$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa File: 86920d0a-4eef-3173-a46b-516410385b8c.roa (raw, json) Hash identifier: tpT6LbdxnWFoPQXlowXkQuCgVvn3HFx6LDPn3jc4NkU= Subject key identifier: C3:C3:65:43:92:91:AE:EA:FE:73:AD:E9:F5:1E:99:E5:62:FA:B4:AC Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF8C34CA7E6CE4B645CCE0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8c:34:ca:7e:6c:e4:b6:45:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4ea118b3-6c04-45df-8965-f45a6add866b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7d:37:c5:38:1a:3c:31:85:d6:8d:52:82:9b: d8:76:90:44:ab:00:8c:68:da:1b:43:c1:00:82:ee: 15:65:f1:98:49:d0:55:0c:33:fa:c2:f1:4e:09:38: 5f:91:ae:7c:90:31:7b:da:fd:18:19:02:ca:20:b8: 63:8b:6a:71:31:fe:7d:c5:23:b3:56:f5:0e:63:ad: ee:53:97:29:aa:05:14:75:1d:e6:80:d4:c6:61:90: bf:60:23:ff:19:16:d1:99:8b:2d:f5:51:70:bd:8b: 2c:95:e5:0c:5b:b2:39:2e:f7:d7:56:f4:67:a5:97: 05:53:b0:d1:9a:90:82:72:06:d0:1a:77:79:45:b9: 6e:49:33:44:ce:4c:c9:6a:68:f1:38:56:4b:cc:92: 0b:c3:a1:eb:b2:c2:81:94:15:83:cf:de:7b:42:3b: 2e:8c:10:c3:d8:3a:82:e8:41:c1:8d:ea:91:45:ae: c5:20:87:02:f8:77:9c:4e:5f:05:7f:b0:09:95:2e: 13:96:e5:1a:34:9b:1e:0d:d8:5a:e7:53:2e:15:60: fc:6e:29:dd:ec:88:4e:80:ba:b8:21:7c:55:c9:60: d0:21:62:1d:cc:9b:c5:0b:be:42:1b:61:32:fd:bb: d9:99:d4:ff:e8:cc:7b:4b:31:36:fb:74:87:9d:b8: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C3:65:43:92:91:AE:EA:FE:73:AD:E9:F5:1E:99:E5:62:FA:B4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/86920d0a-4eef-3173-a46b-516410385b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:58:7a:26:25:5f:95:9b:01:6e:1f:a2:4f:66:7c:f4:e0:5a: 49:78:e3:f0:d0:73:88:0f:5b:f1:37:1d:04:bd:c6:4c:fb:29: 63:ad:4b:8e:75:04:a2:2d:44:d3:d4:b1:d8:01:5a:7f:2b:26: f0:54:da:34:8b:0a:45:55:55:37:e2:1e:16:dd:ad:ea:e2:82: 11:e7:28:a2:f8:b1:16:29:54:ca:36:65:7d:2e:8b:d6:eb:ea: 89:c3:07:ad:2b:2b:42:27:53:aa:c2:5c:4f:9a:ce:e0:b9:05: 1e:95:94:b4:17:f5:2d:96:8e:25:26:2a:cd:41:32:00:b2:dd: 98:c8:38:ec:32:cc:43:f8:cd:0f:dc:87:c6:f1:d5:47:7a:cf: 22:f9:a9:db:1e:fe:46:dc:46:e5:f5:d7:f7:d9:78:0a:7c:fd: 07:5a:75:68:de:d1:44:ab:1a:b1:da:41:51:b6:88:41:fc:d7: 16:2e:73:9f:e7:c2:ff:eb:8b:c0:1a:b3:28:c1:8d:58:bd:3a: d4:70:cc:6d:76:dc:fa:f9:94:c5:e6:21:f6:09:d4:c2:06:d7: 32:66:3b:a9:56:0c:21:ad:97:39:f9:8c:57:39:43:75:92:4e: d0:bf:11:f0:54:b6:a3:c9:10:09:2e:df:2a:56:d2:aa:4c:80: 0f:cb:0d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34w0yn5s5LZFzOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGVhMTE4YjMtNmMwNC00NWRmLTg5NjUtZjQ1YTZhZGQ4NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X03xTgaPDGF1o1SgpvYdpBEqwCMaNobQ8EA gu4VZfGYSdBVDDP6wvFOCThfka58kDF72v0YGQLKILhji2pxMf59xSOzVvUOY63u U5cpqgUUdR3mgNTGYZC/YCP/GRbRmYst9VFwvYssleUMW7I5LvfXVvRnpZcFU7DR mpCCcgbQGnd5RbluSTNEzkzJamjxOFZLzJILw6HrssKBlBWDz957QjsujBDD2DqC 6EHBjeqRRa7FIIcC+HecTl8Ff7AJlS4TluUaNJseDdha51MuFWD8bind7IhOgLq4 IXxVyWDQIWIdzJvFC75CG2Ey/bvZmdT/6Mx7SzE2+3SHnbhD/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPDZUOSka7q/nOt6fUemeVi+rSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvODY5MjBkMGEtNGVlZi0z MTczLWE0NmItNTE2NDEwMzg1YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1YeiYlX5WbAW4fok9mfPTgWkl44/DQc4gPW/E3HQS9xkz7KWOtS451 BKItRNPUsdgBWn8rJvBU2jSLCkVVVTfiHhbdrerighHnKKL4sRYpVMo2ZX0ui9br 6onDB60rK0InU6rCXE+azuC5BR6VlLQX9S2WjiUmKs1BMgCy3ZjIOOwyzEP4zQ/c h8bx1Ud6zyL5qdse/kbcRuX11/fZeAp8/QdadWje0USrGrHaQVG2iEH81xYuc5/n wv/ri8AasyjBjVi9OtRwzG123Pr5lMXmIfYJ1MIG1zJmO6lWDCGtlzn5jFc5Q3WS TtC/EfBUtqPJEAku3ypW0qpMgA/LDeI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:45 2026 by rpki-client