$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa File: b890a850-9125-3f77-b34a-714f6fb5e273.roa (raw, json) Hash identifier: 45+rmvsfrkbWDQrckVvV/LrRb0QKt/Wmo0pom6PcaO0= Subject key identifier: 06:87:07:5F:F7:79:6D:C1:72:CE:0A:6E:4C:84:74:14:A7:3F:0D:51 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584D75E90AA76B7792CEE5D39D00 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa Signing time: Fri 10 Apr 2026 13:40:42 +0000 ROA not before: Fri 10 Apr 2026 13:40:42 +0000 ROA not after: Thu 09 Jul 2026 13:40:42 +0000 asID: 151373 IP address blocks: 72.37.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:e9:0a:a7:6b:77:92:ce:e5:d3:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Apr 10 13:40:42 2026 GMT Not After : Jul 9 13:40:42 2026 GMT Subject: CN=0cde6065-65b6-4fd7-9955-9d5376f9aa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:fb:d5:6b:d5:3f:63:b6:7a:37:21:59:9c: db:21:00:10:2d:79:ac:ed:58:d5:5c:90:92:7d:13: 3b:cf:51:ff:81:50:34:59:a9:24:fb:15:45:29:b6: e6:a1:c9:2d:65:27:46:35:df:18:34:f8:f4:58:db: 69:92:28:f5:d8:c5:ee:d6:e2:f1:1a:2d:40:c0:59: 1a:ad:46:f4:79:60:17:67:d5:6f:e9:68:50:7d:e7: 2e:7b:9d:f1:73:ed:89:73:db:03:9c:15:40:18:ae: 6d:7f:72:96:45:40:54:9c:65:ad:cf:3a:3d:1c:16: 7d:c7:45:5f:06:67:7b:73:4c:4e:4a:b0:c6:d3:ae: da:d7:ef:d7:7b:8d:ce:88:5c:dd:78:17:23:e6:85: 08:d8:ff:79:54:9a:d0:a3:ed:79:e0:d2:c8:50:03: d7:64:13:b6:51:80:da:1f:0b:b9:c1:c2:6a:9f:2f: 02:15:e9:a5:85:d9:31:d1:ca:be:83:6d:a1:c7:36: 83:8c:a4:c0:9c:95:f9:c1:30:2f:ef:aa:da:1b:ab: 80:be:e2:07:48:9e:9e:90:71:b9:82:24:83:f5:41: 59:26:ff:50:ed:b6:9d:36:a0:99:63:68:ef:14:2d: b5:87:af:28:ac:37:0e:78:7d:b0:db:61:99:a4:5d: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:87:07:5F:F7:79:6D:C1:72:CE:0A:6E:4C:84:74:14:A7:3F:0D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b890a850-9125-3f77-b34a-714f6fb5e273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:56:62:ba:26:d3:27:f8:5c:de:fa:ad:65:fa:dc:f0:1f:a7: de:aa:ff:96:de:1a:25:5b:98:b9:25:68:52:ba:0d:7f:f8:75: 67:44:83:da:a6:b3:50:06:f0:34:80:3a:98:5d:45:e2:46:78: 07:34:47:1c:47:93:d0:df:67:a7:8b:21:70:86:dd:9b:4e:85: 9b:e9:46:84:5e:aa:20:2d:d9:a6:de:35:b4:bb:c2:ba:88:40: 31:f3:58:ed:27:81:f1:0a:e5:a8:22:f3:e9:91:8a:fc:20:36: 08:dc:94:7e:80:96:c5:12:cd:9a:72:73:e7:9e:be:69:08:7e: 37:6f:e5:c9:12:a5:ec:b8:cb:1e:a2:af:15:bb:65:62:32:23: b1:7e:07:9c:c4:72:8b:a6:34:4e:fa:96:80:90:57:38:39:07: 55:a4:1e:65:ed:d3:31:bf:19:ba:8f:af:fe:60:71:aa:30:87: cb:c3:53:80:5f:48:af:5a:3d:c7:8a:4b:a1:11:54:2e:27:7b: 6e:2f:dd:ff:b8:88:e7:83:ad:6b:11:a3:59:a6:88:0e:45:5a: f5:99:35:1e:bf:b3:f1:c8:7b:79:e0:14:96:1d:f6:ac:62:a3: db:20:96:aa:06:c2:91:a8:d7:cc:e2:74:79:ae:5f:3f:06:41: fa:ab:f1:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE116Qqna3eSzuXTnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDQxMDEzNDA0MloXDTI2MDcwOTEzNDA0MlowLzEtMCsGA1UEAxMk MGNkZTYwNjUtNjViNi00ZmQ3LTk5NTUtOWQ1Mzc2ZjlhYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFr71WvVP2O2ejchWZzbIQAQLXms7VjVXJCS fRM7z1H/gVA0Wakk+xVFKbbmocktZSdGNd8YNPj0WNtpkij12MXu1uLxGi1AwFka rUb0eWAXZ9Vv6WhQfecue53xc+2Jc9sDnBVAGK5tf3KWRUBUnGWtzzo9HBZ9x0Vf Bmd7c0xOSrDG067a1+/Xe43OiFzdeBcj5oUI2P95VJrQo+154NLIUAPXZBO2UYDa Hwu5wcJqny8CFemlhdkx0cq+g22hxzaDjKTAnJX5wTAv76raG6uAvuIHSJ6ekHG5 giSD9UFZJv9Q7badNqCZY2jvFC21h68orDcOeH2w22GZpF37AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaHB1/3eW3Bcs4KbkyEdBSnPw1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYjg5MGE4NTAtOTEyNS0z Zjc3LWIzNGEtNzE0ZjZmYjVlMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNWYrom0yf4XN76rWX63PAfp96q/5beGiVbmLklaFK6DX/4dWdEg9qm s1AG8DSAOphdReJGeAc0RxxHk9DfZ6eLIXCG3ZtOhZvpRoReqiAt2abeNbS7wrqI QDHzWO0ngfEK5agi8+mRivwgNgjclH6AlsUSzZpyc+eevmkIfjdv5ckSpey4yx6i rxW7ZWIyI7F+B5zEcoumNE76loCQVzg5B1WkHmXt0zG/GbqPr/5gcaowh8vDU4Bf SK9aPceKS6ERVC4ne24v3f+4iOeDrWsRo1mmiA5FWvWZNR6/s/HIe3ngFJYd9qxi o9sglqoGwpGo18zidHmuXz8GQfqr8W4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:28:06 2026 by rpki-client