$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/4529354e-4064-302c-aad5-69ac8ae761b3.roa File: 4529354e-4064-302c-aad5-69ac8ae761b3.roa (raw, json) Hash identifier: NmnlZ2FKBZ1CJYxHBl7cl365McU+WkNOvyhzEfZBW4E= Subject key identifier: 22:8C:E3:1C:E9:DA:D5:13:24:95:04:32:E4:2F:93:E4:8A:07:4B:5B Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275 Certificate serial: 010D0C9F4328584D8D8FFCDF8A3E9321A79E6180 Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/4529354e-4064-302c-aad5-69ac8ae761b3.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 26548 IP address blocks: 216.180.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fc:df:8a:3e:93:21:a7:9e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=789a7e12-5c79-4ace-be0b-bcd2a9bd177e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:f4:ad:a8:81:d8:09:1e:29:65:54:1f:86: 4d:04:92:38:23:01:a9:0b:04:20:db:09:31:4e:cc: b2:cd:04:35:65:f5:50:e2:84:25:d5:14:57:ad:cd: c1:69:37:3f:16:c5:2d:0a:e6:4d:0b:d7:69:ee:fd: 5b:86:92:62:90:46:64:18:02:b6:70:57:54:ed:f3: 48:37:90:3b:6d:ed:91:d3:9c:b7:16:19:ed:ad:20: 52:02:c2:5f:c3:38:38:69:ae:1d:25:cc:3f:8f:f8: 98:7b:4b:5d:23:b8:b9:9b:af:7d:37:de:aa:72:85: 2b:a9:ed:c1:0b:6f:a7:a9:c2:35:4c:9e:6d:c8:f7: 32:3c:29:5c:fd:e4:87:cb:47:f8:f2:6a:48:30:a0: d9:25:61:aa:6c:23:79:bd:4d:df:e4:4b:8a:c1:f0: 19:91:bb:fd:73:d7:19:17:43:b5:36:28:ab:be:a1: 51:80:c6:e5:6e:6b:71:98:ae:1a:82:17:18:2c:60: 17:d6:a4:99:a9:0c:96:5c:44:54:07:dd:5e:65:55: 6b:8c:1f:58:62:36:bf:58:6e:76:46:5b:0b:4a:46: 09:40:fe:f0:b2:47:90:da:44:db:c8:fa:6c:80:b1: b1:1f:e5:0e:69:00:b2:b2:5a:66:16:a5:4f:7d:6f: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:E3:1C:E9:DA:D5:13:24:95:04:32:E4:2F:93:E4:8A:07:4B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/4529354e-4064-302c-aad5-69ac8ae761b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl X509v3 Authority Key Identifier: keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer sbgp-ipAddrBlock: critical IPv4: 216.180.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ad:5e:85:c1:76:53:57:55:9d:b6:2e:ed:0f:97:7c:c7:41: 2b:ae:c0:60:24:f2:20:c7:ed:9c:66:94:a8:47:0f:b9:e3:61: 43:62:45:c3:59:09:62:27:be:41:ec:8f:b4:96:ac:39:92:ef: b0:ac:dd:9c:c3:08:1e:b7:80:5b:ed:c0:7a:0e:0b:96:53:ba: 32:79:8a:f4:42:61:d2:52:38:c7:16:ba:52:df:a3:7d:04:b3: a4:3b:b4:80:59:f7:d2:ea:8f:5a:0f:24:58:4d:73:f8:a0:c2: 06:5a:b4:80:d3:1d:d4:16:8a:14:df:85:9f:9e:85:f9:37:fa: 55:8a:a0:85:c4:bf:b1:13:9d:e6:9c:d4:b2:c7:36:2d:73:da: f2:3e:0a:2a:39:01:cc:59:34:86:26:d9:da:b7:5c:9c:13:94: 4f:74:ff:1e:28:eb:84:c5:58:5c:dd:22:8a:fe:e9:5e:30:28: fd:30:5e:df:0d:d6:ec:9e:99:e7:f3:2e:90:8d:e1:ac:51:3f: b9:78:6d:3a:ab:dc:5c:38:f7:8d:f7:a0:e7:25:90:71:4c:79: e5:6f:ef:4c:03:fc:15:5f:f6:f2:f2:3c:51:2a:43:92:b8:70: 64:cf:e4:c4:82:b5:e9:a5:69:3b:75:c2:de:ac:b0:74:42:d1: 5b:12:88:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/zfij6TIaeeYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz Mjc1MB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk Nzg5YTdlMTItNWM3OS00YWNlLWJlMGItYmNkMmE5YmQxNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCz0raiB2AkeKWVUH4ZNBJI4IwGpCwQg2wkx TsyyzQQ1ZfVQ4oQl1RRXrc3BaTc/FsUtCuZNC9dp7v1bhpJikEZkGAK2cFdU7fNI N5A7be2R05y3FhntrSBSAsJfwzg4aa4dJcw/j/iYe0tdI7i5m699N96qcoUrqe3B C2+nqcI1TJ5tyPcyPClc/eSHy0f48mpIMKDZJWGqbCN5vU3f5EuKwfAZkbv9c9cZ F0O1NiirvqFRgMblbmtxmK4aghcYLGAX1qSZqQyWXERUB91eZVVrjB9YYja/WG52 RlsLSkYJQP7wskeQ2kTbyPpsgLGxH+UOaQCyslpmFqVPfW+Z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKM4xzp2tUTJJUEMuQvk+SKB0tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvNDUyOTM1NGUtNDA2NC0z MDJjLWFhZDUtNjlhYzhhZTc2MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh NmRhMDMyNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LR9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6tXoXBdlNXVZ22Lu0Pl3zHQSuuwGAk8iDH7ZxmlKhHD7njYUNiRcNZ CWInvkHsj7SWrDmS77Cs3ZzDCB63gFvtwHoOC5ZTujJ5ivRCYdJSOMcWulLfo30E s6Q7tIBZ99Lqj1oPJFhNc/igwgZatIDTHdQWihTfhZ+ehfk3+lWKoIXEv7ETneac 1LLHNi1z2vI+Cio5AcxZNIYm2dq3XJwTlE90/x4o64TFWFzdIor+6V4wKP0wXt8N 1uyemefzLpCN4axRP7l4bTqr3Fw49433oOclkHFMeeVv70wD/BVf9vLyPFEqQ5K4 cGTP5MSCtemlaTt1wt6ssHRC0VsSiL0= -----END CERTIFICATE-----Generated at Mon Apr 20 12:04:59 2026 by rpki-client