$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json) Hash identifier: RtqM7Id/rb6D0KvrRX99P/b96j2/PvoRcE4iHMn8sDc= Subject key identifier: 62:99:6F:7C:30:83:63:81:01:A4:0A:EC:8B:21:83:C3:F3:89:26:04 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584CA5F6F9CDFC1EC7C64BBE8D80 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 32524 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f9:cd:fc:1e:c7:c6:4b:be:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=07f2f714-2a80-4f64-bb67-f959b56fd8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:d7:84:6b:6e:46:0b:fd:6a:c1:4c:dc:2e: 1e:72:9e:1b:69:4c:e4:d5:9c:9b:99:2b:0e:e8:36: 32:73:c9:8d:73:53:78:8d:b8:3f:7f:5d:15:67:2c: a2:90:d0:e1:2d:ca:d1:f0:e9:bb:1d:62:cb:a2:a1: 21:45:e3:b6:23:ab:d4:d9:55:57:7e:7e:68:fc:9c: ba:e3:77:e9:37:65:7c:a5:d6:04:2c:b5:61:2b:33: 44:87:28:2c:e7:74:a2:ce:28:81:c0:57:fd:0e:68: 5f:e9:68:6f:5a:e7:cb:b5:94:32:2b:98:ea:b7:30: 0d:d6:2a:83:b3:92:ae:4c:ca:38:65:85:da:a5:78: 88:62:59:ee:f5:b1:77:1c:17:10:10:13:cb:5b:69: 47:8f:19:37:87:8a:ad:bf:4c:46:e5:65:73:72:05: a4:58:1f:e6:02:fb:9c:5d:ec:06:a7:0e:1e:c9:96: 2c:61:e8:bc:70:3d:53:34:b8:c0:e2:17:10:86:44: 3d:48:58:63:b3:04:3b:29:c0:f7:b0:e7:be:7d:9e: 83:97:c4:3d:fc:2d:43:d1:e8:35:69:64:df:c0:72: be:65:c8:78:ab:8c:1d:40:48:3b:ff:13:f1:43:bd: a2:ee:6f:1f:c9:40:e4:e2:bf:7f:6b:79:ae:48:68: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:99:6F:7C:30:83:63:81:01:A4:0A:EC:8B:21:83:C3:F3:89:26:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:aa:a8:72:f7:e6:ff:c2:4d:03:8f:3e:05:e9:bc:2b:60:dd: df:38:aa:07:5e:02:da:10:d8:54:ca:c7:5a:55:7e:16:b5:7a: f7:80:8d:bd:25:7c:f0:20:42:8d:4d:d3:35:9a:aa:ed:b3:19: be:6d:d2:f3:e3:81:2a:24:31:ee:d1:a2:26:ea:83:3f:3a:93: 0a:8e:81:74:b6:df:5a:af:18:1e:fb:10:af:06:a2:46:e3:f9: 81:37:fd:b8:f8:cb:45:b9:0a:d2:c3:e6:3e:78:06:09:2e:ad: 02:4a:29:be:56:56:97:c5:ef:a1:05:7c:87:48:77:0e:aa:c1: 90:d3:19:10:da:c3:56:b8:bd:36:92:e3:cb:46:66:9e:27:5e: 89:b2:aa:40:8f:c9:7e:a2:d0:5a:81:96:55:c6:6e:ab:72:10: fd:1e:50:46:dc:3b:b2:fa:c0:07:a7:38:aa:f2:15:8b:1e:4b: c1:c4:2c:d5:cc:2f:e9:67:bd:f9:c5:cf:58:30:75:6f:c2:8c: 3b:cb:33:d9:6e:5c:74:dd:4c:16:68:ed:cf:eb:2b:1d:ca:72: 75:db:c5:e4:8e:8c:8f:f0:4c:e6:e8:fa:24:30:72:20:af:fd: 08:c4:a5:d7:c0:3b:dc:42:82:13:b0:ec:1c:a0:89:8a:4c:4d: 05:5b:ea:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vnN/B7Hxku+jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MDdmMmY3MTQtMmE4MC00ZjY0LWJiNjctZjk1OWI1NmZkOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVbXhGtuRgv9asFM3C4ecp4baUzk1ZybmSsO 6DYyc8mNc1N4jbg/f10VZyyikNDhLcrR8Om7HWLLoqEhReO2I6vU2VVXfn5o/Jy6 43fpN2V8pdYELLVhKzNEhygs53SiziiBwFf9Dmhf6WhvWufLtZQyK5jqtzAN1iqD s5KuTMo4ZYXapXiIYlnu9bF3HBcQEBPLW2lHjxk3h4qtv0xG5WVzcgWkWB/mAvuc XewGpw4eyZYsYei8cD1TNLjA4hcQhkQ9SFhjswQ7KcD3sOe+fZ6Dl8Q9/C1D0eg1 aWTfwHK+Zch4q4wdQEg7/xPxQ72i7m8fyUDk4r9/a3muSGgXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKZb3wwg2OBAaQK7Ishg8PziSYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+qqHL35v/CTQOPPgXpvCtg3d84qgdeAtoQ2FTKx1pVfha1eveAjb0l fPAgQo1N0zWaqu2zGb5t0vPjgSokMe7Roibqgz86kwqOgXS231qvGB77EK8Gokbj +YE3/bj4y0W5CtLD5j54BgkurQJKKb5WVpfF76EFfIdIdw6qwZDTGRDaw1a4vTaS 48tGZp4nXomyqkCPyX6i0FqBllXGbqtyEP0eUEbcO7L6wAenOKryFYseS8HELNXM L+lnvfnFz1gwdW/CjDvLM9luXHTdTBZo7c/rKx3KcnXbxeSOjI/wTObo+iQwciCv /QjEpdfAO9xCghOw7BygiYpMTQVb6og= -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:08 2026 by rpki-client