$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa File: ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa (raw, json) Hash identifier: SYYwptH6iZwJ0g8aEx39E3KUhmCHbukF4eQvPIyMcpA= Subject key identifier: 8D:85:A4:5C:FB:77:92:A8:99:B2:F6:52:F9:1B:69:6C:C1:C5:8D:72 Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Certificate serial: 010D0C9F4328584F58CD4E7BF2D064F173828E00 Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 151872 IP address blocks: 72.14.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4e:7b:f2:d0:64:f1:73:82:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=1c686b90-55aa-4fec-8caf-5506d140d3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:00:68:a6:a4:4f:ed:be:ff:71:d8:ec:fb: 60:75:48:55:30:6a:e3:c1:f6:da:a3:dd:90:62:b5: 94:f0:c3:c0:b0:25:a9:28:d0:25:43:1a:64:d2:0f: 38:4e:9f:ed:00:59:bc:c7:6c:27:75:78:94:37:0b: 92:8c:3c:0c:6b:79:40:7a:e6:3a:b8:a8:dc:90:a4: 25:4a:e3:0b:fa:c8:77:b2:35:d2:04:4a:cf:f7:0e: a6:51:ca:5d:55:19:f7:42:85:f4:e1:3c:aa:3a:e5: 45:c8:39:9b:e0:f0:07:14:15:15:24:2a:6f:7f:16: d7:9d:61:f9:24:d7:a7:1a:2a:e8:ed:5d:41:92:bc: 83:90:33:65:2d:f3:65:1a:6b:92:19:99:70:df:51: 17:ca:1f:22:f0:f6:d8:70:c0:b4:04:82:de:78:a5: e6:36:13:6a:c9:da:3c:1b:d5:1a:ac:60:ab:43:99: 15:38:d3:2b:4b:95:f4:0d:09:c6:b8:8f:35:80:8f: 41:02:97:a1:31:f3:5d:93:e7:ff:51:f6:11:4d:91: f0:08:59:02:ed:7c:02:53:79:a4:8d:96:23:a3:4c: e9:89:5b:1d:59:67:da:35:21:97:83:be:1d:15:4b: ad:16:5a:f2:fa:00:43:4c:ea:97:06:c1:4c:01:7e: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:85:A4:5C:FB:77:92:A8:99:B2:F6:52:F9:1B:69:6C:C1:C5:8D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/ff4301a4-4a4b-330a-9f03-e86bc9eb4e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl X509v3 Authority Key Identifier: keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer sbgp-ipAddrBlock: critical IPv4: 72.14.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:39:64:f8:36:04:fd:c5:bf:03:44:a5:75:e2:84:99:43:0f: 0b:23:99:19:9c:70:91:d4:bb:a5:f4:b2:b5:93:cf:56:f1:8d: c3:ac:48:7c:80:e2:52:fd:c6:f0:40:57:22:00:6f:3f:a9:4a: 78:83:f9:c9:f8:82:0a:c5:bd:78:8b:1f:6b:46:17:a5:e1:a4: 67:a8:79:8b:ed:33:74:38:0d:1a:3c:03:de:41:2c:0d:09:e8: 63:e7:70:fc:de:d0:82:69:c3:c3:fe:48:93:0a:ca:a4:0e:4f: b4:35:cf:1f:90:61:96:2f:2a:d2:75:4e:5f:f8:c9:89:95:0d: 36:14:c8:4f:12:46:92:fc:4e:d4:46:5a:3a:c2:85:85:30:12: 44:e5:4d:95:1d:fb:5a:c0:ab:1a:67:56:47:3c:6e:ff:59:87: 96:be:b7:5e:b6:ef:12:b8:a4:56:a2:e7:1c:d3:49:fa:61:a7: c0:24:0d:b8:73:59:2b:cb:19:28:40:d1:e7:b3:e8:b7:fe:65: 71:47:ac:f2:8d:5a:dc:b8:7d:ad:27:63:92:2f:33:fe:2e:7a: 4a:e8:26:12:fa:71:dd:f9:83:65:cf:c4:fe:7a:24:5b:b2:1f: 5f:75:32:cf:da:46:64:88:87:a9:0e:43:d8:e1:53:fd:86:c6: 95:53:0e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzU578tBk8XOCjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk MWY3MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MWM2ODZiOTAtNTVhYS00ZmVjLThjYWYtNTUwNmQxNDBkM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdEAaKakT+2+/3HY7PtgdUhVMGrjwfbao92Q YrWU8MPAsCWpKNAlQxpk0g84Tp/tAFm8x2wndXiUNwuSjDwMa3lAeuY6uKjckKQl SuML+sh3sjXSBErP9w6mUcpdVRn3QoX04TyqOuVFyDmb4PAHFBUVJCpvfxbXnWH5 JNenGiro7V1BkryDkDNlLfNlGmuSGZlw31EXyh8i8PbYcMC0BILeeKXmNhNqydo8 G9UarGCrQ5kVONMrS5X0DQnGuI81gI9BApehMfNdk+f/UfYRTZHwCFkC7XwCU3mk jZYjo0zpiVsdWWfaNSGXg74dFUutFlry+gBDTOqXBsFMAX4mlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2FpFz7d5KombL2UvkbaWzBxY1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvZmY0MzAxYTQtNGE0Yi0z MzBhLTlmMDMtZTg2YmM5ZWI0ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2 ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0 NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc5ZPg2BP3FvwNEpXXihJlDDwsjmRmccJHUu6X0srWTz1bxjcOsSHyA 4lL9xvBAVyIAbz+pSniD+cn4ggrFvXiLH2tGF6XhpGeoeYvtM3Q4DRo8A95BLA0J 6GPncPze0IJpw8P+SJMKyqQOT7Q1zx+QYZYvKtJ1Tl/4yYmVDTYUyE8SRpL8TtRG WjrChYUwEkTlTZUd+1rAqxpnVkc8bv9Zh5a+t1627xK4pFai5xzTSfphp8AkDbhz WSvLGShA0eez6Lf+ZXFHrPKNWty4fa0nY5IvM/4uekroJhL6cd35g2XPxP56JFuy H191Ms/aRmSIh6kOQ9jhU/2GxpVTDi0= -----END CERTIFICATE-----Generated at Mon Nov 2 11:12:25 2026 by rpki-client