$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa File: 7a272954-d9e7-38db-a114-33c519fdfe8a.roa (raw, json) Hash identifier: nfLErs7PbdfDGOoWjv7MLAJ5F1o+/IX/oLgMzr1nr04= Subject key identifier: 31:67:49:66:55:56:CA:17:D5:E0:D9:46:58:A9:5F:7C:E6:9B:DD:94 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584D52435AE6D40AACCE15D5A9D0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 63023 IP address blocks: 72.14.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5a:e6:d4:0a:ac:ce:15:d5:a9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=3dd45050-282a-40de-a3eb-38824f621373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:af:83:ed:e8:fc:d1:65:03:c9:40:27:d0: 77:5b:f6:0e:c3:e1:c8:4e:fd:74:75:31:81:d8:ce: a4:17:a0:67:c3:e0:61:a4:05:5a:8d:e9:6b:af:db: d4:d2:ea:2b:66:22:ab:2f:a2:67:f9:1d:31:74:a1: 06:fc:4f:a9:21:87:7d:e0:2b:55:e0:e3:fb:ff:28: 33:5f:13:2e:34:b9:e6:b0:9a:26:a2:6f:77:12:06: a0:52:2b:71:6b:6c:e8:52:53:3e:3d:7d:af:0f:a9: a8:c4:cd:27:36:05:4c:4a:3e:52:1c:d9:43:5c:6d: f7:c1:13:12:5d:24:60:3a:96:d4:d2:7e:0e:b6:66: 4d:c5:83:0c:20:70:51:3b:f7:86:ca:2a:46:50:e9: 1f:36:d0:a1:0f:7e:05:8e:c8:65:97:d7:4c:d8:f0: 91:47:83:12:bd:8e:c2:02:42:33:d3:24:b6:10:20: c9:3e:dc:d1:83:88:64:85:ee:f0:e9:d1:b1:3f:c0: fc:5b:91:b0:b3:24:68:73:07:d9:aa:4d:5c:2d:44: 1a:08:f7:2e:83:0e:7c:33:93:fc:df:30:f3:5c:a8: 66:63:2a:d6:39:5e:84:5d:a7:c6:c7:95:a0:39:38: 76:c0:24:cf:1e:ea:0a:29:96:07:c1:c1:27:5a:8d: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:67:49:66:55:56:CA:17:D5:E0:D9:46:58:A9:5F:7C:E6:9B:DD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a272954-d9e7-38db-a114-33c519fdfe8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ff:f7:75:8e:8e:5e:3c:83:a4:5a:17:59:87:e8:ac:75:81: b9:4b:5c:46:50:72:9d:8d:39:28:e1:72:15:3c:68:6d:bc:96: 56:fb:43:c9:fe:ac:9a:e6:65:93:22:43:0e:ad:83:27:b2:4e: d3:e2:89:b2:13:06:ed:1a:c9:4f:1b:c7:1a:1a:e7:3b:97:2a: 28:ed:27:fb:2c:97:27:d1:7d:fc:11:3a:2f:59:f7:ba:da:64: 85:81:da:0c:42:5b:9d:74:b2:dc:9b:9e:5b:e9:cf:1a:14:49: 2e:1d:83:df:d9:b0:63:3e:2f:8d:4b:90:ce:12:9b:4b:4d:50: 51:57:82:3f:39:14:e9:e3:66:98:31:f0:5e:f0:d5:3e:a3:ac: 89:18:5b:03:5b:88:2f:9f:91:7f:b5:3a:a7:5c:40:53:61:23: 22:42:56:52:2f:b5:5e:fe:01:8c:1f:c6:36:0f:80:07:b0:b2: ce:ae:e9:1f:22:36:ec:16:07:fc:14:4f:e5:0f:69:1e:39:91: d0:49:4e:d5:e4:67:6b:26:e3:ae:65:ea:e1:40:e9:33:e7:c9: 66:73:f2:3d:59:fa:41:e1:cd:e9:22:53:27:5d:b3:f4:9d:f3: ff:01:ab:51:d8:cb:77:13:b3:5e:54:bc:fa:16:b6:1a:a9:dd: 36:81:c8:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1rm1AqszhXVqdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk M2RkNDUwNTAtMjgyYS00MGRlLWEzZWItMzg4MjRmNjIxMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8+vg+3o/NFlA8lAJ9B3W/YOw+HITv10dTGB 2M6kF6Bnw+BhpAVajelrr9vU0uorZiKrL6Jn+R0xdKEG/E+pIYd94CtV4OP7/ygz XxMuNLnmsJomom93EgagUitxa2zoUlM+PX2vD6moxM0nNgVMSj5SHNlDXG33wRMS XSRgOpbU0n4OtmZNxYMMIHBRO/eGyipGUOkfNtChD34Fjshll9dM2PCRR4MSvY7C AkIz0yS2ECDJPtzRg4hkhe7w6dGxP8D8W5GwsyRocwfZqk1cLUQaCPcugw58M5P8 3zDzXKhmYyrWOV6EXafGx5WgOTh2wCTPHuoKKZYHwcEnWo2XDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFnSWZVVsoX1eDZRlipX3zmm92UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvN2EyNzI5NTQtZDllNy0z OGRiLWExMTQtMzNjNTE5ZmRmZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3/93WOjl48g6RaF1mH6Kx1gblLXEZQcp2NOSjhchU8aG28llb7Q8n+ rJrmZZMiQw6tgyeyTtPiibITBu0ayU8bxxoa5zuXKijtJ/sslyfRffwROi9Z97ra ZIWB2gxCW510stybnlvpzxoUSS4dg9/ZsGM+L41LkM4Sm0tNUFFXgj85FOnjZpgx 8F7w1T6jrIkYWwNbiC+fkX+1OqdcQFNhIyJCVlIvtV7+AYwfxjYPgAewss6u6R8i NuwWB/wUT+UPaR45kdBJTtXkZ2sm465l6uFA6TPnyWZz8j1Z+kHhzekiUydds/Sd 8/8Bq1HYy3cTs15UvPoWthqp3TaByEQ= -----END CERTIFICATE-----Generated at Sat Apr 18 03:04:10 2026 by rpki-client