$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa File: 22321f28-08aa-3d05-b4de-e1cce43023ad.roa (raw, json) Hash identifier: /g9FAzdDpF9NOxxRfP9b2tYQ5YAPFInMlCpXVI5QwYE= Subject key identifier: 5D:C3:26:EC:D9:2C:07:2B:B8:B9:10:E2:EB:09:50:A5:3F:95:66:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D95F00D9818B77C5E967DBF60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 72.13.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0d:98:18:b7:7c:5e:96:7d:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=71eb1be8-a491-4250-8082-36ce733f16a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:fe:58:45:67:9c:6f:fa:12:d3:ed:28:0c: 4b:32:0e:61:1b:4b:ec:8d:dc:89:fe:1b:26:cb:af: fa:48:a8:cd:99:d3:5b:cc:4d:7a:4b:09:90:48:25: ab:0a:dc:57:a3:53:eb:18:27:01:7b:9b:b3:ef:90: 6a:62:ac:9f:f1:a2:ba:dc:9d:e9:87:18:a2:f2:a5: af:1d:a3:0f:43:05:70:8b:52:3d:30:89:f3:b4:14: a1:d3:1c:4b:81:fd:6e:28:39:fe:96:b5:9f:53:e4: 8d:10:8a:ff:ee:9a:db:82:09:8f:3f:61:33:84:d6: 1e:a3:75:fe:20:22:e8:53:0e:5d:6e:f7:0c:4a:16: 35:e0:51:49:b7:42:fa:b9:0d:d4:8e:06:2e:51:ff: fe:84:eb:69:74:78:c2:e6:62:2c:c7:11:c7:55:c0: e6:c3:b6:8b:7f:3e:ad:0e:df:03:6a:31:8f:99:38: ff:2d:4f:b6:f8:46:18:f5:33:b5:e7:3f:88:e9:d3: c1:22:0d:21:72:c3:96:b0:74:a3:28:97:8b:01:9e: c1:c5:51:23:89:a0:d3:80:3e:ab:06:1e:45:5b:56: 01:e1:2b:0a:cc:fb:c7:b9:e6:a2:8a:f1:ce:01:a4: 4a:db:85:21:0a:66:52:2b:3c:5a:ba:d3:87:ee:15: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:26:EC:D9:2C:07:2B:B8:B9:10:E2:EB:09:50:A5:3F:95:66:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22321f28-08aa-3d05-b4de-e1cce43023ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:90:56:f7:74:fe:d8:cb:36:f8:ad:3a:75:f9:6e:79:06:2b: 92:fb:9b:52:c7:81:74:d8:ef:46:10:01:f5:36:1d:8a:0a:80: 1c:dc:3c:78:97:0d:e1:a8:c9:9f:60:9b:55:84:c8:15:8a:0f: b9:14:01:d7:4c:c4:16:8a:67:73:24:01:20:8d:24:76:78:79: 22:2d:a3:98:7d:5c:6f:fb:f1:e3:dd:61:83:27:e4:97:33:cf: 05:5f:af:00:f7:b2:75:01:6a:a0:b7:27:1d:d7:eb:02:95:38: 81:00:71:34:f9:11:79:3b:bb:04:bb:fe:99:67:5e:e3:cd:c0: af:b7:31:f9:7e:fc:de:69:de:a2:93:85:05:93:6e:d4:19:e9: b6:62:bf:10:c7:b3:e8:83:80:e9:1f:fb:ee:d8:67:19:a7:79: 42:d4:6b:1d:2b:6d:89:df:ad:4f:44:ce:fd:ad:c6:f1:69:e9: 41:05:bd:fc:06:9f:d9:05:94:46:8c:98:d4:16:53:be:aa:d3: 9e:ba:2a:b8:35:d8:8b:63:2d:da:ef:b8:3d:bb:83:5b:cd:03: a3:bc:4d:7b:bf:a4:f7:0a:d3:c2:43:9f:5f:45:16:01:76:5e: d2:0a:3e:13:20:81:91:29:5e:73:cc:d9:97:4f:b9:eb:4e:15: dd:4e:1d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8A2YGLd8XpZ9v2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzFlYjFiZTgtYTQ5MS00MjUwLTgwODItMzZjZTczM2YxNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/+WEVnnG/6EtPtKAxLMg5hG0vsjdyJ/hsm y6/6SKjNmdNbzE16SwmQSCWrCtxXo1PrGCcBe5uz75BqYqyf8aK63J3phxii8qWv HaMPQwVwi1I9MInztBSh0xxLgf1uKDn+lrWfU+SNEIr/7prbggmPP2EzhNYeo3X+ ICLoUw5dbvcMShY14FFJt0L6uQ3UjgYuUf/+hOtpdHjC5mIsxxHHVcDmw7aLfz6t Dt8DajGPmTj/LU+2+EYY9TO15z+I6dPBIg0hcsOWsHSjKJeLAZ7BxVEjiaDTgD6r Bh5FW1YB4SsKzPvHueaiivHOAaRK24UhCmZSKzxautOH7hVWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3DJuzZLAcruLkQ4usJUKU/lWZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzMjFmMjgtMDhhYS0z ZDA1LWI0ZGUtZTFjY2U0MzAyM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCQVvd0/tjLNvitOnX5bnkGK5L7m1LHgXTY70YQAfU2HYoKgBzcPHiX DeGoyZ9gm1WEyBWKD7kUAddMxBaKZ3MkASCNJHZ4eSIto5h9XG/78ePdYYMn5Jcz zwVfrwD3snUBaqC3Jx3X6wKVOIEAcTT5EXk7uwS7/plnXuPNwK+3Mfl+/N5p3qKT hQWTbtQZ6bZivxDHs+iDgOkf++7YZxmneULUax0rbYnfrU9Ezv2txvFp6UEFvfwG n9kFlEaMmNQWU76q0566Krg12ItjLdrvuD27g1vNA6O8TXu/pPcK08JDn19FFgF2 XtIKPhMggZEpXnPM2ZdPuetOFd1OHYU= -----END CERTIFICATE-----Generated at Wed May 13 04:14:22 2026 by rpki-client