$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa File: ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa (raw, json) Hash identifier: XeW54iPCoEd8wPVZAwE0Y+fhD1K/H9K4pFluWmkOo+E= Subject key identifier: 99:2B:33:3C:21:41:35:1F:3D:97:93:95:CF:BB:F4:C4:42:7C:6D:43 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584D7F9A905E7C3D1C6C80C8E100 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19940 IP address blocks: 72.0.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:90:5e:7c:3d:1c:6c:80:c8:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=b2ba3e9a-8450-480b-aa3f-7690d1028511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:1a:bf:be:08:ba:82:31:c6:e2:bb:11:9d: 96:35:85:c5:c7:81:e2:14:65:64:f4:fa:4d:94:91: 98:df:b2:50:34:d3:4f:27:93:6b:a7:3e:8e:24:8e: fe:d0:b1:aa:34:12:e7:20:69:d7:fb:25:4b:ad:96: 4e:97:49:91:59:8a:a2:62:06:c1:77:bd:fd:08:8b: f7:ce:67:ba:95:75:25:0c:46:29:7b:be:72:fd:c0: ef:c6:c3:21:0b:56:b2:c2:7f:53:43:14:4d:1c:70: ef:11:07:11:c8:b2:6f:dd:81:0f:07:85:6c:f9:d1: b0:6c:c0:33:dc:36:f6:19:0c:52:dd:da:ad:7e:36: 0f:a9:ea:a4:6e:74:c2:6f:d0:f3:5c:c1:72:9b:1d: fd:46:c7:ab:90:a6:e0:e5:89:aa:b5:b4:a0:28:a2: 35:23:2d:b3:8d:c4:fa:0e:ec:c6:38:5d:af:f5:53: ab:95:e4:97:dd:97:94:d9:7f:41:3f:09:7c:e9:87: fd:d8:d1:fd:a3:46:db:3a:96:1a:85:06:48:15:7e: f0:cf:4d:9a:68:8e:8d:b6:51:71:34:45:8e:89:c6: f7:31:58:e7:e1:dd:28:30:b6:45:01:c5:9f:6d:ba: 98:be:82:d2:d5:13:00:93:49:4c:d0:79:1e:4a:71: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2B:33:3C:21:41:35:1F:3D:97:93:95:CF:BB:F4:C4:42:7C:6D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ed7d102b-c595-3d65-96b5-2e2b904a4cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 72.0.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:94:25:87:54:ca:d8:f1:29:a1:91:75:20:d1:9a:fe:0e:42: 4a:13:15:1f:a7:d4:9c:dd:6e:00:35:e7:1f:11:f5:2a:1d:c5: f2:3d:fc:a4:72:c7:7b:b3:fa:b1:b5:1e:03:88:1e:bf:e5:66: 3c:58:81:9f:eb:95:91:21:52:23:a1:a2:f0:c2:2c:4b:27:b1: fe:e4:c4:e1:61:19:ed:bf:bd:19:7e:d8:a3:fa:b7:8b:38:09: c4:65:e8:9e:cc:80:34:a7:f8:57:b3:5e:2b:cc:27:e8:f3:45: 50:d4:19:98:2a:67:2e:90:e6:88:9c:1c:a8:8e:69:60:9f:13: 19:ea:72:4a:04:e2:c3:23:80:ea:1d:38:e9:37:d1:1d:f3:2c: 3f:44:f9:57:d2:64:4f:fc:73:2a:a0:fc:90:ab:c2:b4:50:0b: 0f:aa:de:4f:9b:cf:1c:ed:da:bc:50:49:53:e8:af:7f:37:08: 18:cd:e8:f9:53:ea:e4:7c:77:df:6c:0e:2f:52:fe:fd:91:82: 93:be:5b:b3:fa:7b:d1:13:4d:cd:5c:1e:ae:46:d0:5a:35:de: 29:69:da:2d:1d:be:82:6a:1c:28:cf:ec:14:a2:64:8d:e0:74: dc:52:d3:ab:99:88:14:50:9d:be:49:ec:c4:b9:2a:cc:76:62: 66:e6:0f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpBefD0cbIDI4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YjJiYTNlOWEtODQ1MC00ODBiLWFhM2YtNzY5MGQxMDI4NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOcav74IuoIxxuK7EZ2WNYXFx4HiFGVk9PpN lJGY37JQNNNPJ5Nrpz6OJI7+0LGqNBLnIGnX+yVLrZZOl0mRWYqiYgbBd739CIv3 zme6lXUlDEYpe75y/cDvxsMhC1aywn9TQxRNHHDvEQcRyLJv3YEPB4Vs+dGwbMAz 3Db2GQxS3dqtfjYPqeqkbnTCb9DzXMFymx39RserkKbg5YmqtbSgKKI1Iy2zjcT6 DuzGOF2v9VOrleSX3ZeU2X9BPwl86Yf92NH9o0bbOpYahQZIFX7wz02aaI6NtlFx NEWOicb3MVjn4d0oMLZFAcWfbbqYvoLS1RMAk0lM0HkeSnG/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkrMzwhQTUfPZeTlc+79MRCfG1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZWQ3ZDEwMmItYzU5NS0z ZDY1LTk2YjUtMmUyYjkwNGE0Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESADgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWUJYdUytjxKaGRdSDRmv4OQkoTFR+n1JzdbgA15x8R9SodxfI9/KRy x3uz+rG1HgOIHr/lZjxYgZ/rlZEhUiOhovDCLEsnsf7kxOFhGe2/vRl+2KP6t4s4 CcRl6J7MgDSn+FezXivMJ+jzRVDUGZgqZy6Q5oicHKiOaWCfExnqckoE4sMjgOod OOk30R3zLD9E+VfSZE/8cyqg/JCrwrRQCw+q3k+bzxzt2rxQSVPor383CBjN6PlT 6uR8d99sDi9S/v2RgpO+W7P6e9ETTc1cHq5G0Fo13ilp2i0dvoJqHCjP7BSiZI3g dNxS06uZiBRQnb5J7MS5Ksx2YmbmDz0= -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:09 2026 by rpki-client