$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: ZxTIlGls9BzMI4M+QpgtPOJdbbGJ4DoP0lWr6SjwxQs= Subject key identifier: 54:2E:24:6C:98:25:2C:DD:90:BC:5E:B1:4B:81:11:2B:5E:27:90:F5 Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584DB4A588A0452C255FA575FC50 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:88:a0:45:2c:25:5f:a5:75:fc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=423b31d6-f7dd-4a88-bfe3-8729e129e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:b2:df:1f:d7:a6:f4:99:fc:7c:92:2f:ff: 57:03:37:00:5d:84:d0:02:f2:ba:c8:85:b2:76:96: a0:2e:75:36:41:6d:c1:55:11:e0:9f:36:cd:09:d9: 5d:34:a9:a5:e3:c3:54:5b:fb:f3:47:81:4c:af:23: da:35:51:23:09:3a:27:e5:26:87:4a:68:a9:14:b3: e9:90:91:7a:40:e9:2e:d7:75:4b:2a:59:68:04:5a: 25:cf:a2:b3:79:e9:fc:fa:60:02:9f:38:56:0c:b9: e2:c5:5a:67:c9:41:93:44:04:30:b6:98:b4:29:17: 7b:55:a2:88:2a:49:58:40:52:a1:76:e4:c8:aa:ef: 6e:85:8c:d1:53:6d:fc:72:29:f0:eb:3d:29:9a:2d: d8:45:50:90:18:c5:d4:6d:88:8e:47:2d:1e:b6:9e: 77:f2:bf:d5:42:96:86:d8:67:43:fc:e7:39:dc:4e: 58:76:0f:04:70:3b:f0:a6:30:94:c4:88:01:bb:80: 6e:5b:78:e9:7f:23:1f:d9:84:d0:de:ee:2c:db:59: 57:3e:d4:0e:43:7d:a3:e8:04:38:57:61:7d:05:17: 11:70:40:73:b3:00:e3:40:2e:65:2e:96:00:8e:3c: 13:99:58:c0:89:01:08:29:42:8b:f8:e0:8f:91:6b: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2E:24:6C:98:25:2C:DD:90:BC:5E:B1:4B:81:11:2B:5E:27:90:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cb:84:0c:16:76:68:40:09:a7:09:8d:01:c2:86:ae:df:9c: fc:8f:10:49:a6:14:f2:db:f2:9c:91:57:ac:43:73:62:87:0c: e7:9a:f6:95:d2:b8:f5:85:2a:49:79:45:a2:5c:02:5f:69:f2: a8:85:22:eb:e5:98:78:83:be:bd:7b:f7:d3:05:85:8f:e2:7b: cb:5b:4e:3f:54:88:a5:f2:87:17:9c:a2:4b:a5:09:b1:ea:0a: d8:be:7b:0b:7b:74:4e:8d:83:20:7a:22:c8:89:49:78:62:d8: 60:87:76:57:cb:b1:5a:21:f8:8a:7f:82:63:d5:28:93:df:f2: 28:7e:2c:ad:ff:25:9d:ac:9e:eb:4d:b4:e0:c6:d2:52:20:9d: c9:cc:24:75:6e:96:c4:6d:31:4f:97:65:30:6f:d3:7a:12:a1: 06:9a:5b:63:2f:0d:9b:07:17:c5:83:04:7f:e7:46:6b:59:d4: 13:25:c7:27:d7:62:84:a6:af:34:09:64:52:71:aa:6e:c8:c2: 23:18:c3:df:36:5b:b8:70:72:da:7a:d6:7f:72:3c:e2:d9:96: ed:2a:31:a6:e2:99:f1:51:00:dc:99:a5:a7:5a:34:80:e7:32: fb:4f:0e:82:64:d0:10:69:85:98:6c:fd:bb:86:cc:d6:d5:c4: 94:57:fe:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYigRSwlX6V1/FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NDIzYjMxZDYtZjdkZC00YTg4LWJmZTMtODcyOWUxMjllNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulSy3x/XpvSZ/HySL/9XAzcAXYTQAvK6yIWy dpagLnU2QW3BVRHgnzbNCdldNKml48NUW/vzR4FMryPaNVEjCTon5SaHSmipFLPp kJF6QOku13VLKlloBFolz6Kzeen8+mACnzhWDLnixVpnyUGTRAQwtpi0KRd7VaKI KklYQFKhduTIqu9uhYzRU238cinw6z0pmi3YRVCQGMXUbYiORy0etp538r/VQpaG 2GdD/Oc53E5Ydg8EcDvwpjCUxIgBu4BuW3jpfyMf2YTQ3u4s21lXPtQOQ32j6AQ4 V2F9BRcRcEBzswDjQC5lLpYAjjwTmVjAiQEIKUKL+OCPkWvZHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQuJGyYJSzdkLxesUuBESteJ5D1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3LhAwWdmhACacJjQHChq7fnPyPEEmmFPLb8pyRV6xDc2KHDOea9pXS uPWFKkl5RaJcAl9p8qiFIuvlmHiDvr1799MFhY/ie8tbTj9UiKXyhxecokulCbHq Cti+ewt7dE6NgyB6IsiJSXhi2GCHdlfLsVoh+Ip/gmPVKJPf8ih+LK3/JZ2snutN tODG0lIgncnMJHVulsRtMU+XZTBv03oSoQaaW2MvDZsHF8WDBH/nRmtZ1BMlxyfX YoSmrzQJZFJxqm7IwiMYw982W7hwctp61n9yPOLZlu0qMabimfFRANyZpadaNIDn MvtPDoJk0BBphZhs/buGzNbVxJRX/uk= -----END CERTIFICATE-----Generated at Wed May 13 09:30:43 2026 by rpki-client