$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa File: 038febac-a971-356a-a45e-6ac7bc0667ad.roa (raw, json) Hash identifier: jQz6NHa0fDVwt3oMntHZxpzZB4onDWuT6aviQTq9d3o= Subject key identifier: 9E:AB:FD:D7:5B:CE:91:71:3C:42:DC:86:02:E9:14:4D:3F:CD:05:DB Certificate issuer: /CN=6f8414e5-add5-44f9-ada6-b8c907027195 Certificate serial: 010D0C9F4328584E059B2EAF415CFC1AAF7BBC00 Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 14813 IP address blocks: 72.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:2e:af:41:5c:fc:1a:af:7b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=38bacdc2-ee54-4174-851a-746d6bba11e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:ad:93:f4:06:a4:60:02:c3:c7:61:03:dd: 91:d7:d4:c5:2e:55:00:ac:bd:5e:74:b0:ba:b7:8d: 2d:2c:3a:15:9b:57:6e:d8:f9:71:d2:20:b8:36:0e: 71:56:e3:e0:de:09:76:77:7e:dc:0b:43:ef:56:62: ed:1a:82:4b:17:d1:93:4c:9b:81:65:05:0c:9d:30: 9d:bd:cc:ed:97:c9:1a:a5:1f:8e:aa:c5:db:58:27: 85:68:2c:30:bb:66:89:4f:c1:7f:06:09:ba:64:ed: dc:df:17:d0:cc:27:70:a2:15:4f:8b:86:2a:c8:a7: 8a:ea:bf:8f:d6:61:ba:8a:f0:09:b3:e4:92:84:14: 8e:74:00:7e:b5:ee:bf:16:d1:b7:bf:65:26:75:b6: ad:96:bb:22:05:29:35:79:30:22:ef:ee:c2:9c:6f: 3e:2c:89:64:cb:e2:47:5f:66:b4:56:71:8d:2b:80: e9:11:7d:1a:ed:15:4b:80:6b:53:44:bb:97:1c:1c: eb:78:2c:1e:3b:a8:49:bf:c7:0b:8d:49:4d:f9:cd: 7c:a5:49:e8:85:42:84:53:4a:00:13:71:0b:9e:cd: 40:64:23:94:55:0c:37:27:0e:a5:75:f6:b6:40:5c: 0a:1a:b4:5d:f5:44:c1:5e:36:8e:5a:82:09:90:73: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AB:FD:D7:5B:CE:91:71:3C:42:DC:86:02:E9:14:4D:3F:CD:05:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/038febac-a971-356a-a45e-6ac7bc0667ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl X509v3 Authority Key Identifier: keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer sbgp-ipAddrBlock: critical IPv4: 72.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:b7:3c:3e:7c:b9:4b:7b:a1:db:ac:f6:df:5d:2f:03:9f: fa:a1:61:24:9c:be:bd:b8:12:8e:a9:db:4c:bd:45:85:4a:1d: 60:a1:d4:19:59:e7:01:92:72:7e:cc:e2:1a:c3:21:8c:ee:43: ce:e8:da:7f:11:30:6d:0a:df:7d:bb:8c:d3:b5:e9:32:cc:46: 8f:77:d9:8d:d6:87:6b:d6:b4:8b:58:40:b1:8a:98:da:6b:b9: 04:fb:22:1d:9b:55:ac:64:4d:a2:9b:b8:9a:e0:6b:e9:e5:71: 31:a3:9b:06:52:79:4d:55:fd:58:d8:a9:9f:f9:f7:33:ad:1a: da:e4:a3:31:58:12:d9:41:9d:89:f7:99:cd:a0:b8:9e:aa:ca: ce:59:f2:7c:af:09:7e:c2:66:e7:9b:87:d3:69:69:c0:3b:48: 73:78:3f:30:7f:af:af:30:37:45:e4:49:a9:17:1a:bc:ab:9a: ea:76:30:8d:43:49:92:8d:ca:1e:6f:99:64:fb:ee:f8:f2:f9: e5:4f:7b:6c:88:ce:ef:a6:21:26:2c:ac:f9:45:38:18:f8:22: d5:3f:68:5f:13:47:3f:ff:4f:bf:31:08:97:41:03:8d:f4:b7: 28:32:ba:94:c0:1d:fd:83:b4:ad:92:2b:bb:3f:5c:e3:b2:6d: 5b:b5:fb:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fmy6vQVz8Gq97vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3 MTk1MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MzhiYWNkYzItZWU1NC00MTc0LTg1MWEtNzQ2ZDZiYmExMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0latk/QGpGACw8dhA92R19TFLlUArL1edLC6 t40tLDoVm1du2Plx0iC4Ng5xVuPg3gl2d37cC0PvVmLtGoJLF9GTTJuBZQUMnTCd vcztl8kapR+OqsXbWCeFaCwwu2aJT8F/Bgm6ZO3c3xfQzCdwohVPi4YqyKeK6r+P 1mG6ivAJs+SShBSOdAB+te6/FtG3v2UmdbatlrsiBSk1eTAi7+7CnG8+LIlky+JH X2a0VnGNK4DpEX0a7RVLgGtTRLuXHBzreCweO6hJv8cLjUlN+c18pUnohUKEU0oA E3ELns1AZCOUVQw3Jw6ldfa2QFwKGrRd9UTBXjaOWoIJkHNwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6r/ddbzpFxPELchgLpFE0/zQXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0 MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDM4ZmViYWMtYTk3MS0z NTZhLWE0NWUtNmFjN2JjMDY2N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5 MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYtzw+fLlLe6HbrPbfXS8Dn/qhYSScvr24Eo6p20y9RYVKHWCh1BlZ 5wGScn7M4hrDIYzuQ87o2n8RMG0K3327jNO16TLMRo932Y3Wh2vWtItYQLGKmNpr uQT7Ih2bVaxkTaKbuJrga+nlcTGjmwZSeU1V/VjYqZ/59zOtGtrkozFYEtlBnYn3 mc2guJ6qys5Z8nyvCX7CZuebh9NpacA7SHN4PzB/r68wN0XkSakXGryrmup2MI1D SZKNyh5vmWT77vjy+eVPe2yIzu+mISYsrPlFOBj4ItU/aF8TRz//T78xCJdBA430 tygyupTAHf2DtK2SK7s/XOOybVu1+8U= -----END CERTIFICATE-----Generated at Mon Jun 8 22:04:15 2026 by rpki-client