$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: 8tliYP05At/8bRDxljvnrnVdGSzMgT/YcaDx5vEx4co= Subject key identifier: 3C:37:AC:59:4E:CB:4A:E4:3D:41:7E:1D:10:4C:A4:94:AB:55:6D:76 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584DAF101E5895EF645ADFCD3000 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:1e:58:95:ef:64:5a:df:cd:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=aa6cfe4e-a1fc-4efa-9a4c-6db8e42b36a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:16:de:c5:1f:44:28:39:3b:56:cd:77:d1: 91:74:84:f5:56:20:e2:9d:02:f4:79:c0:47:0f:be: d5:4b:56:02:42:cc:0b:c6:4e:73:88:ac:a8:8c:81: 77:06:6d:cb:fd:59:b5:9a:24:2e:be:0c:d5:3e:b8: 32:74:cc:4c:75:f8:f7:ee:e6:5f:4e:37:95:40:ab: d6:1e:d7:ca:3d:40:db:93:a4:d0:8a:47:70:ab:28: 6a:b8:26:3d:35:67:03:3d:b3:af:2a:0e:93:cc:55: 69:19:a4:30:14:47:d2:63:3b:07:31:06:be:59:c6: ec:ae:1a:7f:8d:ad:d3:3a:12:a7:55:3b:ae:9c:ce: c0:04:f8:8d:26:e3:74:83:fc:dc:a7:09:2d:ab:b2: 59:72:ed:8c:18:3f:24:0a:7c:86:3a:35:f4:a2:1d: c4:ef:fe:e2:15:0f:44:1f:37:4f:9c:ad:4f:7f:4d: b7:ea:d5:5d:4d:f3:01:9b:f1:be:05:6d:dc:49:a2: b6:59:fc:4f:a8:38:07:cc:bd:74:a3:86:7d:62:09: 9a:f8:67:62:e8:d8:ba:de:cb:d1:58:85:d1:9e:18: 44:5a:7c:79:35:26:8c:e9:02:4d:72:5b:69:6a:c8: 45:fe:ed:a8:10:39:dc:e4:e2:ae:31:04:2c:e4:af: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:37:AC:59:4E:CB:4A:E4:3D:41:7E:1D:10:4C:A4:94:AB:55:6D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:56:bb:0e:7c:94:9a:bf:4b:ff:31:45:99:80:0a:24:1a:d8: 51:7f:4a:eb:a9:24:14:9c:05:c6:d7:1f:00:69:5a:86:b6:4d: 1a:56:1e:59:85:74:f3:40:a2:c9:e9:a9:52:4a:7e:ef:3f:28: 4d:d2:2e:de:95:6a:21:1e:ab:69:1e:63:bd:90:e4:ff:d2:07: 5d:b3:01:2d:f2:96:0e:81:83:21:04:ca:97:26:94:19:58:66: d9:c5:4a:b1:b3:98:8d:12:07:eb:8c:7a:2b:68:81:7e:23:08: 6b:47:d1:5b:e6:bd:cc:86:30:2e:58:0b:23:11:e8:fc:41:89: 9d:44:60:0b:d6:8c:ee:8e:3c:08:13:9d:ea:08:e9:52:e5:99: cf:d1:ea:bf:6b:6d:fd:f9:c2:9f:da:cb:8f:2f:7c:04:2f:b2: b7:49:70:11:41:52:a4:90:69:20:ba:67:d1:1d:08:bc:c3:c4: 83:93:38:a5:8f:8e:d6:d0:87:64:fa:45:03:11:6d:30:c0:6c: 63:b5:36:10:3e:76:a9:0b:e2:0f:cf:f9:a3:38:39:76:7b:30: 12:dd:f2:79:1e:d0:96:16:18:1b:a2:08:ef:30:1d:63:21:a4: 9c:f2:08:d4:38:cc:54:88:38:81:99:8a:17:b0:dc:85:ff:6b: 14:49:45:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEB5Yle9kWt/NMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk YWE2Y2ZlNGUtYTFmYy00ZWZhLTlhNGMtNmRiOGU0MmIzNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud8W3sUfRCg5O1bNd9GRdIT1ViDinQL0ecBH D77VS1YCQswLxk5ziKyojIF3Bm3L/Vm1miQuvgzVPrgydMxMdfj37uZfTjeVQKvW HtfKPUDbk6TQikdwqyhquCY9NWcDPbOvKg6TzFVpGaQwFEfSYzsHMQa+Wcbsrhp/ ja3TOhKnVTuunM7ABPiNJuN0g/zcpwktq7JZcu2MGD8kCnyGOjX0oh3E7/7iFQ9E HzdPnK1Pf0236tVdTfMBm/G+BW3cSaK2WfxPqDgHzL10o4Z9Ygma+Gdi6Ni63svR WIXRnhhEWnx5NSaM6QJNcltpashF/u2oEDnc5OKuMQQs5K+g5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw3rFlOy0rkPUF+HRBMpJSrVW12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlWuw58lJq/S/8xRZmACiQa2FF/SuupJBScBcbXHwBpWoa2TRpWHlmF dPNAosnpqVJKfu8/KE3SLt6VaiEeq2keY72Q5P/SB12zAS3ylg6BgyEEypcmlBlY ZtnFSrGzmI0SB+uMeitogX4jCGtH0VvmvcyGMC5YCyMR6PxBiZ1EYAvWjO6OPAgT neoI6VLlmc/R6r9rbf35wp/ay48vfAQvsrdJcBFBUqSQaSC6Z9EdCLzDxIOTOKWP jtbQh2T6RQMRbTDAbGO1NhA+dqkL4g/P+aM4OXZ7MBLd8nke0JYWGBuiCO8wHWMh pJzyCNQ4zFSIOIGZihew3IX/axRJRdM= -----END CERTIFICATE-----Generated at Wed May 13 11:11:36 2026 by rpki-client