$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa File: fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa (raw, json) Hash identifier: FHsU3vtsNWDn14W4yTvJRpk4xCfENmnYrjQq5WAXz10= Subject key identifier: EB:45:63:3F:0E:92:13:78:2B:1E:03:B9:34:86:50:0F:44:46:37:82 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584F4972A7C8B96A3CCB80927280 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14813 IP address blocks: 72.22.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a7:c8:b9:6a:3c:cb:80:92:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4669e28-be2c-4f95-9e50-58def9b45e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:f8:9a:39:0a:3f:04:90:77:8a:d9:38:3b: 7e:cd:0c:5f:ec:4b:b7:5c:f5:92:8f:7f:b3:00:05: f0:bf:cc:5b:69:79:e4:e6:f1:8a:00:27:42:c4:19: e7:95:87:a8:03:d5:17:80:10:0c:cb:ba:f4:82:5d: b9:08:84:f8:db:bb:93:56:05:04:50:ce:91:9d:d6: a0:8f:a2:89:72:8f:c9:f3:37:18:fd:36:46:b9:cf: ed:aa:31:51:3f:1a:a2:93:01:47:77:e6:5e:38:00: 65:08:8c:b7:38:4a:cc:75:ed:56:0e:a1:e4:3f:3f: 86:86:21:db:96:33:c0:4b:67:0f:54:8e:8a:8c:a4: d4:4d:42:c0:e0:0b:a0:90:5e:bc:e3:7d:d7:23:1c: f1:21:9c:75:8f:2c:57:2f:c9:7b:86:c4:dc:b8:ad: 8c:68:7b:1b:25:8e:88:f7:2b:2e:63:c0:4e:41:37: ff:fc:dc:06:09:82:01:6b:b7:64:ee:5f:ac:86:9b: 60:d2:34:18:ab:51:41:0d:81:ae:ef:ec:a3:ce:32: 0f:42:66:81:6f:7f:1a:92:a4:a3:e5:ed:77:30:1c: 1a:38:2f:f6:68:f9:9d:af:33:80:44:ea:d0:bc:76: 43:ff:30:f3:a7:9b:d9:0e:f4:3b:42:de:17:8c:f3: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:63:3F:0E:92:13:78:2B:1E:03:B9:34:86:50:0F:44:46:37:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/fb99b996-dea6-3ba2-a9e2-ab56bac2f392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:66:13:65:70:6a:58:92:1e:dd:1a:f6:74:20:f2:9b:e6:c1: bc:f5:bf:cd:57:eb:52:15:6a:c5:c5:02:d1:d9:1b:d5:fd:90: bd:3d:75:d8:5b:e6:a8:d6:cf:f9:6d:7f:b6:04:cc:42:68:42: bd:e2:fc:ff:a3:66:f6:9c:a2:2a:14:f5:c3:23:6b:08:03:7a: 9e:2f:99:29:b9:53:40:b7:05:d5:67:01:cb:4b:fd:47:fd:d9: ed:07:c6:cc:d9:97:e8:64:48:4e:d1:21:c5:0e:2d:2b:57:d6: bb:0d:80:8c:39:e4:a2:76:c5:7c:ae:7b:da:82:a9:c9:e8:94: ab:eb:56:fd:c1:43:cd:30:c7:2b:cf:1f:ec:1a:5b:4d:78:b1: 07:85:5f:ed:3e:f6:17:70:bf:77:45:a6:63:45:31:84:a5:99: c3:80:f4:90:1f:6b:9a:77:a1:66:1e:91:4f:5f:09:f3:75:d6: 40:3f:78:e4:5f:40:f2:9d:7b:8f:fd:41:54:4c:c7:4b:db:3e: 0d:7e:c9:b1:fa:a1:39:81:1e:5b:e5:34:09:3b:37:3f:ff:12: 4b:2c:3a:76:25:2a:3f:45:b8:1f:96:58:70:a0:20:c8:26:95: 49:d1:fe:eb:64:b9:ca:51:d6:c1:22:1b:0c:66:fa:49:b3:38: 29:3f:08:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqfIuWo8y4CScoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ2NjllMjgtYmUyYy00Zjk1LTllNTAtNThkZWY5YjQ1ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUv4mjkKPwSQd4rZODt+zQxf7Eu3XPWSj3+z AAXwv8xbaXnk5vGKACdCxBnnlYeoA9UXgBAMy7r0gl25CIT427uTVgUEUM6Rndag j6KJco/J8zcY/TZGuc/tqjFRPxqikwFHd+ZeOABlCIy3OErMde1WDqHkPz+GhiHb ljPAS2cPVI6KjKTUTULA4AugkF68433XIxzxIZx1jyxXL8l7hsTcuK2MaHsbJY6I 9ysuY8BOQTf//NwGCYIBa7dk7l+shptg0jQYq1FBDYGu7+yjzjIPQmaBb38akqSj 5e13MBwaOC/2aPmdrzOAROrQvHZD/zDzp5vZDvQ7Qt4XjPPS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtFYz8OkhN4Kx4DuTSGUA9ERjeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvZmI5OWI5OTYtZGVhNi0z YmEyLWE5ZTItYWI1NmJhYzJmMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZmE2VwaliSHt0a9nQg8pvmwbz1v81X61IVasXFAtHZG9X9kL09ddhb 5qjWz/ltf7YEzEJoQr3i/P+jZvacoioU9cMjawgDep4vmSm5U0C3BdVnActL/Uf9 2e0HxszZl+hkSE7RIcUOLStX1rsNgIw55KJ2xXyue9qCqcnolKvrVv3BQ80wxyvP H+waW014sQeFX+0+9hdwv3dFpmNFMYSlmcOA9JAfa5p3oWYekU9fCfN11kA/eORf QPKde4/9QVRMx0vbPg1+ybH6oTmBHlvlNAk7Nz//EkssOnYlKj9FuB+WWHCgIMgm lUnR/utkucpR1sEiGwxm+kmzOCk/CH4= -----END CERTIFICATE-----Generated at Tue Sep 29 11:33:12 2026 by rpki-client