$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdaf465a-b576-3b7f-ae04-453c7d2179b7.roa File: cdaf465a-b576-3b7f-ae04-453c7d2179b7.roa (raw, json) Hash identifier: eigHoQXf1botIz8nlT8HgzbWcEtl/UdSrmjCUe06YpY= Subject key identifier: 5E:88:7F:FD:1C:54:1F:0D:CC:95:AB:40:13:24:0B:7C:FF:45:9A:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0ED2298C79E1FF483D4C36E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdaf465a-b576-3b7f-ae04-453c7d2179b7.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 16838 IP address blocks: 72.13.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:29:8c:79:e1:ff:48:3d:4c:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=f3b5fa5a-9784-4075-8e76-3d06203e7dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:78:c6:99:c6:1c:fa:75:b4:26:86:20:02: a9:29:23:56:82:45:77:7d:51:95:fb:90:dc:22:1b: fa:21:e2:d9:ae:14:af:25:8e:79:e9:82:be:c8:e9: 41:a5:fe:64:c8:db:ac:c8:4f:5c:3f:64:a6:f2:7d: f5:db:32:47:b1:03:ee:c3:a4:ec:c0:3c:fd:94:dd: 0d:1a:a3:48:e9:68:b0:de:63:ea:c8:5b:09:3d:d7: 0b:59:c1:9d:68:f3:e8:b8:83:ec:f1:53:ee:17:4e: 3b:63:54:09:a9:01:27:67:66:14:a8:15:86:cf:cf: d8:e1:ab:d5:52:52:ac:77:4d:44:71:5e:50:03:37: 64:e6:16:3e:26:e2:fd:b4:e3:4c:13:8d:4b:df:92: fe:a5:1d:e1:a1:ac:15:b7:67:4a:28:94:10:2a:63: ee:01:91:4c:5a:d5:67:3b:58:82:03:bc:0a:f7:ad: fb:98:41:90:b1:6e:49:fd:7a:0d:f4:c6:76:da:a7: bb:ba:04:82:7b:85:50:aa:b0:bb:cd:ed:e8:ae:10: 47:55:b8:eb:49:c2:70:52:e2:29:fb:92:f6:e8:29: 26:4f:bb:e7:2b:30:00:87:83:3d:0e:a4:72:e5:44: d9:41:a7:ca:20:ce:27:2d:75:80:32:bd:df:bd:15: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:88:7F:FD:1C:54:1F:0D:CC:95:AB:40:13:24:0B:7C:FF:45:9A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdaf465a-b576-3b7f-ae04-453c7d2179b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b3:40:2b:26:0f:fb:27:4f:65:b0:51:9a:8a:48:e7:09:f9: fb:9f:29:30:4a:1f:de:2d:13:6d:41:a6:80:1f:db:86:4b:92: 5a:1a:ec:74:97:ef:7f:64:c3:a0:9b:b2:20:af:8a:d2:9d:64: 30:08:13:dd:29:4f:c3:01:d1:8a:0e:d8:46:7e:b2:be:60:f0: de:6c:9a:70:3a:81:ff:25:3c:c3:19:7d:02:8e:ba:47:cf:7c: 11:18:62:bf:60:91:75:a8:0c:08:64:1d:ce:7b:ac:03:7a:17: ba:ae:60:67:ff:63:77:98:a5:dd:93:ce:3b:d9:4a:21:55:a9: 35:85:61:be:bf:97:14:ef:3f:45:1d:c7:9c:7f:7c:2c:f3:89: ab:87:ae:f2:e7:e8:1e:e5:67:36:a9:fd:7a:7c:e0:1d:ff:2b: ec:d7:e2:44:1c:69:2b:34:cc:e8:b1:cc:d3:2c:ae:ec:d3:92: 25:e8:89:1c:91:53:fa:6c:3c:90:e8:ff:0d:a8:b2:c7:bc:81: a0:2c:9d:b3:68:58:6a:97:2b:d4:d6:c3:ae:95:df:bb:c9:25: f6:27:8f:be:84:28:0d:df:14:3f:34:ce:5a:02:1a:8a:83:49: bb:73:f2:12:a9:22:7c:87:1f:ce:27:1b:8e:b9:a9:23:af:bb: 26:47:27:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0imMeeH/SD1MNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjNiNWZhNWEtOTc4NC00MDc1LThlNzYtM2QwNjIwM2U3ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaF4xpnGHPp1tCaGIAKpKSNWgkV3fVGV+5Dc Ihv6IeLZrhSvJY556YK+yOlBpf5kyNusyE9cP2Sm8n312zJHsQPuw6TswDz9lN0N GqNI6Wiw3mPqyFsJPdcLWcGdaPPouIPs8VPuF047Y1QJqQEnZ2YUqBWGz8/Y4avV UlKsd01EcV5QAzdk5hY+JuL9tONME41L35L+pR3hoawVt2dKKJQQKmPuAZFMWtVn O1iCA7wK9637mEGQsW5J/XoN9MZ22qe7ugSCe4VQqrC7ze3orhBHVbjrScJwUuIp +5L26CkmT7vnKzAAh4M9DqRy5UTZQafKIM4nLXWAMr3fvRVMQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6If/0cVB8NzJWrQBMkC3z/RZrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RhZjQ2NWEtYjU3Ni0z YjdmLWFlMDQtNDUzYzdkMjE3OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHizQCsmD/snT2WwUZqKSOcJ+fufKTBKH94tE21BpoAf24ZLkloa7HSX 739kw6CbsiCvitKdZDAIE90pT8MB0YoO2EZ+sr5g8N5smnA6gf8lPMMZfQKOukfP fBEYYr9gkXWoDAhkHc57rAN6F7quYGf/Y3eYpd2TzjvZSiFVqTWFYb6/lxTvP0Ud x5x/fCzziauHrvLn6B7lZzap/Xp84B3/K+zX4kQcaSs0zOixzNMsruzTkiXoiRyR U/psPJDo/w2osse8gaAsnbNoWGqXK9TWw66V37vJJfYnj76EKA3fFD80zloCGoqD Sbtz8hKpInyHH84nG465qSOvuyZHJzQ= -----END CERTIFICATE-----Generated at Tue Sep 22 14:46:37 2026 by rpki-client