$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa File: 7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa (raw, json) Hash identifier: yTBSE/S4L/+iWScDd7rGgtZ45fpHYW5BCbS97I/gUQo= Subject key identifier: D8:9C:45:D3:CF:FF:58:27:5D:1D:B5:CA:2F:2B:D6:12:00:A5:56:00 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584F8C72F3FE87824041C4CC8F80 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa Signing time: Mon 19 Oct 2026 01:00:12 +0000 ROA not before: Mon 19 Oct 2026 01:00:12 +0000 ROA not after: Sun 17 Jan 2027 02:00:12 +0000 asID: 401362 IP address blocks: 72.14.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8c:72:f3:fe:87:82:40:41:c4:cc:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Oct 19 01:00:12 2026 GMT Not After : Jan 17 02:00:12 2027 GMT Subject: CN=41e0bf3a-672d-4f1d-80be-d0697352321c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:dc:c7:a2:2a:9d:30:e9:a1:76:de:54:a9: cc:e2:a5:e3:96:07:47:bf:93:cd:b5:42:66:7b:11: 3f:df:f5:4c:fd:63:78:2b:b1:5e:b0:86:9d:5e:57: a1:b2:dd:9d:cf:f8:c3:05:b2:6e:80:61:ee:d2:bd: 8d:20:d6:af:43:e1:c6:99:88:27:50:72:de:a2:71: 8d:85:1d:68:6f:35:06:ed:ec:ee:23:7b:5b:9f:0c: 2c:82:29:30:c2:d1:f7:92:dc:f4:fb:9e:77:28:b6: ed:b9:bb:f1:f7:26:5b:fb:d8:69:61:e0:0c:d9:19: b8:25:36:80:bb:e2:b0:dd:66:64:dc:50:f0:c6:1c: 7d:52:08:1b:9b:5f:30:f5:7c:da:c9:ba:cd:e7:ab: 2e:3e:b4:46:77:56:b3:65:88:df:42:01:15:59:07: 7c:3f:cd:3a:7f:60:91:41:54:58:f5:8b:b9:8c:e9: 0b:cc:9a:c0:72:e1:98:9a:54:e1:27:6a:dc:aa:2b: 23:09:f6:a2:42:23:ef:da:50:9a:39:42:86:fe:f4: c9:48:38:f2:8a:91:51:66:25:bb:50:7f:37:09:a3: 61:ad:64:b6:87:0b:41:7d:09:5e:e9:cb:aa:5a:be: bb:6c:3c:47:06:dd:a9:62:ae:94:9f:f7:79:ed:ce: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9C:45:D3:CF:FF:58:27:5D:1D:B5:CA:2F:2B:D6:12:00:A5:56:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/7dbf6e1d-e3a1-3740-b908-2321f8ac4fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:10:07:2c:06:e9:93:e2:ea:a3:b8:b1:1e:34:04:8e:96:d2: 11:18:47:2c:5a:5b:db:03:90:a4:84:f4:75:03:c0:88:34:38: 13:5c:bf:49:ba:36:d1:cb:ce:05:14:b8:25:29:79:42:c8:68: cc:81:ad:0a:0e:5a:dc:c6:22:4d:b9:4a:a9:f8:a1:4a:ca:c7: b2:d0:72:3d:f6:89:f7:54:14:07:6c:6f:fa:b6:3b:4f:43:ca: 6d:99:cf:41:e2:e1:27:c7:3d:3a:ef:23:84:17:a8:82:70:e6: fe:de:9d:9e:e9:9c:2d:43:83:18:c7:d1:07:a0:45:35:a3:8f: 84:90:bf:37:33:c1:e2:40:a5:7b:fb:f2:b0:b0:2c:4f:69:6e: 2e:6a:40:f2:47:c9:2c:78:d9:a1:0f:6f:74:ae:db:ab:2e:e5: 47:6a:21:1f:c7:af:12:28:16:b1:b4:3a:77:83:1f:ae:24:13: 92:ac:e2:fe:26:18:9b:08:aa:2c:aa:fd:1b:99:3f:20:85:81: 2f:e2:9c:e9:fe:e4:ee:f8:98:c7:b9:27:9f:25:9b:b0:16:c0: 5b:22:44:bc:2f:e5:f4:c0:a5:bd:95:6b:fd:bd:40:63:ed:f7: aa:80:da:3f:e8:55:bd:23:27:45:2a:7c:a4:eb:06:6a:ca:00: 85:7e:cb:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+McvP+h4JAQcTMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MTAxOTAxMDAxMloXDTI3MDExNzAyMDAxMlowLzEtMCsGA1UEAxMk NDFlMGJmM2EtNjcyZC00ZjFkLTgwYmUtZDA2OTczNTIzMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7rcx6IqnTDpoXbeVKnM4qXjlgdHv5PNtUJm exE/3/VM/WN4K7FesIadXlehst2dz/jDBbJugGHu0r2NINavQ+HGmYgnUHLeonGN hR1obzUG7ezuI3tbnwwsgikwwtH3ktz0+553KLbtubvx9yZb+9hpYeAM2Rm4JTaA u+Kw3WZk3FDwxhx9Uggbm18w9XzaybrN56suPrRGd1azZYjfQgEVWQd8P806f2CR QVRY9Yu5jOkLzJrAcuGYmlThJ2rcqisjCfaiQiPv2lCaOUKG/vTJSDjyipFRZiW7 UH83CaNhrWS2hwtBfQle6cuqWr67bDxHBt2pYq6Un/d57c7jxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNicRdPP/1gnXR21yi8r1hIApVYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvN2RiZjZlMWQtZTNhMS0z NzQwLWI5MDgtMjMyMWY4YWM0ZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcQBywG6ZPi6qO4sR40BI6W0hEYRyxaW9sDkKSE9HUDwIg0OBNcv0m6 NtHLzgUUuCUpeULIaMyBrQoOWtzGIk25Sqn4oUrKx7LQcj32ifdUFAdsb/q2O09D ym2Zz0Hi4SfHPTrvI4QXqIJw5v7enZ7pnC1DgxjH0QegRTWjj4SQvzczweJApXv7 8rCwLE9pbi5qQPJHySx42aEPb3Su26su5UdqIR/HrxIoFrG0OneDH64kE5Ks4v4m GJsIqiyq/RuZPyCFgS/inOn+5O74mMe5J58lm7AWwFsiRLwv5fTApb2Va/29QGPt 96qA2j/oVb0jJ0UqfKTrBmrKAIV+ywE= -----END CERTIFICATE-----Generated at Mon Oct 19 07:53:39 2026 by rpki-client