$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: 0eehKC25T+if6TPbZWURdusyMe1vufVh3MdNH1wL/z8= Subject key identifier: 9C:68:71:73:6D:35:13:BA:26:C2:8F:D2:1C:5F:99:9D:AF:E5:AD:56 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584D86954B875480D7D0ED99DD00 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4b:87:54:80:d7:d0:ed:99:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=8829c434-a4b0-4d0a-a25f-824801fcf07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:55:48:87:a6:b7:ca:7c:86:39:e0:ae:72: 45:fc:90:a9:37:f8:98:7c:7c:33:d1:66:27:f9:85: b5:14:2d:7a:1d:c2:e4:83:8c:bf:f1:f1:24:31:bc: ab:3d:65:9d:ca:3f:0e:39:29:39:70:c9:64:d4:ad: dc:ac:b0:62:0c:f1:94:b8:70:45:2f:fb:be:c2:4c: 38:65:77:6a:01:4f:7c:e0:20:b6:eb:f5:6e:61:9f: 0b:b5:62:a7:03:2b:c6:08:2f:0e:f5:89:ad:dc:d6: 7b:2d:c8:77:d0:a7:a9:23:25:60:4f:04:7b:5c:35: 41:21:6e:7b:e2:6c:90:35:99:89:61:2e:58:67:aa: 7c:88:bb:cb:f7:05:21:89:cc:26:50:7c:58:93:8d: 39:f6:47:8c:fb:05:a4:7c:4b:e0:a6:22:46:e8:32: 28:88:cb:df:b3:65:b2:90:0f:0a:b8:15:27:6d:74: 4a:ec:ed:98:98:20:02:1b:2c:d0:2e:ad:0b:09:ef: 2c:fa:48:a7:25:72:68:ba:f0:dd:ab:af:72:50:7a: 26:96:d5:7d:a3:38:47:e7:15:d4:91:d4:a9:7a:42: 76:86:7d:33:93:9a:6d:d7:ec:b4:de:0f:16:64:43: dc:3b:11:4b:27:e4:9a:ab:5f:16:11:67:cf:5b:56: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:71:73:6D:35:13:BA:26:C2:8F:D2:1C:5F:99:9D:AF:E5:AD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7f:fe:d7:10:a6:fe:65:46:b6:17:e5:bf:34:38:8a:81:47: fa:d2:0e:b0:6f:8f:2e:22:a2:ae:1d:26:63:f1:92:a6:ea:f2: 9f:35:7a:ae:03:b8:10:fb:c6:02:42:1f:72:2b:9f:03:48:59: cd:e0:b0:98:0d:23:e1:1a:91:b0:4a:1d:b7:3d:50:07:26:31: 5c:03:cf:11:13:de:85:74:bb:92:a8:0f:f8:11:e7:95:d8:e4: 2b:49:28:48:21:41:59:ff:a8:ee:51:67:c5:a9:6c:33:52:0f: 9a:df:a7:8f:04:f6:cf:bf:15:a9:59:45:dc:e8:c8:1a:4c:11: 06:dc:d0:37:7a:0b:1e:d3:32:a3:23:49:72:01:77:2e:bc:8b: 70:dd:13:c8:61:34:94:fd:70:73:df:2c:10:b0:0f:81:97:08: 18:3c:37:c5:b5:ba:97:59:67:c4:33:dc:c8:e9:13:ae:d2:79: a5:c6:4d:7d:e3:67:6e:c1:46:fb:44:92:a5:a4:bd:32:97:78: 6c:35:10:5c:17:be:ab:b6:09:a2:3a:6a:e0:5d:e0:15:7f:cd: e8:22:69:e0:58:cc:f9:bb:af:8d:cf:a4:4d:ac:b5:b1:87:89: 9b:4b:e0:bc:14:bf:55:20:35:77:e1:75:86:5e:2e:6a:32:77: fd:3b:eb:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUuHVIDX0O2Z3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODgyOWM0MzQtYTRiMC00ZDBhLWEyNWYtODI0ODAxZmNmMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7BVSIemt8p8hjngrnJF/JCpN/iYfHwz0WYn +YW1FC16HcLkg4y/8fEkMbyrPWWdyj8OOSk5cMlk1K3crLBiDPGUuHBFL/u+wkw4 ZXdqAU984CC26/VuYZ8LtWKnAyvGCC8O9Ymt3NZ7Lch30KepIyVgTwR7XDVBIW57 4myQNZmJYS5YZ6p8iLvL9wUhicwmUHxYk4059keM+wWkfEvgpiJG6DIoiMvfs2Wy kA8KuBUnbXRK7O2YmCACGyzQLq0LCe8s+kinJXJouvDdq69yUHomltV9ozhH5xXU kdSpekJ2hn0zk5pt1+y03g8WZEPcOxFLJ+Saq18WEWfPW1bktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxocXNtNRO6JsKP0hxfmZ2v5a1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt//tcQpv5lRrYX5b80OIqBR/rSDrBvjy4ioq4dJmPxkqbq8p81eq4D uBD7xgJCH3IrnwNIWc3gsJgNI+EakbBKHbc9UAcmMVwDzxET3oV0u5KoD/gR55XY 5CtJKEghQVn/qO5RZ8WpbDNSD5rfp48E9s+/FalZRdzoyBpMEQbc0Dd6Cx7TMqMj SXIBdy68i3DdE8hhNJT9cHPfLBCwD4GXCBg8N8W1updZZ8Qz3MjpE67SeaXGTX3j Z27BRvtEkqWkvTKXeGw1EFwXvqu2CaI6auBd4BV/zegiaeBYzPm7r43PpE2stbGH iZtL4LwUv1UgNXfhdYZeLmoyd/0766Y= -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:48 2026 by rpki-client