$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa File: 038febac-a971-356a-a45e-6ac7bc0667ad.roa (raw, json) Hash identifier: F4XE/poMpGV+QdFLwNPOyXJEKqZn/8MBRUBwynhgfHM= Subject key identifier: 6A:B8:6C:6E:D6:1A:F8:18:E8:CB:32:2E:8F:B3:33:FA:8B:8C:F3:36 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584EA79CCFE254512676F2CB1780 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14813 IP address blocks: 72.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:cf:e2:54:51:26:76:f2:cb:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=86eed781-9e08-4576-bf56-4965c587c695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:45:2a:c9:a0:6d:18:7f:3b:0d:71:9c:af: f0:25:02:c4:b8:a1:19:71:89:78:ef:7d:df:84:b3: ee:a6:fe:3f:2e:f1:63:9d:2a:e2:a6:d2:f1:61:d8: 19:55:24:e2:c9:c7:71:06:bb:4b:2c:5e:f4:98:e0: 42:60:fd:4b:41:94:ec:c8:29:1a:4c:ce:e0:7f:3e: 02:f5:70:12:5f:b9:90:09:46:30:49:c7:a0:6e:8d: 7d:43:14:e5:48:61:49:59:aa:cb:eb:19:55:33:5f: b3:a1:7e:18:55:10:86:75:d8:9c:a6:71:6b:c8:37: bf:77:f5:26:0c:69:75:28:08:b9:97:07:64:ff:d2: df:57:85:88:23:7e:cc:52:9c:53:47:58:e5:0d:5c: 4d:5b:2d:f8:94:06:d5:8b:f6:9f:40:ad:ab:e1:3e: ef:46:eb:e7:9a:0d:b7:04:0f:7d:e8:20:84:dd:5c: 56:87:81:49:e6:74:c6:76:f3:09:43:ab:16:6d:9a: 04:66:41:bc:57:31:c0:cf:d3:ed:e6:a7:b6:a7:2e: a7:0b:d0:60:07:7f:eb:f1:4f:54:38:8b:7a:05:89: 36:74:49:db:a5:0a:6e:87:57:52:1b:4c:c9:92:1f: 2e:d3:28:7e:f0:0d:97:c8:97:1d:ed:a5:2d:0f:d9: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B8:6C:6E:D6:1A:F8:18:E8:CB:32:2E:8F:B3:33:FA:8B:8C:F3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ad:82:56:9c:8c:43:a3:c0:6b:36:b4:2a:5a:8a:69:c0:58: 8d:f4:bd:f5:9d:be:f2:e5:4e:da:32:e7:51:0c:fd:b6:fb:3e: 84:99:d5:ba:ce:30:cc:3a:2e:e3:2c:3b:db:e4:43:48:6d:19: f3:b1:cf:d8:d5:05:91:54:ae:ce:54:9c:e5:d3:28:f8:61:ed: 2d:29:76:88:94:42:98:d7:a2:cb:d4:b6:b5:d4:ec:6d:fd:0b: a3:26:88:4f:0c:6f:02:6d:20:9b:36:1b:da:00:a8:99:69:7d: 9e:76:d8:d5:9c:d3:6a:d3:42:b3:45:ad:6f:9e:b4:72:d2:37: c1:fc:0a:f9:b2:c6:1d:5a:d2:47:8f:ad:39:06:0c:44:ea:de: 68:31:e9:cd:00:cc:64:98:b0:ae:fe:d9:99:43:c4:86:7a:54: 2f:46:a5:5a:e6:46:1d:e2:34:3b:10:e9:26:09:5e:6b:23:c9: e6:be:73:46:b0:98:fc:7b:8c:8a:6b:de:7e:24:16:e0:1a:a3: bc:7c:5b:5c:c6:67:70:9f:8d:a9:cb:bd:04:36:dd:b9:d9:62: be:1d:01:84:3c:66:b2:df:2e:4d:b8:05:7a:82:5c:01:20:41: 4b:66:44:ed:25:e8:64:cc:d2:98:dd:69:16:37:c8:1f:ed:26: 6f:2a:8d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnM/iVFEmdvLLF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODZlZWQ3ODEtOWUwOC00NTc2LWJmNTYtNDk2NWM1ODdjNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLpFKsmgbRh/Ow1xnK/wJQLEuKEZcYl4733f hLPupv4/LvFjnSriptLxYdgZVSTiycdxBrtLLF70mOBCYP1LQZTsyCkaTM7gfz4C 9XASX7mQCUYwScegbo19QxTlSGFJWarL6xlVM1+zoX4YVRCGddicpnFryDe/d/Um DGl1KAi5lwdk/9LfV4WII37MUpxTR1jlDVxNWy34lAbVi/afQK2r4T7vRuvnmg23 BA996CCE3VxWh4FJ5nTGdvMJQ6sWbZoEZkG8VzHAz9Pt5qe2py6nC9BgB3/r8U9U OIt6BYk2dEnbpQpuh1dSG0zJkh8u0yh+8A2XyJcd7aUtD9kHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq4bG7WGvgY6MsyLo+zM/qLjPM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDM4ZmViYWMtYTk3MS0z NTZhLWE0NWUtNmFjN2JjMDY2N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALytglacjEOjwGs2tCpaimnAWI30vfWdvvLlTtoy51EM/bb7PoSZ1brO MMw6LuMsO9vkQ0htGfOxz9jVBZFUrs5UnOXTKPhh7S0pdoiUQpjXosvUtrXU7G39 C6MmiE8MbwJtIJs2G9oAqJlpfZ522NWc02rTQrNFrW+etHLSN8H8Cvmyxh1a0keP rTkGDETq3mgx6c0AzGSYsK7+2ZlDxIZ6VC9GpVrmRh3iNDsQ6SYJXmsjyea+c0aw mPx7jIpr3n4kFuAao7x8W1zGZ3CfjanLvQQ23bnZYr4dAYQ8ZrLfLk24BXqCXAEg QUtmRO0l6GTM0pjdaRY3yB/tJm8qjVw= -----END CERTIFICATE-----Generated at Wed Jul 29 08:35:51 2026 by rpki-client