$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json) Hash identifier: nLDZszbv8fYaCLgln56J4UzLskYOeqs0FO1AgXN5NQI= Subject key identifier: AC:83:92:F7:54:72:45:30:17:78:78:AC:84:6B:91:47:58:59:82:7D Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584E66DA09F62D82FB5A15671800 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 32524 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:f6:2d:82:fb:5a:15:67:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=7137d04e-091d-4538-9491-ba0600fac77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:ca:97:f3:3f:e6:bb:55:3b:41:97:25:a0: b3:42:11:aa:7a:88:4e:6e:77:72:4f:c0:c7:6e:6f: 8a:91:b2:3a:93:91:75:84:da:cc:19:1c:b5:70:41: 92:14:39:b6:cf:38:e4:9c:4a:95:dc:1e:64:f7:32: a6:81:7c:40:37:13:82:cb:fa:e4:ac:c1:10:35:cf: af:c2:e8:22:d7:e9:8a:b0:47:ec:ff:bb:1f:c4:41: 7b:94:40:49:13:a2:7f:7b:ba:4c:75:f5:bb:3d:20: ca:a7:10:59:8e:ed:67:30:0f:84:cb:c4:fd:5e:bd: 4a:e0:70:da:22:94:f4:7b:30:41:6d:c3:c3:75:98: 92:90:f8:a4:63:12:55:1f:09:d1:a3:c4:1d:8c:6f: 67:b9:22:1c:c2:9c:ad:41:dd:37:86:c9:16:5d:ad: 6d:7a:19:bf:78:af:26:59:ca:60:ce:f7:84:33:55: 4a:a3:eb:e4:2c:ee:8e:92:fd:09:bd:85:27:1d:eb: 91:87:ac:64:5b:69:e4:14:6b:1a:fd:79:1c:91:9f: 9c:ba:d6:20:6a:c7:45:e1:c6:22:05:09:dd:f9:ec: 0a:ec:4f:8b:58:ba:0f:2f:a1:df:20:60:bb:cd:77: 38:fa:df:17:92:d3:9d:e7:4d:2b:3f:b6:76:1a:d0: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:83:92:F7:54:72:45:30:17:78:78:AC:84:6B:91:47:58:59:82:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:24:f7:ac:61:16:bb:df:49:96:16:dc:f2:35:35:e2:b6:d4: 2b:59:d1:11:cb:b1:2b:7a:76:e1:a7:33:58:42:ad:f3:a9:de: b7:de:2c:55:e1:64:ed:ca:dd:d2:6b:b4:33:03:91:f9:bb:ce: ba:97:b9:1d:37:51:d2:68:5b:b3:e7:11:57:fe:c4:4a:35:ff: e9:c5:68:07:d9:0b:ed:43:8f:65:32:39:65:55:66:bd:38:e2: 06:36:75:9e:ed:01:67:fa:42:86:a6:41:0e:a5:17:af:c8:c5: bb:30:07:ad:8d:d7:35:f7:ee:d8:15:6a:3b:70:34:41:8e:6c: 2e:61:cd:9d:39:59:1c:b6:6f:1a:4e:51:6c:81:b2:6d:d8:47: 1f:2f:d6:e5:ce:9c:a9:11:2d:1b:0d:54:19:33:cf:e4:ce:70: 53:8e:b8:d1:7b:61:25:b1:fd:a9:09:34:e9:a5:ad:47:57:fa: 7d:e5:dc:68:a2:87:6e:98:4b:db:ff:e8:63:69:84:37:3a:5c: 15:82:3a:7d:0d:d0:15:c1:c1:ef:c2:02:a4:31:6d:2e:7f:d1: 3e:45:50:f2:64:34:a3:e0:1e:45:16:09:b6:c8:65:d3:9f:d3: db:ec:73:ab:24:2b:b5:aa:60:01:9b:24:35:52:3b:06:cb:8f: 3b:4f:30:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gn2LYL7WhVnGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NzEzN2QwNGUtMDkxZC00NTM4LTk0OTEtYmEwNjAwZmFjNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzKl/M/5rtVO0GXJaCzQhGqeohObndyT8DH bm+KkbI6k5F1hNrMGRy1cEGSFDm2zzjknEqV3B5k9zKmgXxANxOCy/rkrMEQNc+v wugi1+mKsEfs/7sfxEF7lEBJE6J/e7pMdfW7PSDKpxBZju1nMA+Ey8T9Xr1K4HDa IpT0ezBBbcPDdZiSkPikYxJVHwnRo8QdjG9nuSIcwpytQd03hskWXa1tehm/eK8m WcpgzveEM1VKo+vkLO6Okv0JvYUnHeuRh6xkW2nkFGsa/XkckZ+cutYgasdF4cYi BQnd+ewK7E+LWLoPL6HfIGC7zXc4+t8XktOd500rP7Z2GtBYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyDkvdUckUwF3h4rIRrkUdYWYJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0k96xhFrvfSZYW3PI1NeK21CtZ0RHLsSt6duGnM1hCrfOp3rfeLFXh ZO3K3dJrtDMDkfm7zrqXuR03UdJoW7PnEVf+xEo1/+nFaAfZC+1Dj2UyOWVVZr04 4gY2dZ7tAWf6QoamQQ6lF6/IxbswB62N1zX37tgVajtwNEGObC5hzZ05WRy2bxpO UWyBsm3YRx8v1uXOnKkRLRsNVBkzz+TOcFOOuNF7YSWx/akJNOmlrUdX+n3l3Gii h26YS9v/6GNphDc6XBWCOn0N0BXBwe/CAqQxbS5/0T5FUPJkNKPgHkUWCbbIZdOf 09vsc6skK7WqYAGbJDVSOwbLjztPMPs= -----END CERTIFICATE-----Generated at Fri Jul 24 17:03:39 2026 by rpki-client