$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa File: 93579c5a-1fbb-393d-942f-b4c14c01265d.roa (raw, json) Hash identifier: KnWqKCDe2wk94srBpTheQB2IwE7N2MjAcS2yU7UBwNw= Subject key identifier: 7D:EA:A0:3D:E7:55:57:51:EF:4A:48:E3:6F:B5:D6:99:94:B7:2E:3B Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2A74E1D5F5FDCC9D012A3A80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16433 IP address blocks: 72.22.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e1:d5:f5:fd:cc:9d:01:2a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=db6c139a-80c9-4d25-b75d-d84e754a4a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:25:30:df:95:9f:6f:1e:90:83:8e:a4:e8: e1:ba:e7:f0:7b:6d:84:e9:24:74:4c:cd:c8:9d:6e: da:5f:2a:0b:c3:96:cc:48:37:78:e4:03:3b:f1:fb: 31:e2:98:3a:19:0a:50:d0:66:0b:14:23:1b:16:b2: 5f:87:47:09:6d:a5:cb:be:49:d8:c3:9e:a2:a2:1d: 5e:8a:6f:12:8b:09:3a:bb:bc:8f:bc:bf:77:b9:2d: 39:2e:ff:d4:32:2a:04:51:f8:56:db:01:2d:98:f1: c3:18:5d:37:40:73:71:e9:27:1d:c8:d1:3b:fe:f5: d0:92:25:bf:89:f0:f0:d6:86:2a:5d:76:bc:06:bf: d4:3f:b9:d4:c5:a2:74:bc:8b:42:f5:80:9d:d1:0b: d7:27:3d:81:39:ab:79:55:b2:95:0c:65:59:57:f2: 20:d7:cd:90:fa:8e:cc:0a:ed:16:81:bb:b3:5c:fd: 6a:84:8a:94:aa:65:65:70:6a:cd:96:d3:40:81:33: 90:dc:b8:29:96:b4:3a:33:cc:89:14:ed:b0:b0:ce: 86:d0:a9:81:91:aa:77:10:c8:81:6e:54:eb:7b:07: 26:f9:18:f3:4b:f2:6d:c0:92:69:1d:61:8b:eb:ca: 0f:7a:5f:a5:3c:85:38:8b:76:fb:98:e2:d9:35:88: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:A0:3D:E7:55:57:51:EF:4A:48:E3:6F:B5:D6:99:94:B7:2E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/93579c5a-1fbb-393d-942f-b4c14c01265d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 72.22.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2c:1a:c5:ca:30:15:d3:72:3b:91:89:f5:1c:3f:9a:aa:42: c9:64:0d:b1:08:14:3e:f7:73:0c:5a:0e:ff:db:0f:2a:bc:cf: 94:95:95:c6:ce:8d:a0:8b:49:ba:88:ec:0f:89:b4:6f:a8:d5: 1a:8c:7d:3a:43:56:50:79:4a:b8:5f:b2:e6:5d:a9:c9:cf:ec: 82:23:3c:8e:72:87:2c:ba:bf:67:ef:55:9f:89:64:7f:8d:55: e8:58:12:df:89:54:6e:7e:e9:8b:b6:2a:9f:ba:88:1e:30:69: d8:fa:7b:0d:a8:2e:9c:c4:0c:2d:0c:95:11:44:40:62:3a:5d: 18:3c:9f:07:c6:d6:d7:44:d6:56:e0:f8:ae:6b:d6:c0:d3:06: c4:f8:2d:18:5b:c1:da:60:19:46:ae:7a:cb:61:d7:8d:a6:82: f3:0d:6d:b6:b8:c5:98:f8:12:2f:fc:4b:3e:cf:05:48:58:04: a2:e4:fe:38:58:96:87:bc:92:8e:53:4d:43:38:92:21:ed:5c: 28:3e:f4:33:7a:ae:0f:33:30:2b:1c:b7:20:5f:1f:28:30:ca: bb:a0:c8:16:ff:d8:30:c6:47:47:bb:ef:94:ab:1e:4f:20:ca: ff:49:9c:8e:60:b6:ed:44:fd:86:5c:35:c3:35:11:ca:d7:0c: 9f:10:42:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOHV9f3MnQEqOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZGI2YzEzOWEtODBjOS00ZDI1LWI3NWQtZDg0ZTc1NGE0YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh8lMN+Vn28ekIOOpOjhuufwe22E6SR0TM3I nW7aXyoLw5bMSDd45AM78fsx4pg6GQpQ0GYLFCMbFrJfh0cJbaXLvknYw56ioh1e im8Siwk6u7yPvL93uS05Lv/UMioEUfhW2wEtmPHDGF03QHNx6ScdyNE7/vXQkiW/ ifDw1oYqXXa8Br/UP7nUxaJ0vItC9YCd0QvXJz2BOat5VbKVDGVZV/Ig182Q+o7M Cu0WgbuzXP1qhIqUqmVlcGrNltNAgTOQ3LgplrQ6M8yJFO2wsM6G0KmBkap3EMiB blTrewcm+RjzS/JtwJJpHWGL68oPel+lPIU4i3b7mOLZNYg47wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3qoD3nVVdR70pI42+11pmUty47MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvOTM1NzljNWEtMWZiYi0z OTNkLTk0MmYtYjRjMTRjMDEyNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHksGsXKMBXTcjuRifUcP5qqQslkDbEIFD73cwxaDv/bDyq8z5SVlcbO jaCLSbqI7A+JtG+o1RqMfTpDVlB5SrhfsuZdqcnP7IIjPI5yhyy6v2fvVZ+JZH+N VehYEt+JVG5+6Yu2Kp+6iB4wadj6ew2oLpzEDC0MlRFEQGI6XRg8nwfG1tdE1lbg +K5r1sDTBsT4LRhbwdpgGUauesth142mgvMNbba4xZj4Ei/8Sz7PBUhYBKLk/jhY loe8ko5TTUM4kiHtXCg+9DN6rg8zMCsctyBfHygwyrugyBb/2DDGR0e775SrHk8g yv9JnI5gtu1E/YZcNcM1EcrXDJ8QQhs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:57 2026 by rpki-client