$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa File: 1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa (raw, json) Hash identifier: FACpm9LehQN8TYrvErIT1XTK9FuRgWvUdDMBK+6FVY8= Subject key identifier: 7D:30:2D:44:6A:4C:B0:9D:5F:EA:3C:B4:BD:B0:48:14:CA:3F:61:8B Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584D746FDA7569563DFB2BC38800 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 401348 IP address blocks: 72.46.24.0/22 maxlen: 22 208.73.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:da:75:69:56:3d:fb:2b:c3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=de9fc93a-1a41-47ec-afb7-73316cb30a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:66:b4:d8:8b:58:a3:f3:f4:dd:39:88:36: bc:3f:92:14:f9:c9:97:ae:89:10:f9:27:3d:75:21: bb:7a:84:9d:23:5a:04:a4:3b:03:49:b1:26:bf:10: d7:5b:f8:31:99:cd:e5:a7:d1:03:ac:27:fc:7b:6a: 2a:a6:24:75:78:ce:7e:1e:da:67:d6:a3:6f:b4:ad: 34:3d:6c:f4:08:d9:1e:f9:13:97:19:bf:b4:da:af: 3c:4b:73:37:bf:04:9d:5c:d5:90:0c:7c:d0:cd:93: b9:1d:48:1a:bc:78:56:2a:fc:29:8b:e5:79:07:a7: d7:52:2a:be:d3:a8:b6:63:8b:28:73:4c:71:fa:b1: cc:e3:c3:0d:c1:cd:93:d2:12:e2:41:60:23:25:5d: 0e:11:aa:ee:19:0d:54:98:97:66:00:88:95:cd:44: 2b:65:c1:92:f8:f9:da:47:69:0e:29:fd:11:b9:22: 0f:32:08:09:1a:05:5a:e7:34:f7:2e:7a:ce:c0:14: 83:38:fc:5e:63:e4:d5:df:d3:47:8a:60:99:38:1e: 6c:b4:8b:fb:fc:84:5e:f4:7d:90:85:3f:06:6a:12: 54:09:b8:21:be:67:5d:d8:56:93:3e:2a:19:d2:f5: e5:20:04:26:56:ab:7d:0f:9c:f7:9c:65:45:c0:18: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:30:2D:44:6A:4C:B0:9D:5F:EA:3C:B4:BD:B0:48:14:CA:3F:61:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/1ce92d36-6714-3d18-bdef-e1251dfdce8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 72.46.24.0/22 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2d:46:9f:2c:b0:5b:1c:34:d4:ca:fe:60:e1:fc:53:f6:b3: 87:d1:08:42:e1:a1:bc:92:d9:85:0d:66:a2:f0:2f:b3:03:85: 9d:07:f2:e5:89:1d:0b:9a:17:42:d7:3a:7f:0d:67:a1:fb:03: 1e:2e:27:07:da:a0:3e:6e:00:8b:03:04:49:b3:6b:d2:a8:42: 09:8a:b2:6b:b2:c8:ea:d8:32:98:5f:f0:4e:79:33:fa:22:eb: 73:8a:2e:89:cc:4e:a3:9f:fb:16:99:d2:a1:a3:43:8b:44:fc: fd:d7:ae:2b:26:a6:a8:82:9a:5e:34:c9:3e:f4:81:f0:a5:a8: b0:78:ab:1f:cc:79:6b:c8:30:d5:6b:99:bd:80:30:89:24:24: 8f:ca:22:c2:4f:95:ca:3a:9a:cc:93:66:f1:6f:fd:bc:b1:f3: 8d:58:1a:04:7b:07:7d:72:c6:05:1b:44:ea:4d:f6:25:86:de: 9c:e5:77:29:79:23:01:9e:af:c1:7b:17:7f:1a:f4:29:78:33: 09:10:1d:0d:17:5b:55:89:84:c2:d1:29:0b:74:75:e1:cb:d3: fb:18:ab:8e:1e:94:30:ca:66:94:48:e7:7c:14:b0:39:25:aa: 40:ff:a7:b1:08:dc:86:9e:16:ca:bb:43:f4:af:4a:d8:e4:93: 1d:d0:02:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE10b9p1aVY9+yvDiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGU5ZmM5M2EtMWE0MS00N2VjLWFmYjctNzMzMTZjYjMwYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/xmtNiLWKPz9N05iDa8P5IU+cmXrokQ+Sc9 dSG7eoSdI1oEpDsDSbEmvxDXW/gxmc3lp9EDrCf8e2oqpiR1eM5+Htpn1qNvtK00 PWz0CNke+ROXGb+02q88S3M3vwSdXNWQDHzQzZO5HUgavHhWKvwpi+V5B6fXUiq+ 06i2Y4soc0xx+rHM48MNwc2T0hLiQWAjJV0OEaruGQ1UmJdmAIiVzUQrZcGS+Pna R2kOKf0RuSIPMggJGgVa5zT3LnrOwBSDOPxeY+TV39NHimCZOB5stIv7/IRe9H2Q hT8GahJUCbghvmdd2FaTPioZ0vXlIAQmVqt9D5z3nGVFwBjASwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH0wLURqTLCdX+o8tL2wSBTKP2GLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvMWNlOTJkMzYtNjcxNC0z ZDE4LWJkZWYtZTEyNTFkZmRjZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSC4YAwQC 0EnQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFctRp8ssFscNNTK/mDh/FP2s4fRCELhobyS2YUNZqLwL7MD hZ0H8uWJHQuaF0LXOn8NZ6H7Ax4uJwfaoD5uAIsDBEmza9KoQgmKsmuyyOrYMphf 8E55M/oi63OKLonMTqOf+xaZ0qGjQ4tE/P3XrismpqiCml40yT70gfClqLB4qx/M eWvIMNVrmb2AMIkkJI/KIsJPlco6msyTZvFv/byx841YGgR7B31yxgUbROpN9iWG 3pzldyl5IwGer8F7F38a9Cl4MwkQHQ0XW1WJhMLRKQt0deHL0/sYq44elDDKZpRI 53wUsDklqkD/p7EI3IaeFsq7Q/SvStjkkx3QAso= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:12 2026 by rpki-client