$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa File: 1c02e37a-f047-32b4-8323-635ce419cb78.roa (raw, json) Hash identifier: tMc3lXuGOE52mf1fRRWcF7zCkmhRPfzJd+3wVrJiXNI= Subject key identifier: B7:9C:6A:98:3E:21:5C:A4:63:2C:90:48:D1:9D:8B:F6:0F:67:E5:47 Certificate issuer: /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Certificate serial: 010D0C9F4328584D86957F2EC2114E8FB0930CA5 Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 400072 IP address blocks: 72.22.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7f:2e:c2:11:4e:8f:b0:93:0c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5422ac5f-f969-4edc-ac2c-2e095be3f7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:44:59:76:28:d7:7c:8e:2e:7c:9f:cc:45: 8f:f9:ca:e6:84:64:48:fe:3d:e6:9c:e7:69:bd:90: 7c:0b:91:f2:1c:fa:9d:38:a4:c3:b2:1d:9d:92:5c: 66:3a:2a:bd:1d:8c:39:fa:f9:9d:81:fb:8b:8f:d5: 92:dc:5f:fd:84:c8:66:17:7b:08:45:8b:63:1c:e6: 08:de:c8:4d:3c:ed:0a:99:e5:2c:64:c8:73:78:f0: 58:83:06:d3:7f:25:f1:05:b1:bf:89:27:bc:85:0e: 11:2c:08:34:50:62:5d:50:e2:f6:c5:46:de:41:9e: a1:7d:35:ed:0f:e9:a2:63:30:34:fb:ee:20:b9:3f: 1b:51:f2:b4:24:b3:2c:40:73:38:24:39:34:03:2c: ad:76:73:c4:4e:c2:a1:bb:6d:fa:33:df:63:58:c9: 14:6b:b2:93:14:b8:31:da:f9:09:ed:a5:8f:06:f6: 19:49:9f:63:31:15:6b:72:08:1c:9d:49:b7:3e:76: 70:67:5a:95:39:b6:c7:45:d5:f4:5d:6b:5f:52:e9: ae:25:3f:3c:ac:3c:78:47:56:55:f9:44:19:fc:86: 6b:ef:c8:0a:61:e2:e9:9a:a0:2e:03:e4:79:bc:cd: c5:e8:8f:68:bf:c9:d8:05:43:61:35:52:7a:4a:78: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:6A:98:3E:21:5C:A4:63:2C:90:48:D1:9D:8B:F6:0F:67:E5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/1c02e37a-f047-32b4-8323-635ce419cb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl X509v3 Authority Key Identifier: keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer sbgp-ipAddrBlock: critical IPv4: 72.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6b:74:31:92:c3:c8:f1:ab:c3:66:2b:dc:49:fb:25:ed:5a: 62:d0:c7:9e:69:f2:64:2b:aa:d1:b0:40:af:a0:ca:85:70:55: 42:be:89:32:0b:1f:a1:17:24:dc:7e:76:8d:28:1c:d0:24:db: cc:de:ad:a1:dc:7f:0b:7b:17:24:4d:59:b5:a7:b4:26:3f:ed: 1d:b3:be:38:0c:55:df:ae:a6:0a:47:9c:a7:4b:7f:3d:81:2c: b7:07:9d:85:ca:90:24:75:91:69:5b:83:93:2c:51:81:7c:88: d5:e0:03:fa:40:67:5f:27:4b:cc:cf:ee:85:72:5a:a0:01:9e: 9f:84:62:83:24:db:e6:cb:7b:9c:4f:45:4c:d1:4a:63:fc:1c: df:90:0d:59:e9:65:7b:fe:f5:fc:5a:b6:75:26:b6:0d:b1:a8: 3c:ba:9e:38:2e:7c:a8:7c:f0:29:02:59:51:5a:6b:21:58:5e: ae:c3:d4:f2:cd:8f:3c:b0:a9:e8:c9:e4:6c:ca:83:ba:e6:46: 65:eb:72:b7:c0:ab:c0:50:af:3c:04:c5:db:0c:a8:5f:53:29: 5c:a2:3f:0b:80:0f:59:18:6f:d8:88:8e:99:05:67:53:e8:2a: 7d:ec:64:d6:f5:a2:32:6c:02:4b:3d:be:df:0d:ce:c3:e9:17: 54:ca:7b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlX8uwhFOj7CTDKUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj NDYwMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NTQyMmFjNWYtZjk2OS00ZWRjLWFjMmMtMmUwOTViZTNmN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW5EWXYo13yOLnyfzEWP+crmhGRI/j3mnOdp vZB8C5HyHPqdOKTDsh2dklxmOiq9HYw5+vmdgfuLj9WS3F/9hMhmF3sIRYtjHOYI 3shNPO0KmeUsZMhzePBYgwbTfyXxBbG/iSe8hQ4RLAg0UGJdUOL2xUbeQZ6hfTXt D+miYzA0++4guT8bUfK0JLMsQHM4JDk0AyytdnPETsKhu236M99jWMkUa7KTFLgx 2vkJ7aWPBvYZSZ9jMRVrcggcnUm3PnZwZ1qVObbHRdX0XWtfUumuJT88rDx4R1ZV +UQZ/IZr78gKYeLpmqAuA+R5vM3F6I9ov8nYBUNhNVJ6SniS2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLecapg+IVykYyyQSNGdi/YPZ+VHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvMWMwMmUzN2EtZjA0Ny0z MmI0LTgzMjMtNjM1Y2U0MTljYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0 MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1 YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2 N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1rdDGSw8jxq8NmK9xJ+yXtWmLQx55p8mQrqtGwQK+gyoVwVUK+iTIL H6EXJNx+do0oHNAk28zeraHcfwt7FyRNWbWntCY/7R2zvjgMVd+upgpHnKdLfz2B LLcHnYXKkCR1kWlbg5MsUYF8iNXgA/pAZ18nS8zP7oVyWqABnp+EYoMk2+bLe5xP RUzRSmP8HN+QDVnpZXv+9fxatnUmtg2xqDy6njgufKh88CkCWVFaayFYXq7D1PLN jzywqejJ5GzKg7rmRmXrcrfAq8BQrzwExdsMqF9TKVyiPwuAD1kYb9iIjpkFZ1Po Kn3sZNb1ojJsAks9vt8NzsPpF1TKe3A= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:27 2026 by rpki-client