$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa File: fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa (raw, json) Hash identifier: eWR7Iyqf9lBPmzz0ih6N1qKiEQ2kz1Hksk7gajbjNgs= Subject key identifier: 4A:F3:9D:32:E6:6B:1C:A9:42:C9:8B:18:52:35:BA:AB:6F:19:3F:A0 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584D24DF64136C7C1280A1232418 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14813 IP address blocks: 72.22.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:64:13:6c:7c:12:80:a1:23:24:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5469dc3d-e47b-4943-a203-589e1c9250d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:c1:5c:a5:f6:bc:fe:20:66:de:45:cd:b9: 53:20:45:a9:a9:d7:45:1b:76:a1:97:b1:e6:40:83: 5e:b8:7c:ac:58:97:b4:88:38:08:f8:65:69:94:1f: 60:e6:99:3a:d9:d7:61:b4:f9:83:ae:e5:ad:42:3a: 1c:ba:fe:62:87:66:2c:35:6d:8c:93:5e:1f:69:d4: 99:c6:7f:a3:f3:c6:34:4b:95:59:86:ef:4d:94:31: 26:39:5f:62:f7:1e:c2:9a:02:fe:5b:f8:a7:f7:6d: 2e:95:f4:32:c1:28:4c:f1:e9:90:5d:78:1a:94:1a: e3:52:58:55:64:c9:3e:72:6d:c3:ee:5d:01:cc:f9: 85:d7:0d:39:5e:a3:90:36:43:cb:c8:65:2a:36:4c: 44:a8:a2:35:08:4f:a1:2b:99:78:d9:39:7c:e1:da: 18:a0:4b:0a:f3:84:7c:fa:ec:ac:f7:fc:58:28:c6: 94:cf:64:78:cc:00:d8:b9:39:bf:08:b9:d1:ef:d9: cc:d2:4a:22:92:d2:10:bd:9f:9d:05:11:c0:96:9c: 69:b7:63:40:3b:bb:df:f7:c8:f9:ca:20:39:0a:2b: 60:34:f8:2e:6d:66:64:93:7e:a6:7f:c9:35:e2:76: d6:40:0c:eb:87:86:be:72:e9:d4:68:c1:e8:aa:70: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F3:9D:32:E6:6B:1C:A9:42:C9:8B:18:52:35:BA:AB:6F:19:3F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:57:c5:19:28:7f:b2:41:2f:53:92:ab:ba:f0:72:52:d1:93: 57:82:f2:a0:a0:96:26:84:74:26:76:06:6a:11:30:a6:a2:0c: 05:b3:c8:8e:25:9d:ae:d1:b3:0f:34:c0:f6:89:ee:4c:27:09: da:dc:15:47:a5:22:99:0d:3c:8c:61:5c:ac:fd:02:5b:3c:a3: 4d:6c:fe:46:8c:99:b2:40:d5:0d:85:a8:33:47:cb:87:6f:af: 74:3e:22:71:47:99:e0:32:8f:c4:32:e8:d2:c7:76:14:d1:ff: 4b:4e:23:4e:3f:d0:30:32:09:7d:e9:25:03:e6:c1:9a:93:94: 97:3a:c6:45:4d:88:de:3e:8f:0f:7d:ce:6c:3f:ba:16:30:67: dd:5a:a6:f2:83:fb:0b:5c:18:75:bd:68:fe:7b:80:14:c2:2f: d2:a3:1d:ce:3d:18:e4:f3:3f:6f:76:ca:c1:77:2f:d3:0e:9e: fa:40:d0:72:a8:d2:6a:88:d8:a7:84:9c:1a:88:fd:45:fd:65: 79:19:59:e0:eb:ec:76:d3:30:ca:2b:ca:50:5e:fd:fb:b8:91: a5:bc:92:58:c7:89:e2:27:8f:41:a5:ec:bd:92:19:d7:49:bf: 8e:f9:61:ba:88:f7:f0:fa:86:0b:6c:ea:f5:70:39:ff:44:60: b1:18:2f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k32QTbHwSgKEjJBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTQ2OWRjM2QtZTQ3Yi00OTQzLWEyMDMtNTg5ZTFjOTI1MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaXBXKX2vP4gZt5FzblTIEWpqddFG3ahl7Hm QINeuHysWJe0iDgI+GVplB9g5pk62ddhtPmDruWtQjocuv5ih2YsNW2Mk14fadSZ xn+j88Y0S5VZhu9NlDEmOV9i9x7CmgL+W/in920ulfQywShM8emQXXgalBrjUlhV ZMk+cm3D7l0BzPmF1w05XqOQNkPLyGUqNkxEqKI1CE+hK5l42Tl84doYoEsK84R8 +uys9/xYKMaUz2R4zADYuTm/CLnR79nM0koiktIQvZ+dBRHAlpxpt2NAO7vf98j5 yiA5CitgNPgubWZkk36mf8k14nbWQAzrh4a+cunUaMHoqnBtOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErznTLmaxypQsmLGFI1uqtvGT+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZmI5OWI5OTYtZGVhNi0z YmEyLWE5ZTItYWI1NmJhYzJmMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZXxRkof7JBL1OSq7rwclLRk1eC8qCgliaEdCZ2BmoRMKaiDAWzyI4l na7Rsw80wPaJ7kwnCdrcFUelIpkNPIxhXKz9Als8o01s/kaMmbJA1Q2FqDNHy4dv r3Q+InFHmeAyj8Qy6NLHdhTR/0tOI04/0DAyCX3pJQPmwZqTlJc6xkVNiN4+jw99 zmw/uhYwZ91apvKD+wtcGHW9aP57gBTCL9KjHc49GOTzP292ysF3L9MOnvpA0HKo 0mqI2KeEnBqI/UX9ZXkZWeDr7HbTMMorylBe/fu4kaW8kljHieInj0Gl7L2SGddJ v475YbqI9/D6hgts6vVwOf9EYLEYL7g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:04 2026 by rpki-client