$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa File: aaf529f7-7b6d-3be9-978f-88e20d77046a.roa (raw, json) Hash identifier: 4H6sjtUap8sjfgDIzBV/qhYZPJbgwEbitfVIeefNiM0= Subject key identifier: FB:5B:59:CF:3F:C1:8C:15:E3:30:E1:26:D8:B1:94:E5:29:AB:87:84 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584D7E3534946952A930269EBD40 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 23316 IP address blocks: 72.37.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:34:94:69:52:a9:30:26:9e:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=6b7b0222-7c99-419e-9e97-51c3ae892b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:88:b8:11:b7:82:71:c3:c7:a5:22:7e:37: 7c:ba:0e:31:a5:f0:10:bb:8f:64:88:6e:37:71:67: bd:ef:22:3b:78:f4:6b:5f:ab:ef:0a:8b:9e:be:c6: 4a:50:33:58:70:7f:88:4d:e6:40:e9:54:5c:53:bf: 38:9a:fd:c6:d5:79:87:f4:0b:b5:0b:aa:dc:b5:29: 27:72:f4:7b:4d:57:83:f5:bf:e1:44:b6:9e:7e:4c: 9c:ce:95:a0:63:0f:a0:a8:bb:2f:11:7a:15:e4:c8: ff:b3:f6:f4:f0:4f:6e:1a:a6:cd:43:a0:9a:16:1b: be:6a:5f:10:57:85:6d:0a:fd:ed:e3:2a:c0:c9:99: 4f:15:44:c9:90:5d:49:d9:2c:43:f4:3d:bc:d8:e5: 61:54:6b:ed:f4:bf:2d:1a:44:59:34:2f:a7:56:67: 5c:49:79:4e:34:05:98:15:b5:c7:39:0e:67:15:ff: bc:63:b2:28:84:6e:60:06:60:6e:3f:3d:f6:b4:5a: fa:5d:25:bf:cd:2d:51:d7:67:97:03:6a:f8:7c:0c: 5c:41:a2:80:b1:cf:95:bb:3e:e9:e8:4e:f5:db:b6: dd:e7:0c:54:2e:db:46:ba:87:4c:0b:18:a4:ba:b6: c7:48:6e:b0:fe:25:65:bb:e8:c3:ca:65:d0:14:6a: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5B:59:CF:3F:C1:8C:15:E3:30:E1:26:D8:B1:94:E5:29:AB:87:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f8:3f:24:7e:04:03:e2:46:02:03:e4:94:a9:42:d5:f7:ef: 31:f0:d0:49:55:cc:b5:9a:54:e9:e8:f9:fa:5b:48:2f:6a:87: 1e:7c:b9:40:22:84:0a:0b:b6:09:9e:cb:70:78:97:ce:8a:56: 2b:44:d8:4f:52:20:57:1f:77:c5:04:f9:50:ea:f2:d6:84:d3: bc:00:2d:c6:d7:6b:1b:62:d7:32:c9:04:b3:90:74:1e:a9:2f: bf:d8:21:90:31:61:6f:76:fe:5e:07:06:22:67:54:ae:88:ca: 09:f4:ec:ee:4c:06:68:f0:fa:ec:6a:d5:96:f8:4a:4d:aa:c8: 0d:d7:22:5e:57:ac:69:b6:1d:92:ae:81:69:64:e3:76:4f:cc: d5:b9:97:66:28:00:07:44:51:5a:28:ec:06:20:18:0a:78:ba: b2:a3:ea:68:bd:76:ec:d4:2d:ac:60:d7:b9:3f:37:4b:33:b2: 7c:7a:54:d5:9c:74:a4:e5:17:9f:18:b5:43:09:7d:1f:3a:41: cd:d6:4c:62:3f:11:a1:55:f1:b5:40:f1:9d:d6:4f:c3:a5:3c: 02:5c:67:2e:be:63:07:9d:55:a4:97:67:9c:4e:33:f3:d6:44: 10:90:86:b4:c9:b5:e9:cd:5d:27:83:d6:1e:60:d5:09:e2:ce: 67:f8:9a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NTSUaVKpMCaevUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk NmI3YjAyMjItN2M5OS00MTllLTllOTctNTFjM2FlODkyYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR2IuBG3gnHDx6Uifjd8ug4xpfAQu49kiG43 cWe97yI7ePRrX6vvCouevsZKUDNYcH+ITeZA6VRcU784mv3G1XmH9Au1C6rctSkn cvR7TVeD9b/hRLaefkyczpWgYw+gqLsvEXoV5Mj/s/b08E9uGqbNQ6CaFhu+al8Q V4VtCv3t4yrAyZlPFUTJkF1J2SxD9D282OVhVGvt9L8tGkRZNC+nVmdcSXlONAWY FbXHOQ5nFf+8Y7IohG5gBmBuPz32tFr6XSW/zS1R12eXA2r4fAxcQaKAsc+Vuz7p 6E7127bd5wxULttGuodMCxikurbHSG6w/iVlu+jDymXQFGodLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtbWc8/wYwV4zDhJtixlOUpq4eEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYWFmNTI5ZjctN2I2ZC0z YmU5LTk3OGYtODhlMjBkNzcwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET4PyR+BAPiRgID5JSpQtX37zHw0ElVzLWaVOno+fpbSC9qhx58uUAi hAoLtgmey3B4l86KVitE2E9SIFcfd8UE+VDq8taE07wALcbXaxti1zLJBLOQdB6p L7/YIZAxYW92/l4HBiJnVK6Iygn07O5MBmjw+uxq1Zb4Sk2qyA3XIl5XrGm2HZKu gWlk43ZPzNW5l2YoAAdEUVoo7AYgGAp4urKj6mi9duzULaxg17k/N0szsnx6VNWc dKTlF58YtUMJfR86Qc3WTGI/EaFV8bVA8Z3WT8OlPAJcZy6+YwedVaSXZ5xOM/PW RBCQhrTJtenNXSeD1h5g1Qnizmf4mjI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:26:01 2026 by rpki-client