$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa File: 079c6c1e-7cea-39de-b468-9dc26c56722f.roa (raw, json) Hash identifier: 2C7OTC5lyYljd9EZoW/Y1usQa/46d1eEhAJbcqPdxFU= Subject key identifier: 8D:74:A6:78:17:02:CF:BC:5D:28:E6:51:7D:FF:9E:D9:52:4A:99:A6 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584D6AAA7F1D9416270C3B9AB740 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 16557 IP address blocks: 72.21.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:7f:1d:94:16:27:0c:3b:9a:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=112115a4-9cc5-4a00-8b65-c95cc31d2277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:f9:c6:b7:ab:71:14:f2:7d:3a:56:e1:bb: 59:97:50:c8:c4:e9:0e:6a:83:6a:90:f7:f7:3f:a6: 1c:a5:38:e9:6b:92:b3:4c:1d:e3:66:0b:3a:35:6d: e2:8c:3c:94:09:16:f7:ed:f3:cb:dd:19:0b:9f:38: d0:8b:4c:d9:5b:9b:32:ae:1d:0c:10:c8:15:26:29: 03:6d:5b:61:fc:59:2d:b6:12:52:f2:27:d6:76:ca: 3f:eb:64:64:92:49:49:ad:f6:1a:99:86:71:64:1b: f8:76:8d:06:df:3b:31:1c:8e:c3:f9:a6:2d:53:fa: 65:c4:40:18:d2:bd:3c:fb:5f:37:88:a1:02:5b:eb: b5:5a:e1:24:25:03:aa:50:ca:2b:55:5d:39:cd:78: 50:60:c1:27:e0:a1:ea:14:c2:93:bd:c7:15:42:59: 3c:16:d7:d9:26:db:d6:7d:d3:c5:ba:a3:d3:3c:72: dd:3d:50:09:7b:45:23:d0:f5:88:81:16:45:b8:08: c2:5f:77:7c:e8:88:7b:2c:f9:78:db:fb:98:42:3a: eb:46:bf:2b:42:6e:6a:4d:6f:49:8a:50:dc:03:63: 5d:d4:32:f2:32:24:16:2d:4c:bd:43:b2:c5:84:d6: 79:34:67:55:27:7d:3f:7c:9f:62:3d:ac:ac:65:f7: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:A6:78:17:02:CF:BC:5D:28:E6:51:7D:FF:9E:D9:52:4A:99:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:79:f3:f2:f6:86:dd:9d:eb:87:ab:f8:dd:aa:78:02:03:68: d9:33:1b:90:db:f8:04:f8:2e:a2:5d:33:23:e4:9c:c3:37:27: a1:44:d4:0f:c0:c5:8f:3e:f3:50:56:d7:3c:2e:26:87:ec:ad: 2f:7e:a8:72:24:82:77:d5:15:c1:db:f2:87:12:df:03:0c:4c: 54:c7:c6:cf:ba:cc:51:bd:d5:ba:02:b6:89:b3:58:0c:df:c8: 71:fb:92:5a:1a:e5:f7:aa:2e:73:3e:99:2d:32:cb:e0:06:02: 85:ed:eb:ae:d5:f1:38:b3:99:00:96:d6:11:97:7b:86:83:81: 1a:db:2f:7b:3c:a5:2b:88:08:d4:24:ae:fa:de:0b:ea:37:2d: c9:13:8e:86:29:34:e2:61:78:77:bb:44:fb:2a:44:55:90:1a: 47:0f:d3:44:41:0c:7e:56:28:b4:b7:96:df:4b:d3:d5:1b:59: 0d:6c:d6:09:4d:c8:cf:8c:9b:c6:f1:18:33:49:2a:20:95:05: 93:b1:35:9d:4b:2f:ae:d8:af:27:19:f5:d2:6c:92:b7:65:1c: 7b:3e:3f:9a:8f:1e:0d:b0:a3:e1:2a:2b:f2:3a:4a:1a:33:77: 26:5d:2a:a9:0a:44:16:b8:e2:f2:b1:e8:be:bf:13:31:b7:67: 55:c6:d0:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqn8dlBYnDDuat0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MTEyMTE1YTQtOWNjNS00YTAwLThiNjUtYzk1Y2MzMWQyMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLH5xrercRTyfTpW4btZl1DIxOkOaoNqkPf3 P6YcpTjpa5KzTB3jZgs6NW3ijDyUCRb37fPL3RkLnzjQi0zZW5syrh0MEMgVJikD bVth/FktthJS8ifWdso/62RkkklJrfYamYZxZBv4do0G3zsxHI7D+aYtU/plxEAY 0r08+183iKECW+u1WuEkJQOqUMorVV05zXhQYMEn4KHqFMKTvccVQlk8FtfZJtvW fdPFuqPTPHLdPVAJe0Uj0PWIgRZFuAjCX3d86Ih7LPl42/uYQjrrRr8rQm5qTW9J ilDcA2Nd1DLyMiQWLUy9Q7LFhNZ5NGdVJ30/fJ9iPaysZfdaxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI10pngXAs+8XSjmUX3/ntlSSpmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDc5YzZjMWUtN2NlYS0z OWRlLWI0NjgtOWRjMjZjNTY3MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt58/L2ht2d64er+N2qeAIDaNkzG5Db+AT4LqJdMyPknMM3J6FE1A/A xY8+81BW1zwuJofsrS9+qHIkgnfVFcHb8ocS3wMMTFTHxs+6zFG91boCtomzWAzf yHH7kloa5feqLnM+mS0yy+AGAoXt667V8TizmQCW1hGXe4aDgRrbL3s8pSuICNQk rvreC+o3LckTjoYpNOJheHe7RPsqRFWQGkcP00RBDH5WKLS3lt9L09UbWQ1s1glN yM+Mm8bxGDNJKiCVBZOxNZ1LL67YrycZ9dJskrdlHHs+P5qPHg2wo+EqK/I6Shoz dyZdKqkKRBa44vKx6L6/EzG3Z1XG0MA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:16 2026 by rpki-client