$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa File: cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa (raw, json) Hash identifier: GtvZzqSXMc6msh2UWKBH2Jp67WWcpim32JVhj1TBREM= Subject key identifier: A4:13:35:6A:17:10:84:A0:A7:F2:18:6B:8F:CB:D8:15:6B:15:0C:AF Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584EA79CD8FE710216975EA86680 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14813 IP address blocks: 72.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:d8:fe:71:02:16:97:5e:a8:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=25fa14e1-ae30-43d3-add8-2813643a80dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:d4:7b:46:cf:a6:da:11:88:c2:a6:6d:3c: 27:b9:a6:e0:ea:1a:fe:72:8a:82:c7:97:1d:26:05: bc:39:a6:d4:ba:77:ac:91:ce:11:87:2b:ee:60:16: 8f:52:20:75:c1:55:72:02:91:9b:7a:30:c7:e0:03: 45:4e:5a:62:cc:4e:16:cb:99:4f:a1:a0:23:91:f5: 62:cd:34:8b:ff:1a:14:26:7d:2e:a6:a3:e3:c1:19: 72:33:ce:75:69:f0:23:84:9e:1e:b7:fa:80:9d:20: c9:84:f6:0b:cd:52:d0:05:b0:7d:29:b9:fe:b2:98: 8a:03:4d:11:95:ff:1e:75:d7:dd:b6:dc:fd:ab:bd: 28:05:67:8e:75:48:e4:8b:61:eb:67:bd:05:d6:2a: 65:98:79:22:d9:d8:0c:78:5c:3e:55:ec:d7:40:ca: b9:e4:e7:d8:9d:7d:12:cc:3a:64:8b:4c:16:9f:20: 60:8c:54:f8:4f:68:fa:fd:f3:1e:e0:12:b3:18:2d: 05:b1:de:59:e3:ed:4a:b3:7f:0f:fb:42:82:f6:2e: d1:03:0e:1a:9d:75:40:57:20:41:52:4a:8e:a0:53: 67:a5:1c:0d:12:e5:cf:13:06:f3:af:e4:6f:94:e4: a6:69:07:5e:0e:60:56:89:39:cf:ab:c7:dd:bb:51: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:13:35:6A:17:10:84:A0:A7:F2:18:6B:8F:CB:D8:15:6B:15:0C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/cb4f9b9f-6446-3603-82b5-3ca3d80b40fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:86:08:4f:3b:cd:36:e3:52:5b:da:ca:16:e9:b0:d6:fa:34: c2:98:35:06:7d:df:b2:e3:9c:0f:a2:26:01:3f:84:2f:b8:cc: db:c4:84:23:f4:15:08:c3:bc:ea:48:c0:e2:1f:77:ba:e3:08: 27:88:5d:f5:42:99:2a:66:80:ae:46:ed:c8:17:ca:44:5b:9e: 51:dc:03:60:d7:57:93:b3:fd:b4:57:10:23:ac:f6:06:e0:f8: 7b:c9:f6:ee:13:0a:0a:c1:3c:b1:79:33:fb:36:95:27:9c:58: 3c:c2:5e:1b:d3:8c:0a:a7:09:35:15:e2:42:fa:28:36:59:ee: e6:f5:3e:79:dc:d5:24:8c:a6:0e:c2:7e:cf:8e:eb:69:df:ba: 84:17:5a:a8:68:2e:51:d6:f4:78:27:bb:3d:94:29:6b:f0:92: 30:cc:fe:22:75:4f:01:76:e0:10:a7:a0:1f:8c:40:e2:86:dc: ec:0d:fd:4f:41:f8:d5:14:18:ef:ba:9d:6a:98:93:f5:2a:34: ac:10:0a:e0:45:a4:62:4a:dd:11:2b:d7:21:6a:91:28:6c:1a: fa:e2:cf:73:25:e5:07:b5:2d:60:58:3a:d8:26:11:ab:54:b1: b0:0e:06:99:99:ca:14:9b:ce:bb:27:89:59:2c:d4:58:0b:e1: fd:42:45:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnNj+cQIWl16oZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjVmYTE0ZTEtYWUzMC00M2QzLWFkZDgtMjgxMzY0M2E4MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLzUe0bPptoRiMKmbTwnuabg6hr+coqCx5cd JgW8OabUuneskc4RhyvuYBaPUiB1wVVyApGbejDH4ANFTlpizE4Wy5lPoaAjkfVi zTSL/xoUJn0upqPjwRlyM851afAjhJ4et/qAnSDJhPYLzVLQBbB9Kbn+spiKA00R lf8eddfdttz9q70oBWeOdUjki2HrZ70F1iplmHki2dgMeFw+VezXQMq55OfYnX0S zDpki0wWnyBgjFT4T2j6/fMe4BKzGC0Fsd5Z4+1Ks38P+0KC9i7RAw4anXVAVyBB UkqOoFNnpRwNEuXPEwbzr+RvlOSmaQdeDmBWiTnPq8fdu1H6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQTNWoXEISgp/IYa4/L2BVrFQyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvY2I0ZjliOWYtNjQ0Ni0z NjAzLTgyYjUtM2NhM2Q4MGI0MGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSGCE87zTbjUlvayhbpsNb6NMKYNQZ937LjnA+iJgE/hC+4zNvEhCP0 FQjDvOpIwOIfd7rjCCeIXfVCmSpmgK5G7cgXykRbnlHcA2DXV5Oz/bRXECOs9gbg +HvJ9u4TCgrBPLF5M/s2lSecWDzCXhvTjAqnCTUV4kL6KDZZ7ub1Pnnc1SSMpg7C fs+O62nfuoQXWqhoLlHW9Hgnuz2UKWvwkjDM/iJ1TwF24BCnoB+MQOKG3OwN/U9B +NUUGO+6nWqYk/UqNKwQCuBFpGJK3REr1yFqkShsGvriz3Ml5Qe1LWBYOtgmEatU sbAOBpmZyhSbzrsniVks1FgL4f1CRUg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:19:49 2026 by rpki-client