$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa File: 5e9f9539-e9cd-3978-849c-cb39566f29fe.roa (raw, json) Hash identifier: frh4IpXFig8vwMA3idvKf/bY0CebKx7RRpZ2d86u/kk= Subject key identifier: 6D:A1:D4:44:BE:03:EC:D2:7E:F2:E8:E8:F0:77:5E:84:F9:79:66:CB Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D04E23D746ED494C6E4490F40 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 834 IP address blocks: 72.14.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:3d:74:6e:d4:94:c6:e4:49:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=58d34153-0c8c-4b7d-a867-c77c6248e2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:14:e7:6c:ac:3a:83:04:2d:42:96:65:34: 60:53:01:66:58:13:b7:02:b6:4f:53:45:f3:8a:62: 3f:49:19:8d:35:89:38:e6:dd:17:18:de:ee:8e:88: 7f:76:70:ee:97:dd:e7:76:c0:5a:97:fd:dd:4d:4d: 05:53:02:17:bf:c1:76:c0:2b:ba:f9:48:57:0a:d5: 28:17:46:7a:7e:a7:0c:4e:79:cb:b5:58:4b:20:ce: dd:2d:c8:9d:9d:b0:25:32:17:fb:28:03:8d:1c:7b: 78:b7:ad:a8:6c:10:42:aa:f5:b7:fe:30:4f:6c:f0: 63:09:56:9d:5b:60:e8:5e:1c:e9:7f:0e:16:a1:1b: 5e:1d:3d:d8:75:d4:70:c6:ef:c8:9e:75:cd:76:85: c2:5f:1c:e2:52:dd:95:9f:d5:87:b7:c7:56:38:26: 5d:fa:ed:a6:1d:13:2f:3c:8a:89:03:3f:eb:14:6a: 29:55:3d:4b:60:33:3f:0f:1a:7f:69:0a:9b:d6:06: 3e:10:22:7a:b0:f2:36:e7:cd:94:50:d4:ea:c4:89: f9:cc:55:13:53:f0:5f:4a:59:8d:84:32:28:e9:65: 4c:31:0d:c2:e2:7b:8e:93:3d:b4:38:05:5f:d8:2c: c0:4d:fd:32:7f:e6:0f:35:39:c1:84:77:77:53:b4: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A1:D4:44:BE:03:EC:D2:7E:F2:E8:E8:F0:77:5E:84:F9:79:66:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5e9f9539-e9cd-3978-849c-cb39566f29fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:07:c2:54:b8:d4:f1:c6:0b:68:e8:02:8d:77:82:a9:c9:01: eb:f0:dc:c3:34:00:86:13:8c:ca:e9:f1:d7:93:24:12:98:5a: c8:6c:7e:09:c3:f1:53:ed:7c:17:3e:a1:1c:4c:66:87:f3:51: 9f:5b:5d:97:84:8f:ae:c6:45:59:2d:ad:2f:96:23:9d:6b:de: c4:73:f2:20:58:10:fd:c3:65:56:e7:fe:3c:11:86:78:4f:f7: 04:24:c9:80:14:88:31:4a:58:47:33:04:d0:3f:f0:b3:44:ea: 2c:a5:c9:a8:92:29:f2:d0:89:8c:82:44:39:43:b1:3c:25:42: 90:6b:ee:70:96:ca:06:8c:04:49:81:a0:17:1d:ba:b1:67:2a: 44:cf:0d:d4:7a:6b:84:29:93:7a:09:1b:0d:3e:0c:16:ad:27: 92:c7:79:9e:7d:5a:38:1c:37:8e:37:24:33:9c:5d:05:c7:13: f0:28:d1:07:d3:cc:bf:2f:eb:eb:51:1f:bf:69:79:66:02:64: 0b:0e:b6:9a:76:1d:24:af:ec:a4:94:39:85:15:aa:0e:13:73: 2a:68:04:c0:87:38:c6:0c:68:08:16:e0:96:eb:49:76:8b:08: 19:d5:45:30:d0:3b:cb:2c:20:c1:79:66:8b:50:bc:81:28:a7: c9:8c:d4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4j10btSUxuRJD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk NThkMzQxNTMtMGM4Yy00YjdkLWE4NjctYzc3YzYyNDhlMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBwU52ysOoMELUKWZTRgUwFmWBO3ArZPU0Xz imI/SRmNNYk45t0XGN7ujoh/dnDul93ndsBal/3dTU0FUwIXv8F2wCu6+UhXCtUo F0Z6fqcMTnnLtVhLIM7dLcidnbAlMhf7KAONHHt4t62obBBCqvW3/jBPbPBjCVad W2DoXhzpfw4WoRteHT3YddRwxu/InnXNdoXCXxziUt2Vn9WHt8dWOCZd+u2mHRMv PIqJAz/rFGopVT1LYDM/Dxp/aQqb1gY+ECJ6sPI2582UUNTqxIn5zFUTU/BfSlmN hDIo6WVMMQ3C4nuOkz20OAVf2CzATf0yf+YPNTnBhHd3U7RyEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2h1ES+A+zSfvLo6PB3XoT5eWbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWU5Zjk1MzktZTljZC0z OTc4LTg0OWMtY2IzOTU2NmYyOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMHwlS41PHGC2joAo13gqnJAevw3MM0AIYTjMrp8deTJBKYWshsfgnD 8VPtfBc+oRxMZofzUZ9bXZeEj67GRVktrS+WI51r3sRz8iBYEP3DZVbn/jwRhnhP 9wQkyYAUiDFKWEczBNA/8LNE6iylyaiSKfLQiYyCRDlDsTwlQpBr7nCWygaMBEmB oBcdurFnKkTPDdR6a4Qpk3oJGw0+DBatJ5LHeZ59WjgcN443JDOcXQXHE/Ao0QfT zL8v6+tRH79peWYCZAsOtpp2HSSv7KSUOYUVqg4TcypoBMCHOMYMaAgW4JbrSXaL CBnVRTDQO8ssIMF5ZotQvIEop8mM1DI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:24 2026 by rpki-client