$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json) Hash identifier: iB1Ff0iRawh1VZALWfs5pU3ptCa255JZIo9PEblcfeg= Subject key identifier: B0:C8:B9:FB:FA:25:D8:C2:2D:A4:78:4B:A2:25:C5:C7:60:79:F8:E9 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584D492A5E36E442D5B75A352560 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14717 IP address blocks: 72.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5e:36:e4:42:d5:b7:5a:35:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=b53771e9-61e6-4e10-a335-e94003e88d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:46:05:c8:48:db:93:03:8f:74:65:fc:b0: b5:96:9f:a4:9f:71:bc:43:a4:a9:d9:8d:f0:ee:b4: 39:0e:38:51:e7:9c:73:d4:6a:9d:b9:21:9a:44:4b: 51:65:79:85:99:ae:e4:be:9a:51:d9:db:cb:3a:7d: ef:aa:eb:e8:66:37:1b:5b:cd:30:63:95:a0:a2:ac: f6:37:ef:ce:24:a8:3b:dd:d6:9c:2a:d3:de:67:a3: a7:01:f0:ac:69:7f:a8:81:3f:30:f0:f3:76:63:c1: 0d:18:b0:0b:cb:5e:56:11:87:94:07:b4:3a:f0:04: 32:74:6f:0a:dd:e9:2a:1a:0e:22:d2:e0:09:63:7d: 2c:28:a7:60:ef:e3:79:d3:c5:44:9d:98:07:48:ef: 3c:f7:ee:6e:25:89:19:52:26:2e:ca:27:57:c7:15: fe:a4:e7:c7:2a:c2:72:4c:a6:dc:9f:87:3f:3b:cc: f2:f6:a0:30:aa:7e:5b:1a:cf:09:89:41:64:97:f0: 43:1f:9e:01:cc:a8:d4:f4:8d:03:49:5a:27:1e:1b: c5:e0:33:6f:22:b9:e6:3e:b9:9d:33:6d:ac:24:f9: 1f:ca:b3:07:03:9a:51:23:d6:f2:79:71:a0:8b:fd: 91:d2:05:65:4d:59:d7:e9:b3:af:1f:c7:d5:b2:db: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:B9:FB:FA:25:D8:C2:2D:A4:78:4B:A2:25:C5:C7:60:79:F8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:36:71:b1:9b:d1:cc:75:25:96:97:d3:ef:97:6f:b7:76:b3: 69:89:5d:9d:10:fd:67:dc:7e:b3:59:d6:66:26:f1:ee:0b:6d: 27:44:87:85:1f:52:34:42:bc:8b:07:ac:38:34:fa:07:ac:db: 2b:ef:0f:3e:14:fa:03:f1:37:7b:ae:bd:22:e6:10:b3:43:4a: 52:65:28:da:e0:3d:19:c5:c8:44:30:59:51:ce:6f:ec:46:ca: 76:62:b9:15:47:01:07:d9:54:6a:75:60:7e:0a:32:aa:a8:59: 31:55:b0:ab:b8:57:27:ed:65:90:82:5a:9f:26:1c:e6:8f:9a: 25:7b:9c:22:e8:a0:fa:d3:e3:67:c2:a3:41:26:22:ae:5f:3d: d3:93:43:bf:e5:33:07:ac:72:8b:16:83:45:31:f8:74:5d:85: 2a:14:1c:9a:ad:43:1e:27:36:f1:47:bf:bf:f7:11:88:15:69: 56:e9:e7:0a:8f:99:f1:0b:c3:3f:04:be:40:d1:38:57:67:84: a7:4b:40:68:a0:57:f7:ab:5f:92:f1:56:f5:db:f5:12:97:38: 6a:d1:e2:38:22:db:5f:1f:70:b3:4e:8c:c5:a2:24:6a:a7:0d: 4e:01:96:52:57:c8:31:e2:97:b0:73:20:c5:a1:24:08:a8:08: 9b:f5:76:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl425ELVt1o1JWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjUzNzcxZTktNjFlNi00ZTEwLWEzMzUtZTk0MDAzZTg4ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+dGBchI25MDj3Rl/LC1lp+kn3G8Q6Sp2Y3w 7rQ5DjhR55xz1GqduSGaREtRZXmFma7kvppR2dvLOn3vquvoZjcbW80wY5Wgoqz2 N+/OJKg73dacKtPeZ6OnAfCsaX+ogT8w8PN2Y8ENGLALy15WEYeUB7Q68AQydG8K 3ekqGg4i0uAJY30sKKdg7+N508VEnZgHSO889+5uJYkZUiYuyidXxxX+pOfHKsJy TKbcn4c/O8zy9qAwqn5bGs8JiUFkl/BDH54BzKjU9I0DSVonHhvF4DNvIrnmPrmd M22sJPkfyrMHA5pRI9byeXGgi/2R0gVlTVnX6bOvH8fVstuHAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDIufv6JdjCLaR4S6IlxcdgefjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY2cbGb0cx1JZaX0++Xb7d2s2mJXZ0Q/WfcfrNZ1mYm8e4LbSdEh4Uf UjRCvIsHrDg0+ges2yvvDz4U+gPxN3uuvSLmELNDSlJlKNrgPRnFyEQwWVHOb+xG ynZiuRVHAQfZVGp1YH4KMqqoWTFVsKu4VyftZZCCWp8mHOaPmiV7nCLooPrT42fC o0EmIq5fPdOTQ7/lMwescosWg0Ux+HRdhSoUHJqtQx4nNvFHv7/3EYgVaVbp5wqP mfELwz8EvkDROFdnhKdLQGigV/erX5LxVvXb9RKXOGrR4jgi218fcLNOjMWiJGqn DU4BllJXyDHil7BzIMWhJAioCJv1dn4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:43 2026 by rpki-client