$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa File: d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa (raw, json) Hash identifier: 53vf+Dduwi2QP9I40XgVkNfcpSoOK8lrN0P12+JDfTM= Subject key identifier: 2D:0C:BE:FA:6A:09:0C:3A:E1:62:A3:27:66:D0:94:58:CA:0A:4E:55 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24E126118C74ABEF4673BB40 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:26:11:8c:74:ab:ef:46:73:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=18ecee30-6558-4d50-b920-6143a7f0b5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:36:64:25:9e:a5:e7:89:8f:19:56:27:21: 0b:f8:77:79:b4:59:03:3c:20:57:50:1d:86:db:20: 79:8b:73:e8:ee:80:b2:24:5b:7a:68:3b:ad:69:0b: 17:1d:19:f8:0d:c9:18:a6:62:48:e9:3c:66:43:db: e7:38:99:fe:9a:eb:ca:dd:76:4e:b1:6a:17:a7:ce: e9:ea:21:2d:b3:97:ec:2c:01:7c:86:e2:3a:06:60: 1e:58:8a:7f:de:b5:aa:cc:27:88:19:fb:12:fc:88: a6:35:0e:55:f9:3a:52:d8:74:2f:73:06:47:d6:da: 02:78:5c:64:d3:3f:2c:7a:7c:4c:df:1e:55:2f:f1: 2f:c6:f2:36:59:62:59:e3:42:2b:a7:8c:25:32:99: 4b:61:72:31:73:ea:b1:91:94:28:a1:be:5e:e2:74: 89:e7:35:d8:6a:8e:28:d9:80:f8:08:4d:ef:e9:66: 3d:66:8f:e1:30:44:c0:af:52:3f:77:e5:42:00:02: 87:50:85:cf:8f:76:01:dc:c0:3c:bb:92:9b:f6:6b: a3:60:4a:bd:b0:83:8c:c2:5f:f7:53:06:b0:02:dc: 29:24:32:0c:b4:35:c7:27:81:fa:2c:0e:c0:6b:ef: ff:79:9e:cb:01:e9:12:c2:0e:32:c2:bb:c4:94:fa: 07:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0C:BE:FA:6A:09:0C:3A:E1:62:A3:27:66:D0:94:58:CA:0A:4E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/d6e40a07-1968-3c10-9e42-aa8d86b9f665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:04:32:0f:f9:d7:0c:18:8c:4d:a9:32:52:51:0d:20:f1:d1: e5:f6:e4:63:92:7a:8d:c2:c3:60:fa:d2:c0:2c:95:46:13:e5: 49:2f:ec:d4:d3:c2:02:97:70:4b:4d:02:7b:e9:57:0d:1d:0d: 93:8b:58:8c:aa:82:69:88:50:cd:85:b4:cf:a6:54:6c:be:41: 75:f6:6a:86:95:d6:60:da:5c:23:88:92:7c:9d:f3:6a:ba:66: 83:b6:4f:c2:11:e9:c6:4f:4a:56:ef:2e:98:d7:17:f0:96:1b: 2c:26:99:54:6f:a0:57:98:2c:c7:c7:72:5e:48:82:f3:14:2a: ae:13:2b:22:3c:e4:22:34:62:49:e1:79:fb:e9:3a:5a:dc:01: 42:a0:30:af:29:d1:4e:97:ee:4b:d0:cd:80:87:d6:33:44:a1: 46:26:af:1e:f4:6f:5e:7d:ee:e7:a7:88:a4:0d:42:20:28:51: 70:fa:e3:e9:53:6e:22:20:d4:83:d0:d1:31:1a:c4:d0:3f:28: 2a:80:fe:7e:13:16:85:3e:e5:a6:79:ac:ba:7a:fb:71:f7:90: 17:a4:59:1f:09:a4:9d:73:05:30:bf:98:c4:a3:ca:ca:fe:d0: 1a:13:51:de:2b:95:bf:0a:d6:12:83:23:2b:ec:8a:5f:4d:e0: 88:35:41:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SYRjHSr70Zzu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MThlY2VlMzAtNjU1OC00ZDUwLWI5MjAtNjE0M2E3ZjBiNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFE2ZCWepeeJjxlWJyEL+Hd5tFkDPCBXUB2G 2yB5i3Po7oCyJFt6aDutaQsXHRn4DckYpmJI6TxmQ9vnOJn+muvK3XZOsWoXp87p 6iEts5fsLAF8huI6BmAeWIp/3rWqzCeIGfsS/IimNQ5V+TpS2HQvcwZH1toCeFxk 0z8senxM3x5VL/EvxvI2WWJZ40Irp4wlMplLYXIxc+qxkZQoob5e4nSJ5zXYao4o 2YD4CE3v6WY9Zo/hMETAr1I/d+VCAAKHUIXPj3YB3MA8u5Kb9mujYEq9sIOMwl/3 UwawAtwpJDIMtDXHJ4H6LA7Aa+//eZ7LAekSwg4ywrvElPoHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0MvvpqCQw64WKjJ2bQlFjKCk5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZDZlNDBhMDctMTk2OC0z YzEwLTllNDItYWE4ZDg2YjlmNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAEMg/51wwYjE2pMlJRDSDx0eX25GOSeo3Cw2D60sAslUYT5Ukv7NTT wgKXcEtNAnvpVw0dDZOLWIyqgmmIUM2FtM+mVGy+QXX2aoaV1mDaXCOIknyd82q6 ZoO2T8IR6cZPSlbvLpjXF/CWGywmmVRvoFeYLMfHcl5IgvMUKq4TKyI85CI0Yknh efvpOlrcAUKgMK8p0U6X7kvQzYCH1jNEoUYmrx70b1597ueniKQNQiAoUXD64+lT biIg1IPQ0TEaxNA/KCqA/n4TFoU+5aZ5rLp6+3H3kBekWR8JpJ1zBTC/mMSjysr+ 0BoTUd4rlb8K1hKDIyvsil9N4Ig1QU0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:16 2026 by rpki-client