$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0095da09-7f2d-3add-b980-8d9af933a6ce.roa File: 0095da09-7f2d-3add-b980-8d9af933a6ce.roa (raw, json) Hash identifier: 4UVKsfB1zw7cfClCGX1b2d0YleyqJoSj3fq6UalRJN8= Subject key identifier: 94:35:72:47:94:A4:30:D8:11:91:D3:55:5E:FE:AD:23:DF:50:F9:50 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584F7352CCF1B7B1BD73DAC53900 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0095da09-7f2d-3add-b980-8d9af933a6ce.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 142240 IP address blocks: 72.14.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:cc:f1:b7:b1:bd:73:da:c5:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=83e3e61b-93e6-4851-926d-acd2da4cc96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:c2:0f:08:a8:20:92:c0:f6:2c:38:a5:8b: c5:53:e0:ec:4b:a9:fc:64:72:1b:08:7f:dc:7a:f5: 28:5f:fb:dd:c3:05:29:77:2f:e9:45:33:3b:de:8b: 2f:41:48:53:69:bb:30:52:5c:9a:24:10:3f:93:1e: b6:2a:a7:1c:30:dc:fb:6a:0f:c2:07:71:b4:b6:c8: 52:30:dc:aa:a8:b0:31:99:c2:e9:87:f5:21:24:9f: 57:4c:a8:4c:d5:5b:80:13:b3:7e:95:d9:76:6d:fe: da:86:c6:28:e1:c5:6c:b1:45:85:b3:bc:3a:49:15: 86:f8:66:8d:f6:9b:9a:72:28:bc:38:13:f6:63:13: c5:34:8b:50:1b:63:19:1a:af:96:4f:35:e7:60:a6: 39:82:d9:c0:9c:4c:98:80:45:63:f4:a1:db:3f:09: 65:a2:d1:74:73:c7:ea:9e:93:d4:8c:97:b6:32:f3: 52:81:81:b5:8a:1e:79:02:f0:9b:20:e7:7d:c5:40: 7c:03:01:15:01:e0:98:c7:ef:f4:3e:5b:c9:57:0b: d3:ee:c1:19:9e:77:47:dd:36:1c:36:91:56:8a:d2: ea:10:a8:53:e5:87:10:d3:4e:b3:44:23:cd:7c:98: 46:88:41:bf:48:54:6f:a6:ac:dd:fa:10:0f:7d:4c: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:72:47:94:A4:30:D8:11:91:D3:55:5E:FE:AD:23:DF:50:F9:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0095da09-7f2d-3add-b980-8d9af933a6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e0:ff:a9:37:4c:37:68:9b:4c:92:47:23:50:84:0c:af:aa: 66:38:f8:e0:06:4f:e1:02:99:7c:c8:89:ea:ec:9c:68:3a:15: 80:5d:68:65:95:f4:b8:fa:d6:d3:84:a5:96:61:4a:bd:bc:0a: 59:80:ce:98:7b:39:ad:c9:e4:8e:82:19:00:98:85:57:4f:3b: 66:1d:8e:57:b9:3e:32:28:aa:1b:b6:1a:f1:30:4a:bb:e2:0b: c0:22:3d:8d:36:59:77:6e:8d:37:08:4a:98:13:41:0b:d7:43: 2f:64:08:e2:22:39:16:c0:17:71:2f:f6:4c:2c:02:12:f7:a2: 84:ae:3b:aa:55:64:ce:b1:86:9e:3b:30:a1:da:6d:c1:6f:14: db:98:bd:a4:df:65:96:f1:c9:fc:ce:1f:f6:b3:39:be:c8:ef: 09:2a:66:ef:d8:97:70:fc:58:1e:58:fa:77:de:d4:f4:50:f7: 2d:0c:8b:d8:06:9b:62:9c:ce:94:00:c3:ce:c5:aa:39:07:8d: 50:51:86:56:63:9d:b1:c1:18:2e:85:95:1b:73:7c:56:a0:ea: e3:50:12:dc:bc:a3:d7:96:7a:e3:1a:a4:b4:b6:06:34:96:61: 39:cc:ea:fa:df:37:3f:7b:8e:a6:fe:27:65:ba:84:14:8d:06: f3:1f:34:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUszxt7G9c9rFOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk ODNlM2U2MWItOTNlNi00ODUxLTkyNmQtYWNkMmRhNGNjOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKzCDwioIJLA9iw4pYvFU+DsS6n8ZHIbCH/c evUoX/vdwwUpdy/pRTM73osvQUhTabswUlyaJBA/kx62KqccMNz7ag/CB3G0tshS MNyqqLAxmcLph/UhJJ9XTKhM1VuAE7N+ldl2bf7ahsYo4cVssUWFs7w6SRWG+GaN 9puacii8OBP2YxPFNItQG2MZGq+WTzXnYKY5gtnAnEyYgEVj9KHbPwllotF0c8fq npPUjJe2MvNSgYG1ih55AvCbIOd9xUB8AwEVAeCYx+/0PlvJVwvT7sEZnndH3TYc NpFWitLqEKhT5YcQ006zRCPNfJhGiEG/SFRvpqzd+hAPfUzOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ1ckeUpDDYEZHTVV7+rSPfUPlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMDA5NWRhMDktN2YyZC0z YWRkLWI5ODAtOGQ5YWY5MzNhNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjg/6k3TDdom0ySRyNQhAyvqmY4+OAGT+ECmXzIiersnGg6FYBdaGWV 9Lj61tOEpZZhSr28ClmAzph7Oa3J5I6CGQCYhVdPO2Ydjle5PjIoqhu2GvEwSrvi C8AiPY02WXdujTcISpgTQQvXQy9kCOIiORbAF3Ev9kwsAhL3ooSuO6pVZM6xhp47 MKHabcFvFNuYvaTfZZbxyfzOH/azOb7I7wkqZu/Yl3D8WB5Y+nfe1PRQ9y0Mi9gG m2KczpQAw87FqjkHjVBRhlZjnbHBGC6FlRtzfFag6uNQEty8o9eWeuMapLS2BjSW YTnM6vrfNz97jqb+J2W6hBSNBvMfNEg= -----END CERTIFICATE-----Generated at Wed Oct 28 14:25:01 2026 by rpki-client