$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: w+Du0WesOdb2yeemaRfdJ1Uvr8t0mB2HZE/qPx69ei4= Subject key identifier: 90:18:CF:3F:25:E5:84:DD:E8:02:4F:13:70:DE:75:1D:3E:BE:91:C8 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584E8F54F55DC6E7DD30AAAACB00 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f5:5d:c6:e7:dd:30:aa:aa:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=0bc96739-65fa-4cde-8f00-c2cf14b9cf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:90:c2:59:0f:80:69:80:7f:22:39:20:ef: c6:bf:74:63:4b:9d:07:2f:ed:7e:48:27:9f:ed:cc: 40:57:13:ab:1d:8c:59:56:77:5f:a9:fa:88:da:a5: 07:cd:39:73:0a:04:06:3c:b5:40:16:fd:58:8b:7f: 0f:1a:20:9e:f7:03:61:fd:e4:21:5d:71:80:82:5d: 13:23:05:a0:a9:4b:7b:8d:49:8f:0f:77:b7:d3:d4: 4a:8b:0f:6e:78:2f:09:74:0a:3a:65:30:4c:4b:5a: 27:3b:ad:5d:28:d3:14:09:74:68:d4:25:fd:4b:bb: bd:58:33:4e:4b:24:a5:09:b5:73:86:13:c9:b1:ac: f3:e9:95:9a:8c:65:ff:71:99:ba:50:e5:13:bf:54: e1:7b:a5:4b:49:96:f4:81:0e:9e:c5:ab:12:6c:28: 54:2e:64:39:88:e5:a2:99:13:7d:25:60:36:90:2d: a2:66:95:16:37:05:8a:f7:2f:aa:60:5d:c8:7d:72: 0a:8b:1b:04:15:1e:6b:2f:d5:25:99:e5:2e:d6:e4: 5b:72:7f:5c:b7:76:34:9c:f4:81:2e:25:59:8f:a2: 58:fc:c5:3b:13:35:57:0f:b6:26:12:9d:f2:00:0b: 06:de:4d:33:e4:5d:2c:4a:4a:d1:8b:bd:ff:fa:15: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:18:CF:3F:25:E5:84:DD:E8:02:4F:13:70:DE:75:1D:3E:BE:91:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:71:62:ca:37:d9:1d:00:7b:eb:00:cd:c0:fc:f9:70:ad:d0: 20:71:a7:65:1a:d0:88:a1:8b:4e:14:cd:07:31:bc:33:15:5b: 70:d1:dd:6b:94:a6:bc:3c:e2:56:7f:cf:23:27:7f:c6:4b:92: 3c:fd:73:84:be:e5:da:3b:c2:d5:97:df:dc:76:a9:2a:47:c8: 43:4f:5d:51:40:30:1b:6e:11:4a:0e:b3:ba:fd:cb:0b:a9:4f: 8b:38:0f:d3:2d:32:c7:28:ba:2a:3b:e0:26:3d:be:11:62:b3: 24:49:66:72:37:a5:e7:71:9d:be:20:1c:96:6b:47:53:23:96: f9:94:9f:c9:88:16:bf:83:3a:cf:4a:c2:28:03:9a:36:bf:41: e9:32:cd:92:f7:10:ab:be:66:d6:d7:b1:29:73:fc:fa:70:50: 37:7e:de:e7:e8:56:94:ad:39:b8:f8:18:56:3f:a1:b5:a3:7c: 06:48:d1:80:16:fb:aa:9f:fb:e3:9f:76:4f:52:b0:ff:be:82: 43:9f:fe:49:73:03:2e:03:75:9e:57:84:6e:5e:4c:5b:e9:dd: 7f:ae:6c:34:6a:c3:fc:40:33:40:1d:b6:61:52:e2:5e:16:02: 8f:d4:13:b7:26:a6:d5:f1:f6:bb:85:a5:e5:50:d0:ec:8d:67: 77:67:ed:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPVdxufdMKqqywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MGJjOTY3MzktNjVmYS00Y2RlLThmMDAtYzJjZjE0YjljZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6QwlkPgGmAfyI5IO/Gv3RjS50HL+1+SCef 7cxAVxOrHYxZVndfqfqI2qUHzTlzCgQGPLVAFv1Yi38PGiCe9wNh/eQhXXGAgl0T IwWgqUt7jUmPD3e309RKiw9ueC8JdAo6ZTBMS1onO61dKNMUCXRo1CX9S7u9WDNO SySlCbVzhhPJsazz6ZWajGX/cZm6UOUTv1The6VLSZb0gQ6exasSbChULmQ5iOWi mRN9JWA2kC2iZpUWNwWK9y+qYF3IfXIKixsEFR5rL9UlmeUu1uRbcn9ct3Y0nPSB LiVZj6JY/MU7EzVXD7YmEp3yAAsG3k0z5F0sSkrRi73/+hU3XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAYzz8l5YTd6AJPE3DedR0+vpHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJxYso32R0Ae+sAzcD8+XCt0CBxp2Ua0Iihi04UzQcxvDMVW3DR3WuU prw84lZ/zyMnf8ZLkjz9c4S+5do7wtWX39x2qSpHyENPXVFAMBtuEUoOs7r9ywup T4s4D9MtMscouio74CY9vhFisyRJZnI3pedxnb4gHJZrR1MjlvmUn8mIFr+DOs9K wigDmja/QekyzZL3EKu+ZtbXsSlz/PpwUDd+3ufoVpStObj4GFY/obWjfAZI0YAW +6qf++Ofdk9SsP++gkOf/klzAy4DdZ5XhG5eTFvp3X+ubDRqw/xAM0AdtmFS4l4W Ao/UE7cmptXx9ruFpeVQ0OyNZ3dn7bI= -----END CERTIFICATE-----Generated at Thu Jul 23 20:23:31 2026 by rpki-client