$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a93b8944-2c6b-308c-853a-b888bcb0f12e.roa File: a93b8944-2c6b-308c-853a-b888bcb0f12e.roa (raw, json) Hash identifier: VuQJ2lsD5WxPvDM5sEv6FI7r38L+Bq1vOWi1uonjKPE= Subject key identifier: 12:34:12:79:A4:55:2C:1C:23:15:73:7B:1A:24:12:51:B1:35:E1:77 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584F4987E8B8AC773450CA2AE780 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a93b8944-2c6b-308c-853a-b888bcb0f12e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14813 IP address blocks: 72.22.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:e8:b8:ac:77:34:50:ca:2a:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1468a91-44af-42e4-9c92-409d747a1f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:3f:60:8a:ef:14:c1:c3:50:af:ec:24:7b: af:7f:eb:5f:c0:c1:47:b1:73:98:ff:d4:df:d4:08: 96:51:40:9a:ed:d3:ca:c8:1e:06:ed:6d:40:9a:c5: eb:70:ed:62:88:25:d7:34:88:cf:98:03:e7:35:0e: 0d:0c:75:12:9c:b9:0f:9e:64:95:35:83:40:09:8e: 88:ce:0e:15:19:20:34:bf:cf:b9:4b:11:88:38:2d: 3a:48:15:f1:86:2c:1c:70:5a:dd:e2:d8:0e:3f:de: b5:2c:c7:28:8d:a0:1b:d8:3e:6a:93:58:20:92:cc: 97:02:aa:2f:d2:c5:ba:a1:c3:9b:f7:d2:3e:fe:58: ac:c8:ec:02:67:1d:48:f6:4c:7a:ff:89:81:3c:16: 8e:91:d4:cb:33:5d:d4:60:38:db:32:fa:29:e0:af: e8:e4:16:b7:a8:e8:d0:9b:b5:11:62:d4:55:4f:0e: 7c:51:75:af:10:ea:05:35:b6:e4:7a:6f:8d:1e:85: e8:ce:c9:53:d9:3f:fe:c6:e9:bd:d8:24:31:70:2f: 1f:73:39:56:c7:23:d3:97:37:bc:c6:45:29:f0:b4: d8:90:64:f4:bc:27:3d:4e:1a:b1:b0:6b:cf:e1:0c: b6:26:24:17:2c:e0:02:e2:a3:f7:d3:02:3c:81:e6: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:12:79:A4:55:2C:1C:23:15:73:7B:1A:24:12:51:B1:35:E1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/a93b8944-2c6b-308c-853a-b888bcb0f12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:82:f1:9f:e5:62:da:39:ec:78:a8:36:d2:87:9b:19:77:1b: bf:61:06:26:26:a7:2f:f6:af:8f:ea:de:bd:25:aa:de:6e:96: 62:cf:da:6c:66:04:1e:ef:a6:ab:80:68:ed:6d:f8:f9:e2:f2: 15:59:7e:0e:1c:a1:0e:eb:dd:05:df:f3:80:8c:28:0e:bc:92: bd:66:f0:b9:b3:15:21:cf:22:f4:c7:53:16:81:59:cf:57:d7: e6:4b:b5:3e:36:9a:9e:58:51:97:74:ff:2e:a3:f1:b8:e5:0b: 3d:75:cb:f0:3c:bb:ef:f9:51:1c:82:c7:7d:76:a1:fb:eb:02: 3c:c5:08:da:e5:50:06:48:65:21:8a:22:9b:75:95:58:79:62: 1d:9a:48:07:2a:c7:e4:20:2c:e6:23:ec:a6:91:90:83:85:80: 9a:07:42:90:20:f3:d8:21:83:14:d1:98:da:8f:00:e5:e5:f4: 9b:fd:75:7a:c0:81:b3:52:3f:5a:a9:a4:a3:a7:7e:53:9b:46: ee:35:06:55:0a:41:b4:e4:83:c4:0b:82:59:bb:2d:5b:72:0c: 45:6b:40:2e:e2:c6:90:2c:59:54:c0:bf:a9:fe:75:fc:7c:e1: e6:3b:6f:f7:80:f6:94:55:ac:54:39:ad:78:c0:f0:97:0a:07: 6c:ce:f0:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh+i4rHc0UMoq54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjE0NjhhOTEtNDRhZi00MmU0LTljOTItNDA5ZDc0N2ExZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aw/YIrvFMHDUK/sJHuvf+tfwMFHsXOY/9Tf 1AiWUUCa7dPKyB4G7W1AmsXrcO1iiCXXNIjPmAPnNQ4NDHUSnLkPnmSVNYNACY6I zg4VGSA0v8+5SxGIOC06SBXxhiwccFrd4tgOP961LMcojaAb2D5qk1ggksyXAqov 0sW6ocOb99I+/lisyOwCZx1I9kx6/4mBPBaOkdTLM13UYDjbMvop4K/o5Ba3qOjQ m7URYtRVTw58UXWvEOoFNbbkem+NHoXozslT2T/+xum92CQxcC8fczlWxyPTlze8 xkUp8LTYkGT0vCc9ThqxsGvP4Qy2JiQXLOAC4qP30wI8gea3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI0EnmkVSwcIxVzexokElGxNeF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvYTkzYjg5NDQtMmM2Yi0z MDhjLTg1M2EtYjg4OGJjYjBmMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICC8Z/lYto57HioNtKHmxl3G79hBiYmpy/2r4/q3r0lqt5ulmLP2mxm BB7vpquAaO1t+Pni8hVZfg4coQ7r3QXf84CMKA68kr1m8LmzFSHPIvTHUxaBWc9X 1+ZLtT42mp5YUZd0/y6j8bjlCz11y/A8u+/5URyCx312ofvrAjzFCNrlUAZIZSGK Ipt1lVh5Yh2aSAcqx+QgLOYj7KaRkIOFgJoHQpAg89ghgxTRmNqPAOXl9Jv9dXrA gbNSP1qppKOnflObRu41BlUKQbTkg8QLglm7LVtyDEVrQC7ixpAsWVTAv6n+dfx8 4eY7b/eA9pRVrFQ5rXjA8JcKB2zO8Do= -----END CERTIFICATE-----Generated at Sun Sep 27 06:44:56 2026 by rpki-client