$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa File: 1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa (raw, json) Hash identifier: hY+BdxNAN+BoYgthsWYqAj/2Xzmwiq4CMZ80Rzu+N8E= Subject key identifier: CD:13:DE:DC:6E:D7:50:3D:8E:F8:7E:AF:98:77:09:10:AA:FE:03:B4 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584D9A2010233C38D50F574BA900 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16509 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:10:23:3c:38:d5:0f:57:4b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=5f2eb411-68a5-49eb-8c62-739f133f1856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:73:73:40:13:4a:92:bd:08:e4:22:d4:ca:e4: 67:5c:43:36:59:ac:10:a7:7d:ce:6a:33:3a:ca:9c: a0:71:b3:e5:0d:ab:d0:fa:3d:fd:8a:d6:70:e1:e0: 59:8c:5c:92:65:05:28:16:ae:bf:e0:8c:72:ae:3c: 1e:34:6b:6f:cd:7c:e0:5a:c3:54:41:24:9a:78:85: 70:5d:d3:3e:ff:bd:5e:0a:fb:13:33:1a:59:13:1a: e7:60:04:f2:64:dc:2a:ab:96:8e:81:e1:0b:25:44: 5f:87:3d:df:20:3b:ec:78:da:5c:3c:bd:41:19:aa: 8c:e8:b3:d0:71:52:d1:aa:0f:53:ce:d2:c4:6b:6e: 88:ac:02:79:d7:ca:be:3b:b6:8d:88:62:90:db:4f: 2d:0d:a3:a6:90:16:af:a2:9d:f4:ad:2f:6a:52:80: 45:d5:71:bb:a2:28:d5:87:89:c1:1b:f6:5e:b6:03: 9c:93:4f:68:d7:11:71:c8:2b:21:40:a0:4e:38:ad: c8:0b:28:a1:96:31:a0:b5:05:bc:ee:cb:72:29:04: 3f:17:15:d3:89:4a:c6:a9:dc:39:99:6a:03:fc:d1: 28:5d:49:65:5d:09:23:e1:e8:4f:f3:f3:eb:fd:41: 86:80:eb:4b:b1:3b:f3:c1:fb:a6:ca:05:00:68:c0: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:13:DE:DC:6E:D7:50:3D:8E:F8:7E:AF:98:77:09:10:AA:FE:03:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1b1ce9b1-a0fc-3aa7-aa77-7498674524f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:2d:6f:b6:2b:dc:9a:24:df:cb:cb:0a:3d:7c:92:2a:d7:0e: 98:13:fe:c4:92:d2:58:1f:5a:c4:21:d5:e8:aa:d7:92:dc:13: f7:61:28:bd:a3:0e:12:a8:23:10:7c:d6:19:5b:67:a2:ed:11: 89:97:10:67:c8:5c:2d:7a:a8:f2:c0:78:69:63:77:2a:a9:02: 45:ce:d3:60:f4:82:ac:2e:42:4b:cd:e0:fa:26:e0:f2:01:a6: 6c:f3:46:7c:89:d0:bf:3c:8e:35:25:4f:7a:5c:5a:ea:35:3e: c7:a2:cc:f1:85:38:91:28:1b:17:b6:07:75:82:13:fe:53:b1: 67:10:bf:0a:9a:1e:17:b7:5d:af:ec:fb:7f:63:47:db:3a:f1: 34:f4:61:1c:d8:80:9d:c3:d1:58:88:78:bd:88:08:36:f3:89: e6:68:5f:f7:47:6e:36:b1:aa:8f:63:cb:2a:4b:81:39:ff:49: f4:e8:55:b7:0e:83:9a:a2:c2:12:4a:3c:80:c6:e2:1b:85:2f: 81:aa:74:35:a4:88:ea:8a:78:d8:f7:ba:a8:0e:1f:74:a2:a1: 11:58:a9:9c:72:95:98:4a:f1:fc:eb:fb:85:de:1f:30:cc:bf: 44:04:3e:fb:63:fc:a5:9f:91:98:f3:64:25:57:b0:3f:b1:fa: 5b:08:32:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBAjPDjVD1dLqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NWYyZWI0MTEtNjhhNS00OWViLThjNjItNzM5ZjEzM2YxODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXNzQBNKkr0I5CLUyuRnXEM2WawQp33OajM6 ypygcbPlDavQ+j39itZw4eBZjFySZQUoFq6/4IxyrjweNGtvzXzgWsNUQSSaeIVw XdM+/71eCvsTMxpZExrnYATyZNwqq5aOgeELJURfhz3fIDvseNpcPL1BGaqM6LPQ cVLRqg9TztLEa26IrAJ518q+O7aNiGKQ208tDaOmkBavop30rS9qUoBF1XG7oijV h4nBG/ZetgOck09o1xFxyCshQKBOOK3ICyihljGgtQW87styKQQ/FxXTiUrGqdw5 mWoD/NEoXUllXQkj4ehP8/Pr/UGGgOtLsTvzwfumygUAaMDMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0T3txu11A9jvh+r5h3CRCq/gO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMWIxY2U5YjEtYTBmYy0z YWE3LWFhNzctNzQ5ODY3NDUyNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUtb7Yr3Jok38vLCj18kirXDpgT/sSS0lgfWsQh1eiq15LcE/dhKL2j DhKoIxB81hlbZ6LtEYmXEGfIXC16qPLAeGljdyqpAkXO02D0gqwuQkvN4Pom4PIB pmzzRnyJ0L88jjUlT3pcWuo1PseizPGFOJEoGxe2B3WCE/5TsWcQvwqaHhe3Xa/s +39jR9s68TT0YRzYgJ3D0ViIeL2ICDbzieZoX/dHbjaxqo9jyypLgTn/SfToVbcO g5qiwhJKPIDG4huFL4GqdDWkiOqKeNj3uqgOH3SioRFYqZxylZhK8fzr+4XeHzDM v0QEPvtj/KWfkZjzZCVXsD+x+lsIMso= -----END CERTIFICATE-----Generated at Wed May 13 15:38:39 2026 by rpki-client