$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: PcCZMbtGs4Kt45UbtBA+nefVBHv/odnF7BOaDT2f2oM= Subject key identifier: 7C:A8:AA:97:DE:F2:C0:ED:45:C5:2F:6A:F1:05:C1:A0:D3:97:67:E4 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DBA3AEA901A660B5782D3AF30 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:ea:90:1a:66:0b:57:82:d3:af:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=eee7410c-d835-4ebe-8fa3-09fe32c28e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:f5:e0:27:18:75:34:58:2a:98:ad:49:94: 19:5d:08:47:c4:ef:db:a4:f6:1b:da:31:83:24:df: 3f:81:a5:fe:30:41:10:db:ac:0d:52:9d:c5:bb:e6: b0:90:8a:a5:38:45:1f:e6:ac:00:32:dd:d4:e3:7c: e8:3f:7f:17:c9:56:11:26:40:2f:63:60:34:53:b9: b9:29:8b:2c:68:f3:44:3a:86:97:79:cf:d3:29:1a: b0:f5:e5:85:b5:e9:09:50:1f:21:0e:bb:ea:db:1f: f7:64:b8:0c:15:de:cc:5a:69:ac:92:ca:c2:05:55: b9:55:d7:b9:3b:5b:67:62:bf:a6:fc:38:bb:ba:b3: de:01:d1:34:08:23:b3:3d:3c:62:ff:2e:f7:79:e2: 3b:fe:4e:8c:c3:3e:19:52:b1:da:a6:60:27:ac:7c: f6:b9:7d:79:8c:09:ab:41:47:a4:b3:95:9f:59:96: ca:57:64:ca:9b:e4:ad:42:71:7c:23:f3:e7:e8:d6: 75:52:c5:f8:25:dd:0d:07:9e:44:7d:54:2e:5b:07: 1f:31:58:5e:71:c0:49:2e:39:e2:60:34:fd:89:e1: 9f:ef:c2:df:fe:ca:b1:93:27:bb:90:28:9c:c2:92: ba:18:bc:da:d9:04:5c:24:46:ed:e0:1f:43:9a:b1: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:AA:97:DE:F2:C0:ED:45:C5:2F:6A:F1:05:C1:A0:D3:97:67:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e2:d1:40:51:cb:7f:7b:b1:b1:ba:85:97:e4:2f:84:92:18: 43:7a:64:07:ee:60:6c:a8:93:77:2c:0b:7e:84:e4:c0:cf:b7: 39:e2:de:bb:6e:36:35:66:3c:22:5e:42:b8:78:c3:08:44:2d: 94:9a:b2:72:47:dc:d1:a3:75:93:5f:06:41:66:87:7b:91:a0: 26:d2:fd:4f:13:23:36:4f:a2:d8:54:8c:17:63:ea:70:91:23: e7:1b:9f:3e:e4:0e:4b:3c:15:85:97:71:8c:1a:6a:2e:ac:4a: 9f:7f:9f:d0:c6:f4:ca:bf:0e:22:80:0d:6b:8e:dd:4c:1f:f5: 73:80:b0:8c:7d:91:37:7e:36:54:91:96:a0:00:ed:7a:c9:f1: ea:41:af:01:88:35:a8:ff:b8:39:45:c2:1d:79:11:ae:9a:24: 02:cb:1a:8d:34:7c:be:4c:0b:1f:2c:5c:b3:d7:b6:34:f2:83: 82:c1:52:c8:ad:e0:3d:9d:3a:89:0f:f5:38:fa:dc:25:1d:9a: d3:39:24:09:a7:09:93:28:7e:2b:95:af:c1:9e:cf:73:b4:84: b3:82:fb:76:39:c1:61:40:b1:35:3c:9a:46:3e:2a:09:61:ff: 4c:f4:13:9e:84:0f:8f:4f:59:ad:bb:0d:57:aa:aa:91:4d:8e: 34:c3:2e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuqQGmYLV4LTrzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk ZWVlNzQxMGMtZDgzNS00ZWJlLThmYTMtMDlmZTMyYzI4ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfj14CcYdTRYKpitSZQZXQhHxO/bpPYb2jGD JN8/gaX+MEEQ26wNUp3Fu+awkIqlOEUf5qwAMt3U43zoP38XyVYRJkAvY2A0U7m5 KYssaPNEOoaXec/TKRqw9eWFtekJUB8hDrvq2x/3ZLgMFd7MWmmsksrCBVW5Vde5 O1tnYr+m/Di7urPeAdE0CCOzPTxi/y73eeI7/k6Mwz4ZUrHapmAnrHz2uX15jAmr QUeks5WfWZbKV2TKm+StQnF8I/Pn6NZ1UsX4Jd0NB55EfVQuWwcfMVheccBJLjni YDT9ieGf78Lf/sqxkye7kCicwpK6GLza2QRcJEbt4B9DmrGlRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyoqpfe8sDtRcUvavEFwaDTl2fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3i0UBRy397sbG6hZfkL4SSGEN6ZAfuYGyok3csC36E5MDPtzni3rtu NjVmPCJeQrh4wwhELZSasnJH3NGjdZNfBkFmh3uRoCbS/U8TIzZPothUjBdj6nCR I+cbnz7kDks8FYWXcYwaai6sSp9/n9DG9Mq/DiKADWuO3Uwf9XOAsIx9kTd+NlSR lqAA7XrJ8epBrwGINaj/uDlFwh15Ea6aJALLGo00fL5MCx8sXLPXtjTyg4LBUsit 4D2dOokP9Tj63CUdmtM5JAmnCZMofiuVr8Gez3O0hLOC+3Y5wWFAsTU8mkY+Kglh /0z0E56ED49PWa27DVeqqpFNjjTDLvE= -----END CERTIFICATE-----Generated at Wed May 13 13:40:11 2026 by rpki-client