$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa File: caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa (raw, json) Hash identifier: eaj2IG5cgFHnYYxmeVIElDt3y7vRsW3z7NtL67OTyTU= Subject key identifier: 3E:5F:C8:D0:EB:77:0D:A3:65:D3:F4:6D:A7:4C:46:7B:4F:63:D6:BE Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584D7E35287E137B949DED70B404 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 23316 IP address blocks: 72.37.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:28:7e:13:7b:94:9d:ed:70:b4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=55d2f6bc-7330-4b12-9432-a048600e7e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:26:ed:1c:04:b4:fe:2c:e4:73:a1:1e:f2: 1c:52:a0:51:71:da:6c:be:0d:48:cc:3a:8b:82:57: c7:04:fc:a5:16:2f:76:e6:4f:6c:3d:8f:12:6e:c1: c9:89:4e:34:4e:7d:e8:26:df:4b:b2:96:b9:d7:e5: 72:10:8e:dd:26:5a:b3:4c:e0:d3:57:a8:65:48:2d: d9:08:f0:a7:e8:3e:9b:ee:20:47:4d:95:a6:dc:da: bd:27:b2:cb:3c:66:d6:5b:ec:e7:bf:2d:51:72:27: b5:9b:3d:45:bb:12:be:86:8f:6d:a7:47:68:38:c4: 78:e5:63:0d:00:15:92:8f:5b:2b:04:15:cb:d1:39: ff:a8:8d:ad:c9:81:ca:eb:49:39:b9:d8:bb:df:06: ab:97:54:98:f5:02:12:f4:46:7e:19:e2:ed:93:d7: 9b:77:f4:95:92:77:92:80:74:96:e8:16:3e:16:0a: 30:cb:e7:e1:03:26:7f:d2:85:9e:45:34:40:ee:dc: ea:ca:ee:c1:1e:93:72:30:ab:19:71:d0:14:bb:de: c4:c2:f7:03:6a:4e:23:7c:99:29:4d:6d:38:fc:8a: d0:ab:57:3d:ae:85:9f:d4:df:ae:13:ed:25:c0:3c: 68:a6:08:86:0c:a0:6d:a2:92:3a:d6:a1:06:c4:af: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5F:C8:D0:EB:77:0D:A3:65:D3:F4:6D:A7:4C:46:7B:4F:63:D6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:a2:4a:6c:d8:f7:76:dd:dd:81:30:a8:eb:e3:33:fd:56: 7e:4d:55:b5:d7:ac:81:69:2d:a8:c3:19:a0:fc:17:20:5f:f9: 12:16:69:70:6c:1d:dc:76:10:d5:03:e2:29:dd:2e:f8:6f:a9: 6b:79:49:70:49:39:cb:23:d0:7d:b9:f9:ee:88:35:56:cf:e1: b1:61:25:df:f0:17:7d:33:6f:7c:2b:01:43:15:b3:a3:8a:2b: 93:7f:8a:2f:06:9e:f2:17:62:d4:be:a3:7e:36:e8:04:d9:d9: f2:6b:21:67:dc:19:5b:44:b6:cb:64:b8:b3:e7:b0:ad:75:f2: 08:9c:01:d5:e0:4b:01:06:ea:6e:49:ac:86:71:c8:71:02:4f: c9:69:3c:80:61:65:d2:f6:ea:64:75:6f:00:aa:e0:5a:e4:3b: 08:45:47:ac:1c:db:17:80:85:51:3f:34:5d:eb:17:13:7b:54: 5e:23:76:76:8d:41:34:40:26:f4:10:4d:69:03:0e:c8:90:bd: 5b:38:4a:c4:70:97:a1:45:7b:34:99:f0:77:8f:c9:a5:b9:3d: 8e:7a:33:c0:83:2b:da:ba:11:1b:d9:06:aa:0f:d2:ea:5d:01: 19:10:4e:12:20:76:db:91:fe:8b:57:28:a1:46:84:51:ce:a8: 67:05:49:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1+NSh+E3uUne1wtAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk NTVkMmY2YmMtNzMzMC00YjEyLTk0MzItYTA0ODYwMGU3ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Im7RwEtP4s5HOhHvIcUqBRcdpsvg1IzDqL glfHBPylFi925k9sPY8SbsHJiU40Tn3oJt9Lspa51+VyEI7dJlqzTODTV6hlSC3Z CPCn6D6b7iBHTZWm3Nq9J7LLPGbWW+znvy1Rcie1mz1FuxK+ho9tp0doOMR45WMN ABWSj1srBBXL0Tn/qI2tyYHK60k5udi73warl1SY9QIS9EZ+GeLtk9ebd/SVkneS gHSW6BY+Fgowy+fhAyZ/0oWeRTRA7tzqyu7BHpNyMKsZcdAUu97EwvcDak4jfJkp TW04/IrQq1c9roWf1N+uE+0lwDxopgiGDKBtopI61qEGxK8mJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5fyNDrdw2jZdP0badMRntPY9a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvY2FhZDIxYWEtZGFhNC0z N2IyLWFkNzYtMWUyZTliMWEwMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Wokps2Pd23d2BMKjr4zP9Vn5NVbXXrIFpLajDGaD8FyBf+RIWaXBs Hdx2ENUD4indLvhvqWt5SXBJOcsj0H25+e6INVbP4bFhJd/wF30zb3wrAUMVs6OK K5N/ii8GnvIXYtS+o3426ATZ2fJrIWfcGVtEtstkuLPnsK118gicAdXgSwEG6m5J rIZxyHECT8lpPIBhZdL26mR1bwCq4FrkOwhFR6wc2xeAhVE/NF3rFxN7VF4jdnaN QTRAJvQQTWkDDsiQvVs4SsRwl6FFezSZ8HePyaW5PY56M8CDK9q6ERvZBqoP0upd ARkQThIgdtuR/otXKKFGhFHOqGcFSeU= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:12 2026 by rpki-client