$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa File: b01d2239-7b24-3ca6-9965-8de122cf4593.roa (raw, json) Hash identifier: e1tPF/EJ/k7u2X87t/fqg5xkC5zB2E4wnvwyke+gF08= Subject key identifier: 44:71:47:10:7F:C8:E5:1A:99:BB:DE:DA:E7:34:95:8D:77:F3:D5:88 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584F498A17CF49F6EA927301B6C0 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14813 IP address blocks: 72.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:17:cf:49:f6:ea:92:73:01:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35a5128c-9c0b-4dd3-ac03-4717a57fae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:13:b2:3b:3b:b7:4c:da:24:18:a1:7d:1b: cc:2f:71:9d:80:b7:84:b0:e7:da:89:3e:bb:8e:ad: 58:f7:24:5a:01:c9:1d:63:02:f6:cc:bb:4d:22:8f: 92:a2:43:52:86:27:de:e1:bd:67:6d:e4:b4:b2:ed: 2c:7b:25:8f:ec:dc:9f:b1:45:9e:e6:f7:72:fd:a8: 49:d4:97:87:bb:39:06:7b:2e:9c:9e:70:fc:cd:c7: 23:10:06:67:15:cc:dc:c4:1b:4c:5b:e2:dd:61:46: 9b:b5:d8:af:d5:aa:59:b2:6e:ce:0c:49:c8:c2:1d: 35:89:ab:23:b7:be:8f:10:ae:27:83:cf:16:de:29: a1:2f:ef:5d:21:b7:3b:a9:3c:30:f2:0d:07:fb:be: 06:1e:4c:11:4f:59:80:1b:16:69:3d:45:11:5d:15: 52:82:b1:0f:5e:a0:09:45:e8:7c:8c:fb:a4:cc:bc: 5e:ec:fb:bc:4e:99:7b:e5:16:39:9f:1e:e9:e9:0f: 45:ee:91:de:b5:2a:12:67:ff:98:e1:37:a9:93:6f: d0:20:54:91:0e:ad:d3:62:70:dd:00:81:a0:a9:15: ca:cd:55:85:95:4f:ee:16:bb:64:5b:90:41:7a:d0: 16:f4:50:b4:90:df:64:13:d7:86:43:03:fa:40:b0: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:47:10:7F:C8:E5:1A:99:BB:DE:DA:E7:34:95:8D:77:F3:D5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/b01d2239-7b24-3ca6-9965-8de122cf4593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f0:84:30:ab:53:66:58:fc:3b:bc:07:3f:65:75:21:4c:7f: 23:65:de:4f:b7:98:53:3c:6d:74:7e:2d:bb:84:42:b9:97:27: 32:ef:f0:1d:cd:ee:6d:70:96:38:36:5b:82:d4:aa:cb:ed:53: 5a:e0:11:5c:8d:47:c3:79:86:95:89:d3:87:a9:b8:f4:90:ae: 6a:3e:e4:5a:e8:e5:2b:c8:1c:5c:a9:1e:81:b3:24:5d:49:28: b2:6e:b2:f9:a7:4b:fa:45:b7:25:1e:f4:22:57:0f:bd:52:00: a4:19:ee:f8:c0:16:62:7f:05:e3:ca:85:b8:b4:85:63:8e:b2: 2f:6c:55:30:0e:e7:da:45:6c:73:95:c7:d9:ae:57:66:7c:e2: 0a:9d:ee:90:00:32:0f:89:ec:e1:17:db:e8:e0:ae:7b:aa:29: 0d:a9:96:32:56:a3:8a:9a:bc:ed:0f:96:f1:59:29:5b:e9:23: 86:96:99:56:40:6b:a8:90:cf:24:d6:e4:d4:e8:48:01:b0:44: 49:fc:01:52:c9:05:43:44:b1:92:d8:f9:98:45:ab:b4:b0:57: 30:6a:32:88:f3:0f:90:eb:e0:f6:c4:1c:ec:6f:d1:e0:c0:de: a7:91:51:a3:85:74:6e:7b:3e:14:f6:e1:e6:a3:59:c1:de:e7: f0:51:e3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JihfPSfbqknMBtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVhNTEyOGMtOWMwYi00ZGQzLWFjMDMtNDcxN2E1N2ZhZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUTsjs7t0zaJBihfRvML3GdgLeEsOfaiT67 jq1Y9yRaAckdYwL2zLtNIo+SokNShife4b1nbeS0su0seyWP7NyfsUWe5vdy/ahJ 1JeHuzkGey6cnnD8zccjEAZnFczcxBtMW+LdYUabtdiv1apZsm7ODEnIwh01iasj t76PEK4ng88W3imhL+9dIbc7qTww8g0H+74GHkwRT1mAGxZpPUURXRVSgrEPXqAJ Reh8jPukzLxe7Pu8Tpl75RY5nx7p6Q9F7pHetSoSZ/+Y4Tepk2/QIFSRDq3TYnDd AIGgqRXKzVWFlU/uFrtkW5BBetAW9FC0kN9kE9eGQwP6QLAXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERxRxB/yOUambve2uc0lY1389WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYjAxZDIyMzktN2IyNC0z Y2E2LTk5NjUtOGRlMTIyY2Y0NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnwhDCrU2ZY/Du8Bz9ldSFMfyNl3k+3mFM8bXR+LbuEQrmXJzLv8B3N 7m1wljg2W4LUqsvtU1rgEVyNR8N5hpWJ04epuPSQrmo+5Fro5SvIHFypHoGzJF1J KLJusvmnS/pFtyUe9CJXD71SAKQZ7vjAFmJ/BePKhbi0hWOOsi9sVTAO59pFbHOV x9muV2Z84gqd7pAAMg+J7OEX2+jgrnuqKQ2pljJWo4qavO0PlvFZKVvpI4aWmVZA a6iQzyTW5NToSAGwREn8AVLJBUNEsZLY+ZhFq7SwVzBqMojzD5Dr4PbEHOxv0eDA 3qeRUaOFdG57PhT24eajWcHe5/BR48Y= -----END CERTIFICATE-----Generated at Tue Sep 29 10:50:36 2026 by rpki-client