$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa File: cacd0df1-5cdf-3769-98be-255e1d5de51d.roa (raw, json) Hash identifier: Vm2f94eSCZ62tNwqiDI1y/VNgnaAJEoltdlEE/6NLPE= Subject key identifier: 0D:69:17:86:38:B9:C3:45:C9:A2:59:0D:C3:DC:82:0A:4A:0D:13:99 Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584EA79D42D7DF11F59FC1F87460 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14813 IP address blocks: 72.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:42:d7:df:11:f5:9f:c1:f8:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c98a5861-660d-428e-b705-4c309a644e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:e8:c1:a2:64:4d:98:96:02:c7:19:75:3e: e6:57:d0:26:48:3d:fd:92:fc:4d:66:1e:ae:4e:5c: 74:82:0e:c5:f0:7a:9d:b0:2f:e7:50:af:ce:c1:2e: 27:41:3b:d9:f2:7e:0f:44:8b:a4:90:a1:c5:ed:66: 0f:cf:0a:31:46:c4:18:c3:eb:af:1f:a5:1a:4c:08: af:e0:cd:94:f7:ff:29:d0:63:67:c9:d4:1a:f0:ab: 14:8e:35:99:df:a4:4c:5f:d7:9e:4d:21:66:88:c7: 22:0b:56:93:aa:de:08:98:e0:82:2d:14:85:e9:a4: 73:b8:5b:ca:4c:d0:64:ed:e1:f4:0c:27:3e:ca:0b: 74:d7:0d:d8:05:43:01:17:e1:b1:5e:65:4a:c9:d5: d2:c9:9a:22:64:7e:72:53:a4:2b:05:58:de:f7:73: a9:27:a4:b6:b0:9f:5b:e7:d3:e8:51:89:f5:b2:0d: 83:e3:ed:fc:dd:c7:58:59:40:d5:e6:9b:9d:27:76: a8:3d:42:2a:f5:d5:cd:7d:86:cc:3d:b0:bf:61:3f: c4:41:33:72:ee:ed:11:d2:60:45:43:69:98:9c:fa: 13:cf:06:a3:ff:4c:02:df:42:b7:46:95:c9:6c:80: af:57:f4:e1:d2:b3:b0:f8:6b:29:9b:79:42:36:08: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:69:17:86:38:B9:C3:45:C9:A2:59:0D:C3:DC:82:0A:4A:0D:13:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cacd0df1-5cdf-3769-98be-255e1d5de51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:aa:1f:ae:df:ca:eb:cb:78:c4:52:4b:f4:bc:39:35:72:78: 44:0d:e5:36:68:30:7d:fd:7d:4c:15:c5:d3:01:bd:30:92:9c: b9:9f:b9:c6:5c:59:08:e5:cd:62:91:7b:a7:cd:69:ab:9b:58: 77:ca:b3:18:81:61:6b:b5:3b:0a:c4:28:88:59:3f:28:81:fa: 5a:01:84:0a:ab:3b:d2:0b:ac:73:be:00:cc:d4:48:9a:6d:39: 06:da:b4:50:3d:81:d7:d7:a5:bb:07:16:73:fc:d2:60:b6:d0: e2:25:b6:8c:6c:15:74:f5:2b:f5:95:0e:93:3a:bc:69:5f:c5: 10:25:89:e7:98:49:57:1e:f8:11:98:a8:30:6d:eb:ea:9e:c1: dc:ca:66:f4:c0:b2:9b:85:64:0b:6b:c6:35:44:cf:68:02:a4: f2:e6:92:19:fa:a4:62:8d:0d:ab:bd:6a:47:bc:53:a4:66:71: 98:4d:de:46:42:4c:ca:48:d5:fd:27:e0:56:72:5d:ee:39:6c: a6:02:5f:fa:c6:16:e0:f2:ae:50:34:fa:3a:40:11:bd:4c:45: e2:52:24:8a:b3:bc:db:1b:3b:ac:f2:b0:c9:55:7e:ee:09:15: 62:d3:65:e0:8b:6c:a4:8d:83:76:7f:f0:6b:ae:a7:12:cd:46: 43:73:60:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnULX3xH1n8H4dGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yzk4YTU4NjEtNjYwZC00MjhlLWI3MDUtNGMzMDlhNjQ0ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHzowaJkTZiWAscZdT7mV9AmSD39kvxNZh6u Tlx0gg7F8HqdsC/nUK/OwS4nQTvZ8n4PRIukkKHF7WYPzwoxRsQYw+uvH6UaTAiv 4M2U9/8p0GNnydQa8KsUjjWZ36RMX9eeTSFmiMciC1aTqt4ImOCCLRSF6aRzuFvK TNBk7eH0DCc+ygt01w3YBUMBF+GxXmVKydXSyZoiZH5yU6QrBVje93OpJ6S2sJ9b 59PoUYn1sg2D4+383cdYWUDV5pudJ3aoPUIq9dXNfYbMPbC/YT/EQTNy7u0R0mBF Q2mYnPoTzwaj/0wC30K3RpXJbICvV/Th0rOw+Gspm3lCNgjqDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1pF4Y4ucNFyaJZDcPcggpKDROZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2FjZDBkZjEtNWNkZi0z NzY5LTk4YmUtMjU1ZTFkNWRlNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+qH67fyuvLeMRSS/S8OTVyeEQN5TZoMH39fUwVxdMBvTCSnLmfucZc WQjlzWKRe6fNaaubWHfKsxiBYWu1OwrEKIhZPyiB+loBhAqrO9ILrHO+AMzUSJpt OQbatFA9gdfXpbsHFnP80mC20OIltoxsFXT1K/WVDpM6vGlfxRAlieeYSVce+BGY qDBt6+qewdzKZvTAspuFZAtrxjVEz2gCpPLmkhn6pGKNDau9ake8U6RmcZhN3kZC TMpI1f0n4FZyXe45bKYCX/rGFuDyrlA0+jpAEb1MReJSJIqzvNsbO6zysMlVfu4J FWLTZeCLbKSNg3Z/8GuupxLNRkNzYPE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:07:54 2026 by rpki-client