$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa File: 5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa (raw, json) Hash identifier: fLD+Qe/qbglzd9SIRSmgElPF58Ol1XS6MWw9nn0bEWM= Subject key identifier: C2:D3:76:FC:60:35:1A:81:D3:36:F9:9B:14:D7:2A:61:63:93:73:41 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D5CB4F03616F173758ED5B480 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 399861 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f0:36:16:f1:73:75:8e:d5:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=7f8e3f95-c1f7-41a6-911d-d66fc0001008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:99:6f:bf:87:42:fd:e3:ce:ed:af:b6:7c: 44:f6:06:d3:a6:26:81:9d:b8:d2:86:ad:48:29:c8: 99:0f:ee:be:e2:f4:4c:82:8c:d7:60:6e:1e:0c:bb: 14:8a:e3:c1:8d:cc:9f:cd:0e:ad:17:65:28:3e:06: 94:cb:03:73:ff:cc:89:fe:9d:6b:b2:e2:36:fe:e2: 0a:56:09:aa:71:c3:10:03:64:7f:1e:3b:47:13:66: b5:16:d8:32:96:ab:0f:e3:77:ed:58:fb:74:66:9b: e7:cc:32:5b:02:5c:3a:35:43:80:e4:e1:d9:ca:82: 46:9c:64:6c:e5:fc:55:30:5e:d2:b0:2b:78:e1:19: cb:d1:b2:d2:f9:49:57:25:f9:2c:5b:b9:bf:49:82: fc:82:a6:cb:6c:ce:06:e4:9e:88:63:c1:64:b0:c2: 0c:84:51:18:15:cc:0f:5b:49:48:da:c4:dc:17:7a: 6c:49:ba:d9:91:64:c9:37:57:6d:ef:c5:b7:26:98: ba:ba:bf:ae:df:49:f4:5f:0d:85:42:17:7c:90:bc: 95:fa:c3:7b:bb:30:ed:d7:91:f1:51:86:a4:b4:08: 60:83:97:3d:8a:a3:c9:3a:2b:4b:fe:bd:b4:92:74: b5:23:d5:ea:d2:5f:a2:fb:7e:da:74:5f:1f:b5:e1: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D3:76:FC:60:35:1A:81:D3:36:F9:9B:14:D7:2A:61:63:93:73:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5b0388b1-dc91-3d6d-a1fa-e1b43b44deaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:71:16:87:93:c3:05:0c:1e:f8:fa:ed:51:c3:36:ec:79: 00:18:dd:40:d0:6e:e1:56:28:42:a4:08:d2:77:76:a1:03:83: d7:2a:44:0c:b2:bf:d5:84:8d:3d:7f:6f:7f:b3:20:73:06:7a: ae:0d:44:8a:c5:06:2e:f4:63:fa:36:e7:0d:23:72:28:15:09: fe:6a:3e:a4:96:ed:48:32:ac:b0:0a:51:44:ca:f9:bb:01:d9: c1:92:3c:59:f5:0c:fd:fb:68:15:be:71:ee:cb:73:23:aa:05: b1:f5:07:f2:f9:d4:6a:a5:7b:79:18:ab:96:02:10:ba:a5:c4: 6f:03:42:ac:a0:70:02:ba:8b:23:ff:1b:b8:ea:c2:a1:90:dd: 2c:3b:9e:a0:8e:c1:d2:59:5b:6f:bd:3e:27:9b:8b:6a:e6:80: f1:01:7d:fe:3f:0a:18:49:8f:df:aa:45:76:b1:83:fb:f6:f0: 5e:73:e9:41:c7:53:07:ab:cf:d7:a3:f1:2e:c8:b5:0c:06:e6: dc:0f:28:30:9f:ad:f3:3e:00:e5:36:43:d6:36:2d:31:0a:c9: b6:e6:dc:67:59:e3:dd:cb:72:6a:4c:27:ea:74:c1:9a:cb:5f: 4f:b6:e9:f3:3d:6a:c0:57:5c:82:76:f2:39:5c:ff:72:17:3b: f8:08:9a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPA2FvFzdY7VtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk N2Y4ZTNmOTUtYzFmNy00MWE2LTkxMWQtZDY2ZmMwMDAxMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPCZb7+HQv3jzu2vtnxE9gbTpiaBnbjShq1I KciZD+6+4vRMgozXYG4eDLsUiuPBjcyfzQ6tF2UoPgaUywNz/8yJ/p1rsuI2/uIK VgmqccMQA2R/HjtHE2a1FtgylqsP43ftWPt0ZpvnzDJbAlw6NUOA5OHZyoJGnGRs 5fxVMF7SsCt44RnL0bLS+UlXJfksW7m/SYL8gqbLbM4G5J6IY8FksMIMhFEYFcwP W0lI2sTcF3psSbrZkWTJN1dt78W3Jpi6ur+u30n0Xw2FQhd8kLyV+sN7uzDt15Hx UYaktAhgg5c9iqPJOitL/r20knS1I9Xq0l+i+37adF8fteG/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLTdvxgNRqB0zb5mxTXKmFjk3NBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWIwMzg4YjEtZGM5MS0z ZDZkLWExZmEtZTFiNDNiNDRkZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9IcRaHk8MFDB74+u1RwzbseQAY3UDQbuFWKEKkCNJ3dqEDg9cqRAyy v9WEjT1/b3+zIHMGeq4NRIrFBi70Y/o25w0jcigVCf5qPqSW7UgyrLAKUUTK+bsB 2cGSPFn1DP37aBW+ce7LcyOqBbH1B/L51Gqle3kYq5YCELqlxG8DQqygcAK6iyP/ G7jqwqGQ3Sw7nqCOwdJZW2+9Piebi2rmgPEBff4/ChhJj9+qRXaxg/v28F5z6UHH Uwerz9ej8S7ItQwG5twPKDCfrfM+AOU2Q9Y2LTEKybbm3GdZ493LcmpMJ+p0wZrL X0+26fM9asBXXIJ28jlc/3IXO/gImg8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:31 2026 by rpki-client