$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f3587f3-3a2e-389b-afa9-03416157a17d.roa File: 1f3587f3-3a2e-389b-afa9-03416157a17d.roa (raw, json) Hash identifier: W1MCsvrtw/kjgAs0PQOT9f2qt6TmGk/ckF8vMA2usQ0= Subject key identifier: DD:EB:52:64:0E:06:D5:49:5F:F0:AB:F0:F7:27:F4:9E:5E:FC:70:F8 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E15E4A33182F1792FC58BCAC0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f3587f3-3a2e-389b-afa9-03416157a17d.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 20001 IP address blocks: 72.14.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:a3:31:82:f1:79:2f:c5:8b:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=4b51bc77-487e-4367-9844-fc9d303236fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:2d:1c:4e:c8:bf:d7:35:ef:0e:4e:d7:03: 85:64:bf:44:0b:20:b7:84:a1:a1:fa:86:10:a2:24: 87:84:05:d9:09:d3:75:63:15:94:98:58:ad:ba:e2: aa:26:d8:3d:b8:fe:ed:d2:23:30:59:58:0e:ee:21: b6:66:59:45:48:9c:6b:1e:ef:52:20:e7:b8:6c:e3: 32:7d:75:d1:2b:fb:93:43:d0:34:4e:1f:fa:4b:b1: 8b:3e:82:57:11:c3:b3:cc:a9:42:2a:b1:08:39:4e: 87:3f:7f:14:a0:5e:95:95:b1:dd:db:31:81:1c:0b: af:37:91:06:81:a5:7b:fd:45:0a:6b:23:e8:37:e7: a5:dc:e3:e2:6c:9c:19:4f:36:87:78:d1:0a:0e:9a: 97:fe:51:42:b8:1d:64:98:e1:82:3f:5b:6f:d5:4a: e6:5b:f8:23:d5:52:1e:52:3a:43:71:5e:cd:05:b5: 88:c1:a6:5d:5c:9e:02:73:1b:24:fa:27:ac:55:95: bf:c8:7d:d2:20:85:02:d2:cd:85:0e:b5:c7:84:79: a4:d7:40:38:ae:de:82:a0:6a:cf:be:5e:78:9b:49: 0d:3e:11:0e:d4:4a:72:7a:ef:49:e1:44:c8:36:ff: 8c:7a:d6:05:49:d9:1c:7b:ab:7d:f0:f7:88:61:54: 09:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:52:64:0E:06:D5:49:5F:F0:AB:F0:F7:27:F4:9E:5E:FC:70:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f3587f3-3a2e-389b-afa9-03416157a17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 72.14.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:41:b0:9a:ba:48:8d:ed:39:25:5f:14:b6:1d:d9:95:f5:17: 8b:15:eb:4c:24:d3:43:17:40:3b:8c:00:79:37:60:cc:f5:11: 58:61:a7:b5:1d:b8:fb:a3:93:8e:c9:c6:19:6e:f7:51:96:3b: bf:34:d9:3c:d4:82:8a:1d:97:55:80:cf:05:8c:ed:7e:10:1a: 43:09:78:a6:f0:26:70:f3:2f:7c:fe:cb:ff:9f:d6:cd:0b:ad: 3e:8b:2a:ad:c2:0a:df:1d:c1:7d:2f:0c:0d:ad:6d:5e:6e:a1: 79:bd:b1:cc:ba:74:3e:b0:6f:9a:e3:8d:1a:14:7b:79:f2:af: e6:ef:4e:90:09:0b:20:eb:f2:f7:26:83:47:3a:56:d0:06:99: 01:37:29:3c:88:85:2f:02:60:10:88:b0:6d:79:19:e8:18:8d: b9:69:29:02:7e:be:07:89:a9:eb:41:90:8b:2b:c0:ba:f0:d7: 65:3c:e6:5c:05:26:fe:87:6e:c4:58:9b:f7:56:f5:44:e4:37: 4d:9b:9f:f0:9c:1e:b8:e1:32:46:5c:fe:91:8c:9d:fa:3c:a1: 3d:3e:12:61:ed:81:d2:b7:27:41:08:b0:f2:d4:2d:fc:c0:84: 26:e0:18:c1:be:db:dd:7f:e0:bf:b0:42:96:00:83:ed:ec:0d: 2e:6b:5d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5KMxgvF5L8WLysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk NGI1MWJjNzctNDg3ZS00MzY3LTk4NDQtZmM5ZDMwMzIzNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhYtHE7Iv9c17w5O1wOFZL9ECyC3hKGh+oYQ oiSHhAXZCdN1YxWUmFituuKqJtg9uP7t0iMwWVgO7iG2ZllFSJxrHu9SIOe4bOMy fXXRK/uTQ9A0Th/6S7GLPoJXEcOzzKlCKrEIOU6HP38UoF6VlbHd2zGBHAuvN5EG gaV7/UUKayPoN+el3OPibJwZTzaHeNEKDpqX/lFCuB1kmOGCP1tv1UrmW/gj1VIe UjpDcV7NBbWIwaZdXJ4Ccxsk+iesVZW/yH3SIIUC0s2FDrXHhHmk10A4rt6CoGrP vl54m0kNPhEO1Epyeu9J4UTINv+MetYFSdkce6t98PeIYVQJjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3rUmQOBtVJX/Cr8Pcn9J5e/HD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWYzNTg3ZjMtM2EyZS0z ODliLWFmYTktMDM0MTYxNTdhMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA5dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdBsJq6SI3tOSVfFLYd2ZX1F4sV60wk00MXQDuMAHk3YMz1EVhhp7Ud uPujk47Jxhlu91GWO7802TzUgoodl1WAzwWM7X4QGkMJeKbwJnDzL3z+y/+f1s0L rT6LKq3CCt8dwX0vDA2tbV5uoXm9scy6dD6wb5rjjRoUe3nyr+bvTpAJCyDr8vcm g0c6VtAGmQE3KTyIhS8CYBCIsG15GegYjblpKQJ+vgeJqetBkIsrwLrw12U85lwF Jv6HbsRYm/dW9UTkN02bn/CcHrjhMkZc/pGMnfo8oT0+EmHtgdK3J0EIsPLULfzA hCbgGMG+291/4L+wQpYAg+3sDS5rXVE= -----END CERTIFICATE-----Generated at Sat Jun 13 20:05:05 2026 by rpki-client