$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6f7f64c5-bded-39e0-ae28-3760724ddded.roa File: 6f7f64c5-bded-39e0-ae28-3760724ddded.roa (raw, json) Hash identifier: jHybpRAgGczVZTl30Vv5DgrQHryT4UJ4Y1eSksx2YNc= Subject key identifier: 5A:3A:54:F0:1E:8A:B8:52:FA:BD:A7:04:62:44:DD:C2:32:03:4A:48 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DA6B03502028890953F4E0280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6f7f64c5-bded-39e0-ae28-3760724ddded.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 32787 IP address blocks: 168.143.255.66/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:35:02:02:88:90:95:3f:4e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=f6d816cc-1bd0-4e9f-b08b-d6dfb35c3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:c7:a2:9c:ef:cb:f4:64:b5:c9:60:be:61: 2c:9c:9d:da:2b:7d:79:1a:93:6e:4a:56:a7:50:5d: 7b:f5:69:57:fc:9d:91:ac:98:bc:98:c6:2b:c4:35: 5e:0a:a4:81:56:bb:41:43:ca:e8:11:51:7b:46:1a: ab:6a:0e:49:04:e6:85:af:87:5e:13:2a:7e:3c:8e: 41:e8:49:c9:e7:e0:ab:a8:7d:64:36:84:2b:84:1e: d6:0d:42:7b:09:c4:cf:11:22:d3:c7:8f:63:bb:a7: ad:89:5c:ec:ca:10:a0:6f:1a:7c:ff:8b:c3:1a:91: 00:4e:61:74:07:c7:d9:48:4f:30:1e:8a:f9:2f:dc: 39:e7:f1:fd:8e:e8:83:2b:45:9e:56:bf:96:7a:e7: ef:c6:e5:0e:dc:28:96:1f:0f:73:a2:fb:47:f8:f8: 9e:5a:52:53:c2:9f:78:90:1c:d3:78:bc:83:d1:ac: 6f:2a:99:10:45:55:2f:7f:ae:84:20:22:22:a3:b2: 59:cf:1e:20:ed:49:5b:73:2d:7c:3e:fb:e4:22:94: 86:65:56:de:d5:d3:96:af:e7:d3:d4:37:a2:e6:10: 75:6a:66:85:e5:61:09:67:29:ac:84:41:7b:9b:07: e7:0c:49:b8:c1:05:4c:10:71:99:60:ad:55:e8:60: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:54:F0:1E:8A:B8:52:FA:BD:A7:04:62:44:DD:C2:32:03:4A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6f7f64c5-bded-39e0-ae28-3760724ddded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.255.66/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2e:8b:83:37:07:68:16:30:1a:ad:cf:35:15:95:79:ce:8b: aa:cb:11:c6:76:31:94:ea:86:1b:f2:d6:03:71:54:a0:7f:c0: 1b:52:9c:7e:c2:bb:36:ce:df:c2:65:b7:1e:92:22:07:ba:88: 63:79:8d:34:25:fd:fd:32:fc:27:31:5d:c2:24:d1:26:4f:ce: f7:32:cb:03:d5:13:c3:0a:ea:9f:8d:0f:f4:4f:df:bb:97:86: 33:51:eb:8e:ee:38:ca:d9:af:3c:99:8a:61:7c:e0:8f:f4:d9: c2:49:e1:56:1a:ef:9a:9a:18:01:9b:60:45:54:d2:69:7d:2f: c3:f6:dd:a0:37:08:7e:b5:95:d0:75:f9:82:82:ab:eb:be:8e: 24:1e:13:d8:96:e4:dc:5a:e4:94:6a:59:61:a9:19:f0:cb:3c: 55:1c:c2:21:36:10:3f:11:9f:22:13:ac:42:d0:20:9d:c2:c0: 69:10:82:73:19:74:04:6c:1d:a2:db:92:66:ff:be:73:17:03: 4e:8b:13:73:10:c0:b2:8a:9a:a4:ee:8a:e2:15:80:18:6d:e5: 95:b6:52:e9:37:e9:fa:5c:61:01:eb:63:44:a2:d0:18:74:3f: 7b:9d:01:3f:90:38:6b:c6:16:94:47:d9:d8:5b:7c:a2:02:96: d5:e7:5e:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msDUCAoiQlT9OAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZjZkODE2Y2MtMWJkMC00ZTlmLWIwOGItZDZkZmIzNWMzZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCfHopzvy/RktclgvmEsnJ3aK315GpNuSlan UF179WlX/J2RrJi8mMYrxDVeCqSBVrtBQ8roEVF7Rhqrag5JBOaFr4deEyp+PI5B 6EnJ5+CrqH1kNoQrhB7WDUJ7CcTPESLTx49ju6etiVzsyhCgbxp8/4vDGpEATmF0 B8fZSE8wHor5L9w55/H9juiDK0WeVr+WeufvxuUO3CiWHw9zovtH+PieWlJTwp94 kBzTeLyD0axvKpkQRVUvf66EICIio7JZzx4g7Ulbcy18PvvkIpSGZVbe1dOWr+fT 1Dei5hB1amaF5WEJZymshEF7mwfnDEm4wQVMEHGZYK1V6GB9sQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFo6VPAeirhS+r2nBGJE3cIyA0pIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmY3ZjY0YzUtYmRlZC0z OWUwLWFlMjgtMzc2MDcyNGRkZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAqI//QjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByLouDNwdoFjAarc81FZV5zouqyxHGdjGU6oYb8tYDcVSgf8AbUpx+ wrs2zt/CZbcekiIHuohjeY00Jf39MvwnMV3CJNEmT873MssD1RPDCuqfjQ/0T9+7 l4YzUeuO7jjK2a88mYphfOCP9NnCSeFWGu+amhgBm2BFVNJpfS/D9t2gNwh+tZXQ dfmCgqvrvo4kHhPYluTcWuSUallhqRnwyzxVHMIhNhA/EZ8iE6xC0CCdwsBpEIJz GXQEbB2i25Jm/75zFwNOixNzEMCyipqk7oriFYAYbeWVtlLpN+n6XGEB62NEotAY dD97nQE/kDhrxhaUR9nYW3yiApbV517V -----END CERTIFICATE-----Generated at Wed May 13 09:03:05 2026 by rpki-client