$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: NioYbpdN9y3if+6D0V/eu0KSKcWoYuFT5/OrowOr8jM= Subject key identifier: D0:D4:75:5B:0A:13:27:FD:9D:81:0D:CD:B6:7A:01:91:D1:D4:20:EB Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584DB4A57581231390CC65668900 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:75:81:23:13:90:cc:65:66:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=c759e788-8f6b-4a4b-9260-bf629ac3a01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:4c:9f:3f:12:c1:a5:b8:68:68:b2:20:91: fa:87:59:4e:ab:9f:5b:a2:ea:11:53:6b:50:18:3c: d0:c2:0b:6f:7b:f6:e5:14:11:29:04:a8:7b:79:89: 64:0a:c0:0a:52:e8:49:0a:9f:6a:76:85:3f:71:07: c9:72:2b:bf:6f:a0:64:60:69:35:02:cc:6c:2c:2f: f8:20:65:b6:2f:6d:92:06:f3:92:8a:b8:7b:23:e3: 4d:ce:13:b2:bb:99:c6:77:1d:0c:93:9f:10:9c:47: c2:c0:65:7f:fa:11:7d:9e:d5:5e:53:e9:0f:da:ab: 41:16:3d:0f:30:70:e0:ce:a9:92:e3:69:a7:07:ae: 41:b5:a3:0b:7f:e3:3e:f5:6f:f6:b2:3d:f3:20:87: 2c:b0:f3:6e:19:f4:7c:07:5e:20:95:3b:84:1a:67: 3d:7f:64:0f:04:53:c6:7f:07:b8:8e:94:13:45:78: 8b:25:ab:0b:cc:88:b7:d6:e5:e7:bc:3e:f9:80:72: 6e:25:bc:4e:9b:d8:d7:b7:9f:ae:38:8e:7b:e2:9f: 9e:eb:98:ff:b0:8b:d3:0e:b8:e8:8b:72:45:8d:06: 56:91:41:3f:af:49:a4:6b:49:a2:fc:d5:de:19:40: e2:fe:df:60:11:27:de:53:06:35:9e:6d:9c:69:c7: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:75:5B:0A:13:27:FD:9D:81:0D:CD:B6:7A:01:91:D1:D4:20:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:59:9d:5a:5e:e3:9a:39:a0:93:63:fb:ae:19:3a:71:c7:f6: 99:e4:8a:1d:d9:6c:ac:32:b3:c6:5f:d5:70:7a:60:a0:cf:ac: f3:43:a4:b2:c4:8f:d8:f1:76:6c:7d:c1:38:8a:d5:94:4b:92: 6a:a5:3f:f0:4d:1b:e3:d9:44:61:27:7b:7f:6d:4e:52:c8:dc: 8e:98:00:e3:d8:bd:f2:6c:3f:2d:82:98:7e:6c:f8:18:6b:6e: 35:10:29:ff:7c:9b:85:59:fb:65:3f:b2:bc:6c:c4:f5:76:0f: 59:1c:58:a5:95:1f:0b:39:c2:80:d7:28:cf:f6:09:2f:f0:a3: d2:5e:d9:15:1c:d4:4f:b6:64:25:10:b7:fe:5c:a7:d2:17:6c: b6:ec:ad:5c:19:44:7e:3c:77:ae:83:41:5c:a5:87:61:ec:20: 35:b3:1b:45:54:64:a0:2e:ac:37:90:fb:5e:bf:5b:71:dc:3e: d2:a7:f1:fc:36:ce:86:b0:22:84:ea:d1:dd:61:33:2a:fb:fe: 0e:a7:f1:d3:92:5f:04:d7:c6:d9:ad:a4:9d:0c:3f:5d:86:19: 9e:0c:1e:4d:c7:c9:7f:f8:17:32:f9:3b:be:92:88:ef:a6:58: 38:61:c5:03:f7:70:17:ee:3d:91:6f:08:20:f0:b3:ad:41:9a: bb:5d:7f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXWBIxOQzGVmiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk Yzc1OWU3ODgtOGY2Yi00YTRiLTkyNjAtYmY2MjlhYzNhMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNxMnz8SwaW4aGiyIJH6h1lOq59bouoRU2tQ GDzQwgtve/blFBEpBKh7eYlkCsAKUuhJCp9qdoU/cQfJciu/b6BkYGk1AsxsLC/4 IGW2L22SBvOSirh7I+NNzhOyu5nGdx0Mk58QnEfCwGV/+hF9ntVeU+kP2qtBFj0P MHDgzqmS42mnB65BtaMLf+M+9W/2sj3zIIcssPNuGfR8B14glTuEGmc9f2QPBFPG fwe4jpQTRXiLJasLzIi31uXnvD75gHJuJbxOm9jXt5+uOI574p+e65j/sIvTDrjo i3JFjQZWkUE/r0mka0mi/NXeGUDi/t9gESfeUwY1nm2cacdXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDUdVsKEyf9nYENzbZ6AZHR1CDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChZnVpe45o5oJNj+64ZOnHH9pnkih3ZbKwys8Zf1XB6YKDPrPNDpLLE j9jxdmx9wTiK1ZRLkmqlP/BNG+PZRGEne39tTlLI3I6YAOPYvfJsPy2CmH5s+Bhr bjUQKf98m4VZ+2U/srxsxPV2D1kcWKWVHws5woDXKM/2CS/wo9Je2RUc1E+2ZCUQ t/5cp9IXbLbsrVwZRH48d66DQVylh2HsIDWzG0VUZKAurDeQ+16/W3HcPtKn8fw2 zoawIoTq0d1hMyr7/g6n8dOSXwTXxtmtpJ0MP12GGZ4MHk3HyX/4FzL5O76SiO+m WDhhxQP3cBfuPZFvCCDws61Bmrtdf6I= -----END CERTIFICATE-----Generated at Wed May 13 10:48:35 2026 by rpki-client