$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa File: 2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa (raw, json) Hash identifier: AXVsszkxm5UH5laGJw0Xslt1tA1CvrL5lLl/SMIFV+0= Subject key identifier: A5:15:61:25:AE:2B:10:B6:EF:A9:9E:25:D1:6F:27:F0:BD:F2:EC:B2 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584E86F4F14CCA8A4FFDD34BC780 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 7018 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f1:4c:ca:8a:4f:fd:d3:4b:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=52c8a162-76aa-41b5-bd11-8b1a7212ae37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:2e:31:ca:cd:54:5d:26:de:40:d3:a5:af: 2d:3c:f1:17:e0:88:6b:e6:9f:26:0d:46:e9:b0:d7: 6b:85:16:e3:d8:24:fb:6d:8e:c8:c6:7e:b4:76:7a: 64:f7:4f:55:1d:a9:2b:2e:be:78:de:5c:7f:41:73: 08:c3:66:17:fd:17:ad:00:95:c9:fc:47:03:de:06: b2:0f:e0:d6:0c:7b:4f:e0:5a:c9:37:8d:f4:55:6d: 2d:7e:5d:35:d0:55:70:7e:e1:de:3a:c4:fb:f3:8c: eb:e0:b4:78:ee:63:fd:b0:fa:f4:f6:90:d9:49:c3: 06:67:7f:6c:c1:7d:19:06:7f:35:4b:df:da:e3:e5: d4:a6:f6:d7:10:71:7f:5a:b0:51:f4:f7:85:aa:db: ad:c1:09:0b:8c:e5:00:b4:c5:49:85:ce:1f:a6:37: 95:29:29:9c:a4:15:4a:12:c9:d2:5e:0e:48:ec:13: 0c:5f:47:4e:25:96:50:5c:8c:5e:9e:20:b5:e2:59: 2c:4d:f9:2e:5c:ae:3b:b4:09:e1:20:28:ea:6a:40: 6d:97:9b:1d:c6:66:52:01:66:ee:98:e8:b7:50:3d: e0:94:e7:50:4d:1d:8e:86:25:88:29:d6:d2:0c:42: 11:92:b4:a8:44:11:94:1f:72:a4:3d:b0:85:0b:8d: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:15:61:25:AE:2B:10:B6:EF:A9:9E:25:D1:6F:27:F0:BD:F2:EC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/2d9893cc-ced3-36c4-a0d0-5ffcbd47d695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4a:96:b1:00:ef:45:5b:35:d6:da:c1:c2:1b:42:d5:1c:51: 0e:94:00:fe:14:10:9e:36:28:6c:ca:8e:48:70:92:ba:3f:fb: 34:91:52:52:78:35:78:fb:c2:c4:58:fd:1a:65:89:84:eb:00: f5:31:30:15:ec:ab:a0:26:30:76:c2:bc:06:5c:28:7a:dc:f7: f2:1c:a8:b2:ff:9f:a7:bf:57:3d:71:75:5d:22:cb:5c:40:c4: c2:5f:d8:b8:e4:f4:8e:7f:12:59:08:fb:ef:c5:07:93:d3:db: 22:7e:be:26:d2:c0:c0:e9:06:b9:11:97:ae:49:2a:f1:ee:6d: 78:43:c5:70:ea:77:b9:67:d5:ef:48:7e:e1:61:26:f7:2d:63: b3:22:32:a5:7f:fe:52:db:83:bf:1e:b4:56:3e:e3:ef:f5:ad: 7f:e8:5a:7c:d0:16:30:f6:47:c2:81:25:c1:df:17:be:c8:9a: 28:7e:76:64:4f:4c:c7:db:9e:2a:75:e5:0e:0d:bd:f2:c2:09: 4c:bb:c3:6d:d9:31:2e:7d:0c:0b:59:c7:bb:50:3d:7f:73:c9: 95:aa:fe:d9:8d:4e:ca:94:9a:92:d4:3a:69:66:a1:b0:0f:5f: 60:92:1c:72:85:97:6d:fd:c5:fb:64:22:24:95:d5:d6:0c:d0: fb:f0:04:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9PFMyopP/dNLx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NTJjOGExNjItNzZhYS00MWI1LWJkMTEtOGIxYTcyMTJhZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA4uMcrNVF0m3kDTpa8tPPEX4Ihr5p8mDUbp sNdrhRbj2CT7bY7Ixn60dnpk909VHakrLr543lx/QXMIw2YX/RetAJXJ/EcD3gay D+DWDHtP4FrJN430VW0tfl010FVwfuHeOsT784zr4LR47mP9sPr09pDZScMGZ39s wX0ZBn81S9/a4+XUpvbXEHF/WrBR9PeFqtutwQkLjOUAtMVJhc4fpjeVKSmcpBVK EsnSXg5I7BMMX0dOJZZQXIxeniC14lksTfkuXK47tAnhICjqakBtl5sdxmZSAWbu mOi3UD3glOdQTR2OhiWIKdbSDEIRkrSoRBGUH3KkPbCFC429LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUVYSWuKxC276meJdFvJ/C98uyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvMmQ5ODkzY2MtY2VkMy0z NmM0LWEwZDAtNWZmY2JkNDdkNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpKlrEA70VbNdbawcIbQtUcUQ6UAP4UEJ42KGzKjkhwkro/+zSRUlJ4 NXj7wsRY/RpliYTrAPUxMBXsq6AmMHbCvAZcKHrc9/IcqLL/n6e/Vz1xdV0iy1xA xMJf2Ljk9I5/ElkI++/FB5PT2yJ+vibSwMDpBrkRl65JKvHubXhDxXDqd7ln1e9I fuFhJvctY7MiMqV//lLbg78etFY+4+/1rX/oWnzQFjD2R8KBJcHfF77Imih+dmRP TMfbnip15Q4NvfLCCUy7w23ZMS59DAtZx7tQPX9zyZWq/tmNTsqUmpLUOmlmobAP X2CSHHKFl239xftkIiSV1dYM0PvwBB8= -----END CERTIFICATE-----Generated at Fri Jul 24 08:20:27 2026 by rpki-client