$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa File: aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa (raw, json) Hash identifier: Vp4OcoIV7+fHAk5vcK8k3V5ksAPnB9oPXnkRMWK28sE= Subject key identifier: 67:87:08:AF:0A:CA:84:00:DF:00:63:E2:96:CE:E1:51:CF:72:45:BA Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584D9A201031DC63BA11D2ABBAE0 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 14618 IP address blocks: 72.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:10:31:dc:63:ba:11:d2:ab:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=cbbe2c6d-311e-464d-aa4b-54e10118003f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:02:5f:b7:27:00:08:d1:70:c6:21:80:45: 73:48:22:c5:0b:9d:73:39:ba:a7:ea:c6:e1:6f:79: 25:97:61:b7:f1:31:3a:d5:d6:3d:da:14:e8:f5:9c: 36:1f:6e:d0:f1:93:a3:f1:a3:a9:63:0e:bc:af:1e: ec:bf:2d:be:fc:de:42:03:06:ef:8b:c2:2e:1e:44: 7d:c7:a6:32:8e:a4:23:08:b5:6a:0d:97:d4:d0:af: f8:61:9a:4d:f4:2c:3f:e7:ca:77:1a:33:6e:77:ee: d3:5f:e4:e9:cd:a1:5f:22:44:1e:67:84:dd:d8:90: 5a:30:6e:7c:24:82:cf:3b:63:6c:3a:2b:8f:3b:cf: d1:d6:cc:62:58:60:c9:98:13:c6:b7:7a:8c:bb:be: c7:ee:6c:34:bf:08:37:84:8a:43:20:86:b4:8a:f6: 5c:c3:e8:cc:f4:91:79:d1:0b:9f:01:bf:67:b0:bd: 5d:3e:ee:c4:6b:72:3b:9c:d4:76:79:ec:e6:61:86: 10:33:93:76:9d:4f:84:56:ea:a0:70:f0:4d:20:38: b8:5c:09:b5:e6:23:83:7a:22:89:17:3f:fa:7b:35: 02:b3:ac:61:f3:2a:1f:cf:1f:ad:89:e7:cd:c2:7f: 2b:64:bf:c7:c4:91:5e:58:50:e8:68:92:50:8a:20: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:08:AF:0A:CA:84:00:DF:00:63:E2:96:CE:E1:51:CF:72:45:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/aa6e3fbd-5d57-3052-aa78-d08a722b781c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 72.18.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ed:19:d5:e4:45:8a:66:18:8f:67:5b:e9:44:6d:a1:d6:b7: e6:50:fc:da:fe:32:9c:21:e5:eb:e8:1a:65:15:71:9a:65:1d: d6:b7:5e:03:12:ee:91:67:4f:a7:cd:7e:29:8d:08:55:90:75: 2d:2a:f5:a9:6a:a3:a2:72:20:e4:92:8c:57:72:51:ba:56:3e: 07:60:55:f2:10:bb:2e:39:6a:2a:82:85:e3:2d:a2:51:75:f3: 07:9d:25:19:5c:f4:9a:f5:85:03:19:86:52:fa:79:9a:94:cb: f3:5f:cd:cb:90:d8:37:1a:0e:e1:71:a5:65:31:54:49:00:3d: ed:e6:22:e3:4d:be:d6:7d:c3:90:f9:65:51:b1:f5:d6:e0:c3: 51:44:e3:c5:27:39:c7:fe:2d:f6:2d:72:89:4a:67:c2:a9:97: e1:ab:96:fd:a8:dc:00:f9:ec:83:dd:c2:00:14:93:3f:18:92: 56:5f:e9:33:0e:4d:14:18:59:91:6d:46:a1:0f:eb:4f:39:fa: dc:10:37:9f:24:b7:bc:64:5a:74:03:13:3c:dc:48:6f:04:8d: d1:bf:41:72:54:6c:8d:30:0c:de:26:70:ce:ee:ab:70:5f:99: bf:f7:cd:89:38:fc:5e:c2:34:ee:46:3f:63:59:43:08:ad:f3: 17:4e:24:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBAx3GO6EdKruuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Y2JiZTJjNmQtMzExZS00NjRkLWFhNGItNTRlMTAxMTgwMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+0CX7cnAAjRcMYhgEVzSCLFC51zObqn6sbh b3kll2G38TE61dY92hTo9Zw2H27Q8ZOj8aOpYw68rx7svy2+/N5CAwbvi8IuHkR9 x6YyjqQjCLVqDZfU0K/4YZpN9Cw/58p3GjNud+7TX+TpzaFfIkQeZ4Td2JBaMG58 JILPO2NsOiuPO8/R1sxiWGDJmBPGt3qMu77H7mw0vwg3hIpDIIa0ivZcw+jM9JF5 0QufAb9nsL1dPu7Ea3I7nNR2eezmYYYQM5N2nU+EVuqgcPBNIDi4XAm15iODeiKJ Fz/6ezUCs6xh8yofzx+tiefNwn8rZL/HxJFeWFDoaJJQiiCN/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeHCK8KyoQA3wBj4pbO4VHPckW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvYWE2ZTNmYmQtNWQ1Ny0z MDUyLWFhNzgtZDA4YTcyMmI3ODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/tGdXkRYpmGI9nW+lEbaHWt+ZQ/Nr+Mpwh5evoGmUVcZplHda3XgMS 7pFnT6fNfimNCFWQdS0q9alqo6JyIOSSjFdyUbpWPgdgVfIQuy45aiqCheMtolF1 8wedJRlc9Jr1hQMZhlL6eZqUy/NfzcuQ2DcaDuFxpWUxVEkAPe3mIuNNvtZ9w5D5 ZVGx9dbgw1FE48UnOcf+LfYtcolKZ8Kpl+Grlv2o3AD57IPdwgAUkz8YklZf6TMO TRQYWZFtRqEP6085+twQN58kt7xkWnQDEzzcSG8EjdG/QXJUbI0wDN4mcM7uq3Bf mb/3zYk4/F7CNO5GP2NZQwit8xdOJAs= -----END CERTIFICATE-----Generated at Wed May 13 12:35:10 2026 by rpki-client