$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa File: 708e041f-6eea-32c5-b5ef-2437b86a4217.roa (raw, json) Hash identifier: IcDqAPyU8lGwDh5yeOOo/ZGmQvS8PL1A83pnuSvcv4o= Subject key identifier: 64:8C:DD:76:2E:1C:01:AF:98:75:39:29:CF:AD:B7:34:D7:D1:52:5E Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D7CCFD3344E1FB4ABAEA71540 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 211373 IP address blocks: 72.14.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d3:34:4e:1f:b4:ab:ae:a7:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=f5cdd73d-8c7b-40ef-bde4-d8eec25f5961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:f0:f1:94:15:46:04:10:6d:70:4b:10:51: ef:06:95:87:f4:8b:ba:81:07:53:7b:c1:4f:7c:ab: b8:db:e7:ef:e4:6c:45:16:1b:7e:08:59:f0:d6:1d: aa:61:03:d9:90:54:cc:4a:f9:80:18:69:3d:78:fe: 26:e2:57:c1:9c:ac:8b:6b:c9:1f:05:bb:f0:50:29: ab:8e:89:69:33:d8:77:71:0d:07:a7:3f:8a:9a:60: bd:53:ee:d1:8d:3e:6d:dd:16:40:a6:89:a7:c3:3c: b1:c4:2d:f9:6f:b8:07:31:98:d6:98:1c:ef:da:af: 8b:02:bc:2f:4a:7e:8c:ae:20:f4:f1:af:c5:86:b1: d4:b1:9d:dc:bb:df:08:c7:54:66:5c:b6:c1:53:94: 24:b9:61:c0:10:c8:5c:0b:52:d3:0c:c2:8a:bd:e4: f6:e3:d3:e3:71:e3:e6:01:e4:54:da:68:f4:81:c5: 84:21:34:b7:8d:01:38:39:eb:75:8f:37:83:6b:0f: e5:42:33:47:d3:b8:f4:e9:97:90:54:d8:13:7e:76: f4:02:a7:42:25:0d:50:ff:8d:6e:bc:2d:d4:68:d9: 23:c4:80:2b:9c:a2:ef:23:67:75:3a:3a:35:4e:1e: 5f:9a:7a:bd:66:f7:2a:58:c3:f5:31:55:f6:d5:59: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:DD:76:2E:1C:01:AF:98:75:39:29:CF:AD:B7:34:D7:D1:52:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/708e041f-6eea-32c5-b5ef-2437b86a4217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2d:3a:a3:db:6f:3c:0f:7e:da:d2:22:8b:bb:ed:5b:bf:5f: b8:97:d8:98:9e:35:2d:2c:74:7a:99:35:17:d6:09:12:ff:f3: 19:87:de:2a:d7:f3:3e:45:b5:72:3f:84:73:08:17:11:3a:1a: f7:44:a4:12:10:71:41:ea:3a:a1:a6:b7:a0:20:fc:22:e8:04: 30:de:e0:3c:66:f7:e6:21:5a:63:cc:55:4d:8a:b6:cc:d5:9a: 68:84:c8:28:4e:1c:a7:ef:dc:48:98:d2:73:2a:0f:eb:37:89: f3:34:0f:20:b7:c1:bb:73:c7:98:95:10:8e:fa:e8:b1:66:a9: f9:c5:45:21:73:57:86:19:c0:50:b3:b4:59:49:a3:f8:0a:b7: ac:f5:2a:c8:fb:25:5a:38:8d:c0:be:39:af:91:d8:d9:d1:3c: ba:16:d9:37:db:51:4d:73:c5:7c:29:db:20:9d:32:88:05:d7: 99:1c:63:ac:21:96:f8:18:47:a4:1d:71:66:96:65:93:25:87: d3:fd:3b:db:ed:eb:14:05:46:fa:8d:a5:de:da:5f:86:ef:0e: dd:5c:78:c5:4b:35:3d:98:b1:ad:ef:20:12:8a:ed:89:0c:87: 5f:66:60:8e:70:82:4c:06:c3:f8:af:d6:63:32:46:0f:dc:e6: 0e:ea:8f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9M0Th+0q66nFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjVjZGQ3M2QtOGM3Yi00MGVmLWJkZTQtZDhlZWMyNWY1OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOPw8ZQVRgQQbXBLEFHvBpWH9Iu6gQdTe8FP fKu42+fv5GxFFht+CFnw1h2qYQPZkFTMSvmAGGk9eP4m4lfBnKyLa8kfBbvwUCmr jolpM9h3cQ0Hpz+KmmC9U+7RjT5t3RZApomnwzyxxC35b7gHMZjWmBzv2q+LArwv Sn6MriD08a/FhrHUsZ3cu98Ix1RmXLbBU5QkuWHAEMhcC1LTDMKKveT249PjcePm AeRU2mj0gcWEITS3jQE4Oet1jzeDaw/lQjNH07j06ZeQVNgTfnb0AqdCJQ1Q/41u vC3UaNkjxIArnKLvI2d1Ojo1Th5fmnq9ZvcqWMP1MVX21VnPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSM3XYuHAGvmHU5Kc+ttzTX0VJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzA4ZTA0MWYtNmVlYS0z MmM1LWI1ZWYtMjQzN2I4NmE0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAtOqPbbzwPftrSIou77Vu/X7iX2JieNS0sdHqZNRfWCRL/8xmH3irX 8z5FtXI/hHMIFxE6GvdEpBIQcUHqOqGmt6Ag/CLoBDDe4Dxm9+YhWmPMVU2KtszV mmiEyChOHKfv3EiY0nMqD+s3ifM0DyC3wbtzx5iVEI766LFmqfnFRSFzV4YZwFCz tFlJo/gKt6z1Ksj7JVo4jcC+Oa+R2NnRPLoW2TfbUU1zxXwp2yCdMogF15kcY6wh lvgYR6QdcWaWZZMlh9P9O9vt6xQFRvqNpd7aX4bvDt1ceMVLNT2Ysa3vIBKK7YkM h19mYI5wgkwGw/iv1mMyRg/c5g7qj3M= -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:06 2026 by rpki-client