrU6uJbYd4HqjpHFcY83d9wFMrgUrPSeY0+j/q3zFvCj7I xOPfxT+ItQKtNuwaVxL5jqFvlRigrFseDFOwWoDw863mkuZ8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ78kX5QERlv6gmFscPdrBEMi60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvNzJmNWFjYTEtNDhiYy0z MjFjLWJlYjEtNGYwNDE5NDkyYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSDNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp+2NnJCUv5imDiMLKbfVc9ln3ZbnEMucsS37zB7O5uKx/7yg2uj5aZ SsAAHrFbbverzdhLKV9AsrOEUjTPdrNH+kfGXhTHCy4ZMgp7aSvIVa8WVDuV0dxr 4R/4E0IN5AlvkjmW+II1KrdIzeD0vF7MlpZZjDr4Y417ImZthn/2FOM8slZM0uXV CODVTYT6CRvdoYbSXuSTkc7+GK9I5F8vU3HRke/spyr3uKF+qNWCbGBV/NaJD5eB gD2RynUva0ifus0BXTV7fXrgw2by8wLundM7RI3fRouV6qO00QINiGX1Zj7kAcoE hJ6tVFEozjvpMMrYnlW5rsJfUKl5Krg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:23 2026 by rpki-client