$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa File: cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa (raw, json) Hash identifier: GwfcexW++gqRHcAnApyE1q9aQrYizpMaZYC7N8fJEQs= Subject key identifier: CE:D0:C4:B2:55:D3:14:C7:EF:21:B9:CB:C6:C1:BE:34:5D:88:A5:80 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF6D7245BA65A4B2A9B900 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6d:72:45:ba:65:a4:b2:a9:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fcdb585e-1cd6-44d2-b9a8-c8aad6bd622b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:ed:2a:a4:c7:74:c0:da:bf:1d:02:cf:77: 86:23:e8:a7:8b:69:30:17:be:90:24:a3:12:09:fd: 64:ac:49:e3:1b:72:72:48:a8:0c:8e:4a:47:6f:34: 88:ab:1a:2c:98:0e:82:db:9f:b7:22:52:7c:62:a0: 80:d1:bb:58:76:39:08:b4:6a:a0:7c:f4:ef:6e:e8: 2b:db:8d:32:dd:07:e3:cf:56:12:9e:7e:f3:ad:ba: 3e:60:89:fc:a5:0d:46:c1:e7:df:be:bc:00:11:d3: ab:fa:04:61:04:a6:35:bf:ca:ba:41:6c:59:76:44: 2d:fa:b0:e5:74:41:d7:06:68:b0:ca:66:9c:b9:87: 3b:1a:4c:ef:2f:81:8f:dd:70:f5:1d:64:b6:63:26: b3:76:26:02:6d:f5:3b:93:29:dd:63:80:6e:d0:97: 26:04:a9:a2:ea:67:79:35:d0:5b:a2:9d:95:f2:44: 27:68:61:aa:68:b9:30:17:95:a4:e2:33:e9:b0:6a: a8:07:2c:ba:58:96:9a:81:8a:e2:8a:63:45:41:18: e4:f3:d8:e2:2f:76:a3:50:41:b6:9f:7c:47:fd:44: cd:4e:19:b3:66:bf:a2:88:af:20:2f:27:4e:b8:d2: 0f:6f:4c:5a:8b:6f:86:2f:e6:06:18:ac:7c:f8:79: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D0:C4:B2:55:D3:14:C7:EF:21:B9:CB:C6:C1:BE:34:5D:88:A5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:70:e4:f1:c9:cb:d1:8f:80:02:84:e2:05:bc:0b:59:42:ac: 76:6d:08:cd:74:ab:3f:af:3a:f6:f9:bb:78:cd:6a:cf:48:23: eb:76:2a:98:bb:fd:54:3b:d5:80:70:1c:9b:94:45:70:08:f6: 37:2e:66:1e:08:fa:27:d0:d3:3c:1f:c4:12:69:cb:aa:db:a5: 7f:3e:0b:50:80:04:67:eb:24:c5:ef:3d:c5:38:2c:00:fa:2f: ef:ca:b7:cb:00:47:5d:2e:e5:4a:65:e1:cf:a9:a1:30:43:78: 61:2e:8d:15:6c:ff:7f:c6:b1:5c:1c:f5:1d:89:a9:15:ae:d4: ac:de:18:44:1e:dd:1c:be:95:12:07:8f:86:cc:97:b8:b3:f8: ea:0c:86:b6:9c:c7:24:87:90:9a:3e:b0:3b:94:6c:9b:ce:59: 23:74:2e:05:07:38:41:6a:b4:66:35:ba:0b:5d:20:f8:75:9f: 7b:5f:8b:44:f7:e5:53:a2:13:b9:af:f8:3b:63:97:b8:9f:46: 87:b6:d3:ce:2b:b2:17:9a:8d:98:d2:0b:bf:36:25:eb:a6:28: a2:69:db:e1:7a:1b:29:b3:d5:9b:cd:71:e4:d5:97:46:94:be: 3d:ab:e9:6c:6d:bb:1c:57:dd:41:d6:6f:41:7c:db:0e:55:02: 2c:e9:76:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k321yRbplpLKpuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmNkYjU4NWUtMWNkNi00NGQyLWI5YTgtYzhhYWQ2YmQ2MjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0PtKqTHdMDavx0Cz3eGI+ini2kwF76QJKMS Cf1krEnjG3JySKgMjkpHbzSIqxosmA6C25+3IlJ8YqCA0btYdjkItGqgfPTvbugr 240y3Qfjz1YSnn7zrbo+YIn8pQ1GweffvrwAEdOr+gRhBKY1v8q6QWxZdkQt+rDl dEHXBmiwymacuYc7GkzvL4GP3XD1HWS2YyazdiYCbfU7kyndY4Bu0JcmBKmi6md5 NdBbop2V8kQnaGGqaLkwF5Wk4jPpsGqoByy6WJaagYriimNFQRjk89jiL3ajUEG2 n3xH/UTNThmzZr+iiK8gLydOuNIPb0xai2+GL+YGGKx8+HmM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7QxLJV0xTH7yG5y8bBvjRdiKWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2I0ZjliOWYtNjQ0Ni0z NjAzLTgyYjUtM2NhM2Q4MGI0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItw5PHJy9GPgAKE4gW8C1lCrHZtCM10qz+vOvb5u3jNas9II+t2Kpi7 /VQ71YBwHJuURXAI9jcuZh4I+ifQ0zwfxBJpy6rbpX8+C1CABGfrJMXvPcU4LAD6 L+/Kt8sAR10u5Upl4c+poTBDeGEujRVs/3/GsVwc9R2JqRWu1KzeGEQe3Ry+lRIH j4bMl7iz+OoMhracxySHkJo+sDuUbJvOWSN0LgUHOEFqtGY1ugtdIPh1n3tfi0T3 5VOiE7mv+Dtjl7ifRoe2084rsheajZjSC782JeumKKJp2+F6Gymz1ZvNceTVl0aU vj2r6WxtuxxX3UHWb0F82w5VAizpdkY= -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:36 2026 by rpki-client