$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa File: d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json) Hash identifier: n9U4gOlUvBFTu642x7NrwFZPWu8oe1s7G93LxY8GkQo= Subject key identifier: 20:D3:E7:B0:B5:70:30:6F:3A:14:B2:AD:D6:E7:85:2F:B0:06:65:31 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584E296F09F38B9FBBFC67920880 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 29746 IP address blocks: 72.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:09:f3:8b:9f:bb:fc:67:92:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=43cf86f7-cb77-4b80-9eb1-0f8f3b78be6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:c9:e5:13:3f:0a:f8:d3:90:4a:91:02:a4: 63:cd:5e:62:d8:a6:16:0e:99:d1:b9:ca:42:4e:d7: 8f:f1:5b:27:3e:79:7e:9e:71:fd:67:a9:81:22:3d: ff:ca:45:1c:f2:53:22:04:7c:8a:72:30:e1:d2:f4: 3f:58:18:00:8f:3f:5c:b3:ca:69:7b:1c:10:d6:af: 7f:75:47:5f:d1:30:0d:e1:1f:9f:d1:a2:72:ff:55: 59:92:aa:89:bb:09:ec:07:b4:ad:c9:d3:a5:01:88: d1:1d:25:61:cf:fb:5f:b5:44:bf:48:33:a3:43:85: bb:4a:cc:c5:a1:de:37:97:da:7f:b3:b4:25:a2:02: 4e:78:d5:2f:5e:af:c1:56:12:96:2a:70:21:56:d3: a6:24:3d:49:02:d8:ce:6d:67:e2:f6:c1:1d:96:d0: 75:93:ef:e8:66:08:cc:a1:9f:e3:82:7e:39:cf:7b: be:db:ea:a5:e5:6e:1c:d1:f9:f5:b5:17:f2:2c:bf: 4c:52:75:d1:7d:ca:78:99:6b:62:7e:4e:d8:f2:73: 21:42:ea:3d:82:df:d2:1e:f5:e4:88:20:9a:4c:4d: 50:42:81:d3:96:0d:04:58:7b:5d:a0:59:08:ad:90: 5c:a3:82:b7:93:1b:b0:11:5e:38:2c:de:9a:6d:d5: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D3:E7:B0:B5:70:30:6F:3A:14:B2:AD:D6:E7:85:2F:B0:06:65:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:38:00:77:07:9b:36:62:95:01:c5:26:ec:0c:3a:d1:15:b5: aa:9e:9a:35:cf:18:61:85:f2:a6:47:c8:e4:db:8f:cc:46:69: 4d:d6:99:26:4b:7d:5e:2c:bf:b7:c5:b6:f9:a7:42:be:72:35: 13:e6:57:f4:48:06:ca:85:7a:00:e2:84:77:0f:37:87:f1:26: 34:d7:61:ff:00:1f:26:d8:c6:74:eb:da:bf:a0:36:8d:38:a6: 7f:31:04:dd:0d:8e:05:df:6a:3a:54:6c:41:45:e1:ef:08:f5: d1:8f:ed:05:b0:06:12:25:12:a7:e5:93:54:ad:8d:eb:29:88: 6a:14:cf:76:65:16:ff:f0:4c:18:b6:59:de:50:a6:01:40:73: 34:12:d7:4e:72:9a:4f:7a:74:2f:68:bc:da:b3:75:ac:27:f6: 76:d7:e3:06:63:3f:13:eb:a3:bf:21:7f:6f:c4:c1:fd:5e:60: 89:1c:96:d1:b3:47:83:eb:64:cb:e9:6d:3c:b0:7b:98:8d:a3: 3e:c3:6b:a5:45:e6:91:b2:2e:67:5e:ff:d3:0a:6a:b1:ee:a9: 13:14:ef:d3:fe:70:17:76:3b:33:eb:03:ab:9a:d1:5d:c3:5f: f9:6a:5f:31:37:77:1d:ff:ab:a9:62:22:20:35:42:28:07:48: 58:05:57:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbwnzi5+7/GeSCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk NDNjZjg2ZjctY2I3Ny00YjgwLTllYjEtMGY4ZjNiNzhiZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSnJ5RM/CvjTkEqRAqRjzV5i2KYWDpnRucpC TteP8VsnPnl+nnH9Z6mBIj3/ykUc8lMiBHyKcjDh0vQ/WBgAjz9cs8ppexwQ1q9/ dUdf0TAN4R+f0aJy/1VZkqqJuwnsB7StydOlAYjRHSVhz/tftUS/SDOjQ4W7SszF od43l9p/s7QlogJOeNUvXq/BVhKWKnAhVtOmJD1JAtjObWfi9sEdltB1k+/oZgjM oZ/jgn45z3u+2+ql5W4c0fn1tRfyLL9MUnXRfcp4mWtifk7Y8nMhQuo9gt/SHvXk iCCaTE1QQoHTlg0EWHtdoFkIrZBco4K3kxuwEV44LN6abdVvywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDT57C1cDBvOhSyrdbnhS+wBmUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvZDk4MWVkMjEtYTI1YS0z YjAxLTkxYzAtOTA1NDk3ZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB84AHcHmzZilQHFJuwMOtEVtaqemjXPGGGF8qZHyOTbj8xGaU3WmSZL fV4sv7fFtvmnQr5yNRPmV/RIBsqFegDihHcPN4fxJjTXYf8AHybYxnTr2r+gNo04 pn8xBN0NjgXfajpUbEFF4e8I9dGP7QWwBhIlEqflk1StjespiGoUz3ZlFv/wTBi2 Wd5QpgFAczQS105ymk96dC9ovNqzdawn9nbX4wZjPxPro78hf2/Ewf1eYIkcltGz R4PrZMvpbTywe5iNoz7Da6VF5pGyLmde/9MKarHuqRMU79P+cBd2OzPrA6ua0V3D X/lqXzE3dx3/q6liIiA1QigHSFgFV+Y= -----END CERTIFICATE-----Generated at Fri Jul 24 12:20:28 2026 by rpki-client