$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: cIs/NdSlrerObQJKp4lxNaJ15+/MEbYNQD2Kq7vx3ZQ= Subject key identifier: 80:75:36:41:83:40:A6:50:3E:20:FA:7B:B4:35:2C:85:B0:BB:F5:01 Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584D869545878625D09E45269420 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 9009 IP address blocks: 72.18.92.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:45:87:86:25:d0:9e:45:26:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=ebb52058-d13c-410c-8e45-9a7f5321cdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:88:09:3a:f3:64:a7:d9:b3:85:07:0d:07: dd:89:3a:b4:2d:23:69:b9:31:36:b4:3e:f7:56:87: a2:4f:39:22:ff:b4:4f:ef:d0:00:0b:f0:b2:de:4c: a6:0d:3d:fd:9a:d1:c6:ef:4b:5a:e2:59:81:c5:58: 1a:b1:7b:ac:d8:ff:8f:11:cd:b2:9e:9a:f7:03:0d: 61:11:97:83:ef:1f:89:91:29:9c:ce:9f:a3:a4:f6: 69:bb:05:6c:f0:79:cb:4a:a4:50:63:4c:c8:cc:99: a9:2e:f4:10:64:25:98:c8:0f:34:a4:32:80:03:ab: fd:ac:de:70:e8:bd:df:d2:7f:3f:0c:d7:c2:20:19: b6:f9:03:f9:fc:6c:89:15:79:84:12:dd:19:d2:e7: 90:ba:63:6b:23:a4:0c:c3:9b:bf:40:55:54:34:3c: b7:14:ca:1c:36:53:df:95:12:ac:b9:63:a8:15:d2: 75:f5:f8:b3:be:7e:73:06:66:1d:b0:1e:52:a6:b6: 4c:ba:33:7b:88:5b:e0:4e:b7:18:35:48:7a:a2:98: 36:5b:9b:2d:8e:08:e8:d3:06:de:c2:52:7a:4a:c2: 9a:3b:a4:37:61:86:76:60:de:1f:47:9c:19:dd:af: a7:b9:25:5f:e4:fa:92:aa:1e:cd:4f:12:ed:3b:a6: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:75:36:41:83:40:A6:50:3E:20:FA:7B:B4:35:2C:85:B0:BB:F5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:03:e2:35:bd:f6:f7:20:81:af:17:37:01:80:30:86:d8:b4: 64:a6:4e:73:5a:ff:9b:b5:49:d6:91:bd:2c:8c:b0:5d:be:06: f8:43:1b:1e:05:ee:6c:7a:6c:a1:d4:33:43:35:b3:07:b2:21: a3:3f:e7:c7:f5:5e:80:30:f8:91:41:c6:96:03:24:d5:b3:56: 48:83:60:b7:c7:31:9c:f4:67:0e:b4:cd:7c:40:ae:fe:e3:38: 44:38:9c:cd:07:27:d9:4a:35:04:cc:a5:42:2f:4e:de:29:81: b7:91:27:db:3f:63:fc:a8:28:da:68:4e:46:3c:31:3e:04:74: d4:e0:0b:68:c3:63:37:ef:e9:da:e2:ae:29:74:75:fa:8f:e8: 16:f9:04:41:fd:c3:d0:95:7f:08:7d:b2:1b:00:17:27:eb:47: eb:a7:7f:b1:41:ed:29:ed:70:fc:75:85:9e:7d:df:7e:e9:41: 52:9e:17:64:41:bf:a0:46:00:ea:7b:1f:63:89:30:46:86:92: 53:01:a3:02:21:5e:55:a8:7d:f6:c7:38:a8:5f:d3:eb:0a:f2: e9:34:6f:8b:22:c8:ec:22:ed:82:cd:90:f0:22:e9:cd:e2:62: 48:69:b8:e0:03:67:a5:d8:86:fd:18:f1:10:f6:b2:af:d9:b0: cd:18:fa:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUWHhiXQnkUmlCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZWJiNTIwNTgtZDEzYy00MTBjLThlNDUtOWE3ZjUzMjFjZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL6ICTrzZKfZs4UHDQfdiTq0LSNpuTE2tD73 VoeiTzki/7RP79AAC/Cy3kymDT39mtHG70ta4lmBxVgasXus2P+PEc2ynpr3Aw1h EZeD7x+JkSmczp+jpPZpuwVs8HnLSqRQY0zIzJmpLvQQZCWYyA80pDKAA6v9rN5w 6L3f0n8/DNfCIBm2+QP5/GyJFXmEEt0Z0ueQumNrI6QMw5u/QFVUNDy3FMocNlPf lRKsuWOoFdJ19fizvn5zBmYdsB5SprZMujN7iFvgTrcYNUh6opg2W5stjgjo0wbe wlJ6SsKaO6Q3YYZ2YN4fR5wZ3a+nuSVf5PqSqh7NTxLtO6au1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB1NkGDQKZQPiD6e7Q1LIWwu/UBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUD4jW99vcgga8XNwGAMIbYtGSmTnNa/5u1SdaRvSyMsF2+BvhDGx4F 7mx6bKHUM0M1sweyIaM/58f1XoAw+JFBxpYDJNWzVkiDYLfHMZz0Zw60zXxArv7j OEQ4nM0HJ9lKNQTMpUIvTt4pgbeRJ9s/Y/yoKNpoTkY8MT4EdNTgC2jDYzfv6dri ril0dfqP6Bb5BEH9w9CVfwh9shsAFyfrR+unf7FB7SntcPx1hZ59337pQVKeF2RB v6BGAOp7H2OJMEaGklMBowIhXlWoffbHOKhf0+sK8uk0b4siyOwi7YLNkPAi6c3i YkhpuOADZ6XYhv0Y8RD2sq/ZsM0Y+uM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:42 2026 by rpki-client