$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa File: 8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa (raw, json) Hash identifier: Joe3A/UpYq2mU40q7qxM7YUfidhGOqjdZ170b7YFExU= Subject key identifier: F4:BC:96:BB:71:2D:6B:40:D4:5A:75:E5:D7:EC:B1:24:A2:66:90:8B Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF76FE8EFCE51203A85030 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.51.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:76:fe:8e:fc:e5:12:03:a8:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2f2ad5a0-3308-4192-ac9d-5fe746422dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:7d:a6:e0:49:87:56:2b:c1:a4:e3:6d:d6: 00:0e:e9:86:27:d6:e2:66:55:ec:5a:b6:67:1e:45: 08:90:a9:f6:cc:d7:39:7c:da:33:d1:bb:ed:82:82: 01:58:45:e2:e1:58:71:48:77:67:f5:92:a5:e4:50: 3d:f0:3f:99:af:9a:4d:e0:0e:18:7b:56:ad:a0:f7: 7b:e1:16:6b:fc:56:1b:35:36:52:15:1c:3d:f9:83: 8e:fc:44:37:2f:85:ae:e0:21:37:8f:16:1e:f5:16: 37:cb:98:8b:8d:6f:bb:fd:25:5c:24:b5:03:8b:18: 40:e9:50:da:e4:8b:76:75:6f:f7:a0:97:e0:b7:07: 76:e9:2e:36:4f:50:5a:4e:9d:cd:4b:5c:da:cd:66: 8e:46:47:96:b9:10:76:b1:55:33:1d:72:ba:95:85: 90:17:e3:64:49:a1:f6:42:4c:35:e4:8f:42:b1:18: bf:e4:92:ea:e4:43:9c:bb:7e:42:c4:be:30:01:12: ba:f9:e3:f8:c4:68:e0:41:d4:37:e2:21:c7:2b:5d: ad:b6:f3:b4:e4:2b:9a:d4:b5:bd:5d:35:a2:e5:39: ae:07:ca:4d:4f:d7:9c:88:b1:a4:5b:ee:2e:07:66: 35:a8:3e:90:d4:54:85:7c:a6:d1:56:86:90:15:0d: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:96:BB:71:2D:6B:40:D4:5A:75:E5:D7:EC:B1:24:A2:66:90:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/8f7a8d8b-1ad7-3f2e-a11d-62f2b96b5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.51.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3a:9e:e5:44:93:57:58:dd:f2:26:be:8c:45:20:49:57:62: 16:89:55:c8:52:d9:14:77:65:34:08:57:3a:78:83:71:e4:e9: 9f:e3:84:8c:10:de:f0:a9:18:bb:e3:a3:c4:7d:80:ca:4a:04: 8a:be:3c:5b:a1:fc:bf:8e:d7:b4:58:61:4c:13:c2:e7:d2:ae: 9c:87:b9:11:eb:0f:3d:08:c1:4b:b7:04:72:72:65:85:4d:95: 3a:7b:59:71:69:3c:78:79:df:28:09:e2:48:8a:f9:e0:a8:88: 64:50:9b:b6:e9:75:f1:64:9b:d9:e1:c0:44:76:e1:6f:9b:be: 35:e5:49:c6:e2:48:fa:a9:3c:c7:e5:6a:8a:69:30:13:27:a6: 3c:61:c8:a0:7c:2f:00:5e:0c:93:54:3e:36:ab:c7:89:0a:a4: d7:4a:cb:07:05:55:ea:98:9e:c6:79:63:42:65:95:db:8c:7f: 82:49:ad:2a:8d:42:5b:47:92:ed:45:9d:b6:a5:e3:30:4e:c5: 56:4a:4a:bf:13:3a:d5:1a:ea:31:b0:36:30:05:da:17:b9:1b: c7:b2:de:28:c0:d7:46:8b:e2:22:8c:76:4b:16:e6:ec:6a:78: 58:12:dd:2a:fc:79:f5:7a:c1:50:c0:dd:f3:b0:3b:cc:44:59: b6:2a:c9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33b+jvzlEgOoUDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmYyYWQ1YTAtMzMwOC00MTkyLWFjOWQtNWZlNzQ2NDIyZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO59puBJh1YrwaTjbdYADumGJ9biZlXsWrZn HkUIkKn2zNc5fNoz0bvtgoIBWEXi4VhxSHdn9ZKl5FA98D+Zr5pN4A4Ye1atoPd7 4RZr/FYbNTZSFRw9+YOO/EQ3L4Wu4CE3jxYe9RY3y5iLjW+7/SVcJLUDixhA6VDa 5It2dW/3oJfgtwd26S42T1BaTp3NS1zazWaORkeWuRB2sVUzHXK6lYWQF+NkSaH2 Qkw15I9CsRi/5JLq5EOcu35CxL4wARK6+eP4xGjgQdQ34iHHK12ttvO05Cua1LW9 XTWi5TmuB8pNT9eciLGkW+4uB2Y1qD6Q1FSFfKbRVoaQFQ1RmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS8lrtxLWtA1Fp15dfssSSiZpCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvOGY3YThkOGItMWFkNy0z ZjJlLWExMWQtNjJmMmI5NmI1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo6nuVEk1dY3fImvoxFIElXYhaJVchS2RR3ZTQIVzp4g3Hk6Z/jhIwQ 3vCpGLvjo8R9gMpKBIq+PFuh/L+O17RYYUwTwufSrpyHuRHrDz0IwUu3BHJyZYVN lTp7WXFpPHh53ygJ4kiK+eCoiGRQm7bpdfFkm9nhwER24W+bvjXlScbiSPqpPMfl aoppMBMnpjxhyKB8LwBeDJNUPjarx4kKpNdKywcFVeqYnsZ5Y0JllduMf4JJrSqN QltHku1Fnbal4zBOxVZKSr8TOtUa6jGwNjAF2he5G8ey3ijA10aL4iKMdksW5uxq eFgS3Sr8efV6wVDA3fOwO8xEWbYqyfA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:14:42 2026 by rpki-client