$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa File: 2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa (raw, json) Hash identifier: mkaFbpgTZVawJxvSFow+quPnrQ5avi7yLaghPu+F5Bk= Subject key identifier: 33:4D:4F:CE:A9:71:45:72:29:D6:1A:53:8E:37:9D:E1:7B:B7:BD:2C Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd Certificate serial: 010D0C9F4328584E779A3635A73471C7D7BB2CC0 Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 13536 IP address blocks: 72.12.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:36:35:a7:34:71:c7:d7:bb:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=45c936bb-69a4-4b30-a3f0-cb53af37cc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:ca:6d:2f:df:6f:06:36:0a:bd:43:d6:4a: f3:04:d6:3b:16:1e:b6:ff:32:ca:7b:da:e4:62:ee: 64:20:a5:aa:d1:e0:21:63:ac:45:1d:c4:0e:1a:1b: bb:40:8f:b4:d2:bf:3d:ea:8f:61:82:ba:ce:e2:68: 38:5d:6e:2b:4b:eb:2d:76:a3:0e:50:a3:9a:dc:96: ce:44:6e:26:71:af:1b:53:81:b0:ab:ca:cf:e4:42: f1:1b:2f:55:62:41:ea:e2:90:fd:20:d9:93:d2:09: b3:66:5a:c8:f6:8d:c4:53:5c:51:48:a4:6b:40:b1: eb:06:6e:aa:c0:f3:be:96:0b:d1:08:98:05:30:21: c4:11:47:2d:09:72:57:e9:92:06:e8:26:32:90:7e: 0a:2b:9a:51:c4:33:83:31:45:25:48:2d:23:d9:26: af:5e:14:07:27:f9:f3:7e:d6:85:79:b5:3c:8e:ab: 59:7a:a8:b8:dd:c4:d3:25:98:ee:e4:78:6e:5f:cb: b8:7a:4d:3a:b0:34:90:24:3c:95:f8:53:82:ff:a5: 2a:82:a7:ef:55:74:7d:8e:65:cd:2c:0f:28:e4:38: 0b:4b:d6:4a:2e:85:74:f0:53:fc:09:cb:41:43:53: a9:45:08:0a:05:fc:8c:bd:84:9b:d4:01:f4:78:f7: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:4F:CE:A9:71:45:72:29:D6:1A:53:8E:37:9D:E1:7B:B7:BD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/2aa03a7b-fa3a-3ce9-ae36-0b3fa1d1fd5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl X509v3 Authority Key Identifier: keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer sbgp-ipAddrBlock: critical IPv4: 72.12.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:74:11:83:5b:73:4b:e3:f9:c8:d6:f9:2a:82:19:99:8a:21: 6a:64:0e:0b:36:aa:f2:09:70:d5:53:4a:e9:8b:bd:b7:32:5b: 61:69:be:23:ee:4c:0c:d0:fd:17:40:b2:70:de:53:1e:c5:66: 0e:f7:99:e7:ef:37:cf:88:1e:f6:0d:8c:dd:80:26:82:a6:b9: bd:1c:6a:7e:76:16:1f:6c:6c:e0:4b:6d:70:8a:04:8c:94:e8: ca:49:c0:2b:f2:fd:ee:6d:c9:2e:d4:b1:18:10:5c:2b:b6:ac: 42:6a:ab:5f:33:d4:7d:cc:84:4c:d0:70:7b:7d:20:d1:6b:4b: 7f:3d:a0:9f:d3:e9:a9:34:46:24:7e:fa:cc:d2:db:17:c8:b3: fc:9a:e7:2e:66:6c:5c:a4:8f:c4:1c:95:ae:c1:27:45:6f:e5: 73:32:6e:fc:4b:95:f7:e0:ad:6d:03:3a:ba:f9:56:33:d4:25: 85:82:cc:24:d9:b9:ee:f5:63:20:6f:65:01:01:e0:b3:fd:cc: a4:7e:66:bc:52:e3:15:4d:3e:d0:3b:82:36:4d:87:79:31:59: cf:b4:7f:ef:c4:8a:9e:d7:2b:cc:e4:92:8e:33:34:eb:ed:1c: a7:0a:11:8e:42:23:65:ba:47:2f:0f:7c:80:b4:b1:79:47:a3: 34:fe:71:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mjY1pzRxx9e7LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3 OGZkMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk NDVjOTM2YmItNjlhNC00YjMwLWEzZjAtY2I1M2FmMzdjYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxHKbS/fbwY2Cr1D1krzBNY7Fh62/zLKe9rk Yu5kIKWq0eAhY6xFHcQOGhu7QI+00r896o9hgrrO4mg4XW4rS+stdqMOUKOa3JbO RG4mca8bU4Gwq8rP5ELxGy9VYkHq4pD9INmT0gmzZlrI9o3EU1xRSKRrQLHrBm6q wPO+lgvRCJgFMCHEEUctCXJX6ZIG6CYykH4KK5pRxDODMUUlSC0j2SavXhQHJ/nz ftaFebU8jqtZeqi43cTTJZju5HhuX8u4ek06sDSQJDyV+FOC/6UqgqfvVXR9jmXN LA8o5DgLS9ZKLoV08FP8CctBQ1OpRQgKBfyMvYSb1AH0ePdVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNNT86pcUVyKdYaU443neF7t70sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5 NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMmFhMDNhN2ItZmEzYS0z Y2U5LWFlMzYtMGIzZmExZDFmZDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0 NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAxTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd0EYNbc0vj+cjW+SqCGZmKIWpkDgs2qvIJcNVTSumLvbcyW2FpviPu TAzQ/RdAsnDeUx7FZg73mefvN8+IHvYNjN2AJoKmub0can52Fh9sbOBLbXCKBIyU 6MpJwCvy/e5tyS7UsRgQXCu2rEJqq18z1H3MhEzQcHt9INFrS389oJ/T6ak0RiR+ +szS2xfIs/ya5y5mbFykj8Qcla7BJ0Vv5XMybvxLlffgrW0DOrr5VjPUJYWCzCTZ ue71YyBvZQEB4LP9zKR+ZrxS4xVNPtA7gjZNh3kxWc+0f+/Eip7XK8zkko4zNOvt HKcKEY5CI2W6Ry8PfIC0sXlHozT+cbY= -----END CERTIFICATE-----Generated at Mon Jul 13 12:50:43 2026 by rpki-client