$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa File: 2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa (raw, json) Hash identifier: T68VM51SZCQD4V04DmVaZfEsRR6tQ71TNfsZBkP3b0c= Subject key identifier: B7:8C:44:00:99:B3:FA:14:17:26:66:B5:6C:9A:9D:0E:E6:17:B7:F3 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584FCB612C61DF632F1A865DD858 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa Signing time: Tue 10 Nov 2026 14:00:12 +0000 ROA not before: Tue 10 Nov 2026 14:00:12 +0000 ROA not after: Mon 08 Feb 2027 14:00:12 +0000 asID: 7018 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cb:61:2c:61:df:63:2f:1a:86:5d:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Nov 10 14:00:12 2026 GMT Not After : Feb 8 14:00:12 2027 GMT Subject: CN=46d34079-2e31-47cd-9e7c-844442ca1539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:a2:31:72:40:dc:ba:f3:1e:9d:a1:ca:80: 76:1e:55:52:28:d9:0a:a1:78:4b:b9:65:42:40:47: fc:ae:69:25:30:e2:5e:b1:33:c9:f9:3e:56:eb:36: 7a:3b:5f:d4:96:b8:2a:12:74:e1:0c:ff:ea:a0:ce: 64:e1:d5:e2:09:4f:24:f1:28:50:dc:9f:df:d3:26: 3a:7d:1d:00:e6:9d:c6:71:e1:84:e6:f7:dd:5b:e4: 25:7e:d0:0a:3f:97:ae:a3:a3:70:d8:85:22:45:90: 87:24:f4:3e:07:11:a8:90:e2:40:eb:60:b4:c4:17: 51:64:80:87:48:de:dd:09:69:db:5f:0a:a6:75:d2: 62:6a:1a:e4:f5:50:7d:9e:21:ff:b9:68:27:4d:ca: 36:16:d4:5b:1c:f9:ed:01:0e:bf:4e:15:5e:85:d3: b5:f8:89:24:3a:d5:b0:c5:14:4a:2b:4f:8f:49:5e: 76:1d:17:5b:26:77:83:09:aa:81:9e:49:f6:41:cd: 86:18:39:40:6e:45:d2:6d:fb:08:c7:ba:67:a0:fe: 8e:22:cc:f9:3e:97:4c:5a:53:9c:7d:56:27:06:aa: e1:ad:9c:23:ca:57:10:c8:9b:a0:30:2c:20:0a:e1: 38:61:b1:f0:da:6a:dc:68:c1:1b:17:85:c6:6c:32: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:44:00:99:B3:FA:14:17:26:66:B5:6C:9A:9D:0E:E6:17:B7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:20:4f:87:71:42:80:bb:ec:72:71:01:55:33:b1:2e:49:bf: 3c:23:c5:95:4a:05:53:a8:aa:4a:b2:e2:a4:9e:5f:46:17:27: ae:15:c1:cb:93:79:ec:40:cf:ab:75:0d:7c:c5:09:44:54:f9: 56:d4:22:92:fb:5d:1a:0f:f5:8f:74:70:8f:b8:63:c1:7d:f3: dc:60:65:56:85:0e:ad:ca:69:25:dd:a3:3e:a8:f9:58:89:f4: db:b0:b5:d5:03:bf:c4:e5:34:0c:64:62:1d:e5:72:e4:25:55: 90:a2:09:d4:b3:28:32:22:7a:f4:c3:06:22:12:13:91:7c:4f: 7d:0a:c9:e0:f7:b3:97:40:ce:ae:b6:ad:6e:8c:18:df:77:17: 4b:8f:a7:18:55:80:a1:ee:ab:e2:30:ff:84:f9:ff:93:4f:f0: 3b:6c:5b:a0:3a:f0:2e:6c:c5:76:7c:b7:93:90:c8:ea:49:19: c5:38:9c:01:a9:97:94:ff:56:48:4e:26:84:36:70:af:c9:48: 66:6c:92:3f:3b:a5:b6:07:c9:57:e0:25:b5:68:1e:28:04:03: 0b:b4:75:4d:d5:16:fd:a2:59:5a:e8:9f:42:9f:81:a8:cd:2f: d1:fa:f4:8c:cf:59:ae:81:29:c2:e4:5d:ee:3d:b0:a4:2a:8d: 78:f5:7b:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/LYSxh32MvGoZd2FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MTExMDE0MDAxMloXDTI3MDIwODE0MDAxMlowLzEtMCsGA1UEAxMk NDZkMzQwNzktMmUzMS00N2NkLTllN2MtODQ0NDQyY2ExNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfaiMXJA3LrzHp2hyoB2HlVSKNkKoXhLuWVC QEf8rmklMOJesTPJ+T5W6zZ6O1/UlrgqEnThDP/qoM5k4dXiCU8k8ShQ3J/f0yY6 fR0A5p3GceGE5vfdW+QlftAKP5euo6Nw2IUiRZCHJPQ+BxGokOJA62C0xBdRZICH SN7dCWnbXwqmddJiahrk9VB9niH/uWgnTco2FtRbHPntAQ6/ThVehdO1+IkkOtWw xRRKK0+PSV52HRdbJneDCaqBnkn2Qc2GGDlAbkXSbfsIx7pnoP6OIsz5PpdMWlOc fVYnBqrhrZwjylcQyJugMCwgCuE4YbHw2mrcaMEbF4XGbDKxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeMRACZs/oUFyZmtWyanQ7mF7fzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvMmQ5ODkzY2MtY2VkMy0z NmM0LWEwZDAtNWZmY2JkNDdkNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8gT4dxQoC77HJxAVUzsS5JvzwjxZVKBVOoqkqy4qSeX0YXJ64VwcuT eexAz6t1DXzFCURU+VbUIpL7XRoP9Y90cI+4Y8F989xgZVaFDq3KaSXdoz6o+ViJ 9NuwtdUDv8TlNAxkYh3lcuQlVZCiCdSzKDIievTDBiISE5F8T30KyeD3s5dAzq62 rW6MGN93F0uPpxhVgKHuq+Iw/4T5/5NP8DtsW6A68C5sxXZ8t5OQyOpJGcU4nAGp l5T/VkhOJoQ2cK/JSGZskj87pbYHyVfgJbVoHigEAwu0dU3VFv2iWVron0KfgajN L9H69IzPWa6BKcLkXe49sKQqjXj1e+I= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:08 2026 by rpki-client