$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d790c2fc-45f4-3175-8e61-e30a125a0c02.roa File: d790c2fc-45f4-3175-8e61-e30a125a0c02.roa (raw, json) Hash identifier: c2RiaSj1Jmg4otzS2T8/tY+dgPONMmnBvLvwcZha+KM= Subject key identifier: E5:CE:9F:89:F9:4E:56:C5:76:39:2B:6C:B8:FC:F4:7C:11:43:89:2F Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584F2C37E40AA1C033165C100740 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d790c2fc-45f4-3175-8e61-e30a125a0c02.roa Signing time: Mon 14 Sep 2026 13:43:38 +0000 ROA not before: Mon 14 Sep 2026 13:43:38 +0000 ROA not after: Sun 13 Dec 2026 14:43:38 +0000 asID: 401362 IP address blocks: 72.14.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:37:e4:0a:a1:c0:33:16:5c:10:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Sep 14 13:43:38 2026 GMT Not After : Dec 13 14:43:38 2026 GMT Subject: CN=71b54e18-61b6-4692-8402-575644df4179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:fd:cf:98:79:3d:e6:73:5b:0e:70:cd:1c: 29:f5:2f:65:c9:52:4b:8c:9d:86:48:d7:8b:0f:1e: 5c:8a:a9:33:70:8e:b5:c8:c2:fb:4c:65:8e:88:0f: 27:b5:97:1d:6a:3d:10:c2:43:64:7b:ee:51:7c:d4: 1d:fd:f4:38:2d:74:81:67:55:3d:22:ce:f8:3c:c7: 5b:94:e9:78:5c:6b:f6:ac:f5:2c:52:d7:ea:89:fb: 28:64:12:b6:e0:bc:91:d4:c7:b4:1a:57:b3:b1:bb: 87:89:3d:d9:92:3c:b9:72:b8:d4:68:77:ff:92:70: 27:14:45:eb:37:0b:93:cb:bb:61:87:90:54:d8:d5: 04:b2:18:47:15:3b:c4:48:21:c1:1c:59:3f:56:5c: 83:c3:21:67:2a:2a:8d:8c:ae:3b:72:25:72:d6:6d: d9:79:43:96:65:34:a7:8e:34:9a:a1:e2:7f:1a:e4: 51:33:49:06:47:72:5f:04:e0:5e:22:2d:13:78:54: 6e:cb:61:87:9d:8b:fe:6a:21:88:cb:cf:89:7e:e0: 48:d9:65:66:55:d6:d2:e6:05:43:b8:0b:f4:4f:4b: 37:f0:ab:cc:9e:2a:e5:38:a7:24:a8:7c:6e:cc:7a: 9a:8f:d5:3d:e7:06:34:34:a8:39:93:eb:e6:9a:b5: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CE:9F:89:F9:4E:56:C5:76:39:2B:6C:B8:FC:F4:7C:11:43:89:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/d790c2fc-45f4-3175-8e61-e30a125a0c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2e:2e:62:23:3f:38:87:ca:47:3e:b7:34:dd:82:0c:75:b0: 6d:46:cf:4f:de:3a:c4:90:7e:f5:62:53:5b:fd:74:c5:73:d7: 9d:08:b2:83:6f:bb:b6:d2:61:82:75:83:e4:02:c9:c1:a7:54: 84:35:c5:70:c8:31:dc:2e:77:d8:1a:4d:11:81:a5:6a:1a:25: 51:ed:cc:48:cc:6e:23:9f:0e:ba:5c:8a:e9:76:b7:6a:3c:e9: fd:cd:77:0c:d8:c0:fa:a0:a8:c4:f8:0e:dd:6a:66:ef:80:ec: 34:93:56:c8:08:9c:fe:07:e6:b8:cf:3c:db:4e:72:48:30:3c: 31:d2:2b:fa:31:04:42:60:bf:33:bb:8c:e3:a7:b5:bf:07:ab: 2a:d9:e9:0d:e1:f2:c8:79:c4:66:e9:bb:f8:1a:9c:70:e1:bb: 21:81:89:db:53:7f:ef:70:68:3f:01:89:52:72:c3:2b:dd:ea: 3d:29:00:15:ce:11:df:5b:07:eb:0b:8b:36:f6:0e:f4:be:ed: cd:a0:bb:27:44:18:d4:8b:d4:10:37:f0:6c:01:7c:6c:f1:d9: c8:7f:59:4a:2f:5c:ac:a4:6e:9c:d8:f9:31:5b:db:7c:4c:18: 62:bf:56:8d:0d:fd:58:c6:01:96:9a:63:6e:6d:18:aa:12:db: 17:af:8a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sN+QKocAzFlwQB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDkxNDEzNDMzOFoXDTI2MTIxMzE0NDMzOFowLzEtMCsGA1UEAxMk NzFiNTRlMTgtNjFiNi00NjkyLTg0MDItNTc1NjQ0ZGY0MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJb9z5h5PeZzWw5wzRwp9S9lyVJLjJ2GSNeL Dx5ciqkzcI61yML7TGWOiA8ntZcdaj0QwkNke+5RfNQd/fQ4LXSBZ1U9Is74PMdb lOl4XGv2rPUsUtfqifsoZBK24LyR1Me0GlezsbuHiT3Zkjy5crjUaHf/knAnFEXr NwuTy7thh5BU2NUEshhHFTvESCHBHFk/VlyDwyFnKiqNjK47ciVy1m3ZeUOWZTSn jjSaoeJ/GuRRM0kGR3JfBOBeIi0TeFRuy2GHnYv+aiGIy8+JfuBI2WVmVdbS5gVD uAv0T0s38KvMnirlOKckqHxuzHqaj9U95wY0NKg5k+vmmrUrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXOn4n5TlbFdjkrbLj89HwRQ4kvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZDc5MGMyZmMtNDVmNC0z MTc1LThlNjEtZTMwYTEyNWEwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGouLmIjPziHykc+tzTdggx1sG1Gz0/eOsSQfvViU1v9dMVz150IsoNv u7bSYYJ1g+QCycGnVIQ1xXDIMdwud9gaTRGBpWoaJVHtzEjMbiOfDrpciul2t2o8 6f3NdwzYwPqgqMT4Dt1qZu+A7DSTVsgInP4H5rjPPNtOckgwPDHSK/oxBEJgvzO7 jOOntb8HqyrZ6Q3h8sh5xGbpu/ganHDhuyGBidtTf+9waD8BiVJywyvd6j0pABXO Ed9bB+sLizb2DvS+7c2guydEGNSL1BA38GwBfGzx2ch/WUovXKykbpzY+TFb23xM GGK/Vo0N/VjGAZaaY25tGKoS2xevioQ= -----END CERTIFICATE-----Generated at Mon Sep 21 21:10:18 2026 by rpki-client