$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa File: 7a4b2917-6976-34de-8fe8-248aadad86b3.roa (raw, json) Hash identifier: +5dIpxxeXCctEAFporHEbxkjgCxUej0YvdeiZ1IDRKY= Subject key identifier: B0:DB:11:45:5F:8A:0D:CE:9C:A2:4B:B0:50:3C:42:36:73:51:ED:5E Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584C9C31B8C7EE777E28219620C0 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 20460 IP address blocks: 72.14.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:b8:c7:ee:77:7e:28:21:96:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=9d2d2331-8897-4b50-9011-b55307db9526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:6c:e5:09:37:8c:1d:35:0d:52:4d:7f:6f: da:1a:fe:98:b4:d2:53:0e:31:a3:02:66:dd:ab:d4: a6:6c:46:ba:7e:25:73:a4:f9:72:4f:a4:6e:1e:57: c8:22:cb:97:7a:82:b2:e6:18:fb:7b:28:3e:57:72: 17:55:4a:dc:f4:68:4d:f7:0e:c3:40:46:7a:cf:69: cd:17:77:1b:c3:be:78:be:d5:b3:91:68:b0:a3:6c: d2:29:a8:da:53:e4:f4:43:0f:bb:44:49:dc:7c:1e: d1:e7:9d:b2:85:6e:26:51:3d:d8:8b:bc:b8:85:a3: 99:0d:0e:37:d0:8e:40:2b:da:63:6d:81:77:5e:9a: 4e:11:5e:10:1e:b9:71:40:8e:1d:e5:a8:e5:01:36: 84:2b:6c:0f:02:10:ff:97:79:fb:12:7e:7f:c3:9f: 27:69:6c:07:5d:64:c0:50:56:81:d1:08:c5:a4:6f: ef:a8:d0:87:f2:8a:fa:cb:9e:32:85:7d:53:28:9c: 73:a5:d1:33:42:97:19:c5:02:0f:a0:28:0c:ca:88: 1d:36:f0:fc:65:da:2b:43:02:86:0c:28:ae:7e:dd: 95:8f:b5:e9:10:ab:68:11:c9:68:80:68:21:94:0a: de:46:a4:95:ee:28:2e:5e:8c:8c:e5:b6:79:ca:3b: 6c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:11:45:5F:8A:0D:CE:9C:A2:4B:B0:50:3C:42:36:73:51:ED:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7a4b2917-6976-34de-8fe8-248aadad86b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:68:f2:88:d0:13:8b:8e:78:1d:d0:71:7e:73:f1:bf:6e:b6: 5c:75:07:76:d3:11:f9:3a:b3:c7:16:8e:26:a6:14:f9:5a:c0: 43:1e:82:d7:af:44:99:73:cd:bc:c5:6c:6a:b7:e4:fc:69:ba: 3a:78:54:7c:af:f0:29:89:ec:bf:7c:46:c1:9a:6b:59:2a:81: 26:77:67:8d:91:fa:39:60:e2:cf:5a:69:bf:1d:da:02:c6:ac: d8:56:1a:fd:61:23:eb:8f:68:fa:44:d4:07:0f:8a:64:65:67: 81:d7:1e:b4:2e:ac:75:8b:ca:d4:43:59:b1:a0:08:39:ac:3b: 74:3f:5f:cf:37:35:62:84:62:fb:41:69:c9:7d:b7:0b:15:10: 45:00:9e:6e:23:9f:51:b3:42:b2:ae:d4:29:34:24:c6:25:e0: c0:92:78:bb:c8:63:aa:9d:b2:9d:da:aa:97:6f:b0:7e:86:c7: 4b:79:40:ac:b5:08:50:4b:14:fe:3e:a2:69:86:7c:ec:d5:12: b0:fb:61:f7:4a:54:95:9e:cd:fe:a8:af:b7:ff:e6:cb:ad:81: 2b:dd:5a:40:20:57:2c:b7:a1:80:aa:bd:bd:d9:77:da:f8:20: 59:ff:02:5a:b0:64:48:d7:ab:2e:38:3b:4b:22:d6:fc:44:c7: 80:fc:ac:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMbjH7nd+KCGWIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk OWQyZDIzMzEtODg5Ny00YjUwLTkwMTEtYjU1MzA3ZGI5NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTds5Qk3jB01DVJNf2/aGv6YtNJTDjGjAmbd q9SmbEa6fiVzpPlyT6RuHlfIIsuXeoKy5hj7eyg+V3IXVUrc9GhN9w7DQEZ6z2nN F3cbw754vtWzkWiwo2zSKajaU+T0Qw+7REncfB7R552yhW4mUT3Yi7y4haOZDQ43 0I5AK9pjbYF3XppOEV4QHrlxQI4d5ajlATaEK2wPAhD/l3n7En5/w58naWwHXWTA UFaB0QjFpG/vqNCH8or6y54yhX1TKJxzpdEzQpcZxQIPoCgMyogdNvD8ZdorQwKG DCiuft2Vj7XpEKtoEclogGghlAreRqSV7iguXoyM5bZ5yjtsmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDbEUVfig3OnKJLsFA8QjZzUe1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvN2E0YjI5MTctNjk3Ni0z NGRlLThmZTgtMjQ4YWFkYWQ4NmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBo8ojQE4uOeB3QcX5z8b9utlx1B3bTEfk6s8cWjiamFPlawEMegtev RJlzzbzFbGq35Pxpujp4VHyv8CmJ7L98RsGaa1kqgSZ3Z42R+jlg4s9aab8d2gLG rNhWGv1hI+uPaPpE1AcPimRlZ4HXHrQurHWLytRDWbGgCDmsO3Q/X883NWKEYvtB acl9twsVEEUAnm4jn1GzQrKu1Ck0JMYl4MCSeLvIY6qdsp3aqpdvsH6Gx0t5QKy1 CFBLFP4+ommGfOzVErD7YfdKVJWezf6or7f/5sutgSvdWkAgVyy3oYCqvb3Zd9r4 IFn/AlqwZEjXqy44O0si1vxEx4D8rGk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:28 2026 by rpki-client