$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa File: 8b689cd5-478c-384f-aae2-5952f84246c8.roa (raw, json) Hash identifier: O5B3rvWIBThY1m09cwSUSlDnu5u1v2P6Wo351O8FBv8= Subject key identifier: 68:F3:AF:A2:F9:A3:40:91:2B:3A:C1:38:B9:5A:B5:12:93:58:18:41 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DADAACC85A824964BB4DBD200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 393560 IP address blocks: 168.143.255.66/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:cc:85:a8:24:96:4b:b4:db:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=a81dd7e1-3a96-45d5-9912-43c22a3ee650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:dc:a3:d8:e9:16:ac:9c:f0:4b:35:9c:37: 24:8c:19:7f:00:16:0e:7a:4d:9a:b6:05:ae:49:99: 83:dd:d4:6a:a6:cd:39:30:53:05:b4:30:08:e9:29: 6d:0a:ef:6a:ed:3d:f7:a3:85:c9:cb:0e:2d:05:89: 4a:f4:34:b3:6a:4d:d0:d1:61:d1:b1:90:b1:53:7b: 14:77:c0:0a:be:10:26:ac:76:40:dc:6c:83:1d:f2: 7d:71:60:61:09:b3:11:ce:ce:9e:49:32:bf:4d:06: e5:80:e3:0f:94:1d:ac:d3:e7:4f:02:ad:1c:a4:5e: b3:15:2c:f6:32:32:64:44:63:de:34:53:eb:6f:85: b7:20:05:fb:11:d9:0f:11:39:67:fb:9e:40:3a:da: 21:69:d3:55:98:b4:dc:6d:98:6c:0d:ef:96:a7:8e: 18:56:a9:1f:8f:fc:da:d1:dc:69:a9:09:f4:ee:cf: 49:aa:c1:80:1a:48:90:73:3c:71:5a:9a:a5:33:1f: 98:cc:ae:7f:c3:a2:12:6a:13:6b:f1:79:a4:49:f4: ec:0e:bb:af:28:4f:0f:b6:c6:e9:3d:16:03:41:b9: d8:69:13:0b:23:79:8f:ba:b4:61:8f:6c:46:f9:f3: 08:51:9d:8a:95:2a:39:c7:aa:c4:40:19:bc:49:36: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:AF:A2:F9:A3:40:91:2B:3A:C1:38:B9:5A:B5:12:93:58:18:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8b689cd5-478c-384f-aae2-5952f84246c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 168.143.255.66/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:83:78:c5:69:1a:56:79:06:4c:c0:6d:0a:ec:95:c6:6e:27: 60:81:0c:ec:bf:95:94:9b:57:88:04:41:51:f6:3b:79:7c:32: 97:cb:a5:d4:7d:21:8d:97:b3:f5:6f:86:21:54:a3:f0:97:5c: f2:e1:bd:80:04:f5:46:80:81:e2:19:e2:1a:b4:ba:6f:74:b7: 7c:52:67:ab:fb:ff:24:53:77:cb:ab:fe:7a:ef:4a:31:99:40: 9d:27:30:e7:83:cf:97:c1:18:26:4e:fc:d2:1a:9a:18:ba:20: 98:27:9d:16:bb:0e:8c:c9:f6:2b:54:3f:40:93:2b:e4:e4:29: 04:f3:68:60:e1:3d:48:e4:e0:5f:c1:11:a9:ff:0c:4d:95:a1: 35:ff:97:d8:c8:73:3c:d5:44:a5:b7:9e:39:14:8f:02:bb:1a: 30:1a:e6:1d:ed:1d:52:7f:ad:ae:64:e1:a3:19:69:62:91:b1: f5:32:34:de:15:08:3a:88:6a:1f:ee:09:e3:84:9c:50:9a:e4: 41:b1:b5:7a:19:ca:0d:e5:07:8e:48:4c:80:18:aa:fe:3a:1f: 10:d2:30:c6:c6:7e:60:a5:c0:cd:c9:94:f4:31:e6:f7:4e:c1: 87:ce:52:c9:d0:56:2f:8f:ef:2b:31:0d:97:0e:3c:8a:ac:f6: 6f:1e:73:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2tqsyFqCSWS7Tb0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YTgxZGQ3ZTEtM2E5Ni00NWQ1LTk5MTItNDNjMjJhM2VlNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05vco9jpFqyc8Es1nDckjBl/ABYOek2atgWu SZmD3dRqps05MFMFtDAI6SltCu9q7T33o4XJyw4tBYlK9DSzak3Q0WHRsZCxU3sU d8AKvhAmrHZA3GyDHfJ9cWBhCbMRzs6eSTK/TQblgOMPlB2s0+dPAq0cpF6zFSz2 MjJkRGPeNFPrb4W3IAX7EdkPETln+55AOtohadNVmLTcbZhsDe+Wp44YVqkfj/za 0dxpqQn07s9JqsGAGkiQczxxWpqlMx+YzK5/w6ISahNr8XmkSfTsDruvKE8Ptsbp PRYDQbnYaRMLI3mPurRhj2xG+fMIUZ2KlSo5x6rEQBm8STYdKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGjzr6L5o0CRKzrBOLlatRKTWBhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGI2ODljZDUtNDc4Yy0z ODRmLWFhZTItNTk1MmY4NDI0NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAqI//QjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUg3jFaRpWeQZMwG0K7JXGbidggQzsv5WUm1eIBEFR9jt5fDKXy6XU fSGNl7P1b4YhVKPwl1zy4b2ABPVGgIHiGeIatLpvdLd8Umer+/8kU3fLq/5670ox mUCdJzDng8+XwRgmTvzSGpoYuiCYJ50Wuw6MyfYrVD9Akyvk5CkE82hg4T1I5OBf wRGp/wxNlaE1/5fYyHM81USlt545FI8CuxowGuYd7R1Sf62uZOGjGWlikbH1MjTe FQg6iGof7gnjhJxQmuRBsbV6GcoN5QeOSEyAGKr+Oh8Q0jDGxn5gpcDNyZT0Meb3 TsGHzlLJ0FYvj+8rMQ2XDjyKrPZvHnPu -----END CERTIFICATE-----Generated at Wed May 13 07:30:43 2026 by rpki-client