$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa File: cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json) Hash identifier: jbpzNPdmMyqmfH8AsN9ZtJcN96/pKIotK1kd0pfbCw0= Subject key identifier: 47:83:6D:12:D7:B5:A8:04:63:7A:2A:F1:5D:5B:A5:58:80:2E:64:03 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584DA6B01551FCB23848FA8EC500 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 7922 IP address blocks: 72.22.32.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:15:51:fc:b2:38:48:fa:8e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=507fdab5-a6dd-4d78-85da-167de134f7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:5d:e7:49:e3:ac:ca:87:e8:e9:07:6b:d9: 1f:63:69:7c:bd:54:a7:3e:68:6d:38:d3:71:62:18: a4:3c:4c:3b:55:50:60:e1:fe:c0:45:d0:26:65:51: 53:1d:8d:5a:c9:ce:12:51:1b:29:e1:43:36:a9:28: ca:a1:fa:4d:49:a4:65:58:f0:8d:30:ec:b5:1c:cc: 21:a4:5d:a4:5b:07:c0:1c:fc:dc:a0:3f:51:68:73: 74:8d:28:1f:aa:dd:2c:fc:b3:29:bc:d9:ac:9c:9a: 4e:8c:c9:61:a0:77:03:03:b6:9f:bb:4b:0d:58:90: c8:77:76:b7:b2:8a:23:94:2f:6e:d3:ce:4f:fd:dc: c9:36:43:39:06:53:1f:8b:af:da:d8:31:d9:aa:47: ca:c8:81:5f:ba:f8:8f:8d:f7:48:1f:62:8a:92:8c: e4:79:54:62:e0:fe:74:dc:36:20:ae:f3:d9:d5:1a: fa:79:56:25:b5:07:5d:c5:ab:53:c6:f5:a4:e3:25: 9c:61:f6:d2:83:6f:f8:0b:27:0b:93:4c:b5:4d:b2: ca:ab:fb:0f:e0:29:8f:fa:af:f8:3b:8e:42:fc:90: 80:e2:25:e3:41:b3:fd:48:ff:50:d9:2e:83:a8:9e: b8:98:90:f9:00:d8:25:96:05:22:97:1b:b0:79:e3: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:83:6D:12:D7:B5:A8:04:63:7A:2A:F1:5D:5B:A5:58:80:2E:64:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5b:5d:9e:79:f6:e5:1c:16:2b:cd:a7:3a:55:c3:a6:0d:87: e7:67:fb:9c:79:48:5d:96:b8:74:cc:49:06:2e:d7:b0:7d:7d: 10:25:d2:9d:1c:c5:88:c8:71:e0:f5:cb:12:37:12:09:dc:f0: 10:86:aa:1b:d6:0c:0a:c6:ac:ca:e0:f9:c3:0e:e5:1e:58:95: b5:69:57:21:b2:e0:8d:16:54:82:da:98:b5:29:b8:0b:a0:64: 9d:76:c9:0a:17:56:b7:ef:e3:b2:42:a1:41:ec:28:cb:03:5c: 9f:8b:9c:bf:f0:54:fd:3e:b7:d0:0c:33:e9:b8:90:2d:8e:2e: 59:48:9e:bd:d1:35:a4:14:68:7b:55:2d:43:1e:49:a7:ba:83: 97:e0:d6:97:b8:84:4b:7a:99:51:b9:9b:31:29:3e:31:06:9b: e6:b2:1c:52:6e:82:4e:7a:20:36:b9:ce:5b:9f:dd:f3:52:47: c7:b8:9f:b5:69:b4:57:0a:51:16:29:3b:c3:9e:8a:9f:9c:35: 04:b5:25:ed:84:b5:1a:d0:ca:7a:8e:f7:25:dc:9a:e1:08:a3: 14:b1:31:75:3f:f4:f2:8e:22:e8:69:53:21:19:54:3b:33:7e: 15:e4:6d:91:b5:3c:d1:d6:c9:c4:42:69:4f:54:ea:01:a3:ca: 7c:f6:cd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBVR/LI4SPqOxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTA3ZmRhYjUtYTZkZC00ZDc4LTg1ZGEtMTY3ZGUxMzRmN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxFd50njrMqH6OkHa9kfY2l8vVSnPmhtONNx YhikPEw7VVBg4f7ARdAmZVFTHY1ayc4SURsp4UM2qSjKofpNSaRlWPCNMOy1HMwh pF2kWwfAHPzcoD9RaHN0jSgfqt0s/LMpvNmsnJpOjMlhoHcDA7afu0sNWJDId3a3 soojlC9u085P/dzJNkM5BlMfi6/a2DHZqkfKyIFfuviPjfdIH2KKkozkeVRi4P50 3DYgrvPZ1Rr6eVYltQddxatTxvWk4yWcYfbSg2/4CycLk0y1TbLKq/sP4CmP+q/4 O45C/JCA4iXjQbP9SP9Q2S6DqJ64mJD5ANgllgUilxuweeOcTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeDbRLXtagEY3oq8V1bpViALmQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvY2ZiZDE5ODQtYjM0Zi0z MzI4LTgwNzItODVlMmUxZWNmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1bXZ559uUcFivNpzpVw6YNh+dn+5x5SF2WuHTMSQYu17B9fRAl0p0c xYjIceD1yxI3Egnc8BCGqhvWDArGrMrg+cMO5R5YlbVpVyGy4I0WVILamLUpuAug ZJ12yQoXVrfv47JCoUHsKMsDXJ+LnL/wVP0+t9AMM+m4kC2OLllInr3RNaQUaHtV LUMeSae6g5fg1pe4hEt6mVG5mzEpPjEGm+ayHFJugk56IDa5zluf3fNSR8e4n7Vp tFcKURYpO8Oeip+cNQS1Je2EtRrQynqO9yXcmuEIoxSxMXU/9PKOIuhpUyEZVDsz fhXkbZG1PNHWycRCaU9U6gGjynz2zZQ= -----END CERTIFICATE-----Generated at Wed May 13 04:01:15 2026 by rpki-client