$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa File: 085d01ba-b69e-30ae-a421-c117de494284.roa (raw, json) Hash identifier: kLAk2IYcH4kccTBm9Ts22elD3iCaLugYbSMGdmsQlrE= Subject key identifier: C5:17:47:44:BD:46:A0:2B:7B:8C:5A:6A:A0:43:AB:42:DC:B6:8D:1F Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584D9E5017DD7269E01596D99480 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 16823 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:17:dd:72:69:e0:15:96:d9:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=4a887673-4775-4089-ba5e-98678fe61c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9c:3f:90:7e:4c:1b:12:27:dd:85:1e:07:c5: c3:37:8b:c3:4c:9f:20:7c:d4:9c:9b:47:9d:8a:2c: fb:29:24:17:60:2d:5c:5c:03:d0:89:b6:b8:75:2a: 7c:5f:73:70:82:18:fa:66:02:b5:82:fe:98:fe:bf: 4a:e1:46:c1:7d:26:10:62:44:82:5f:54:89:32:12: b9:06:0b:71:fc:76:5e:2b:85:d8:f7:f9:29:0a:f2: b3:77:4c:c7:35:65:e7:d4:eb:8f:18:16:b1:62:30: 88:8f:ae:6f:b5:ca:2c:e4:2f:54:0f:c8:8b:47:f8: 34:a4:51:95:a4:af:8c:6f:44:b8:89:5e:b9:81:5b: e6:07:36:af:a1:47:a1:76:d9:a5:9a:6d:5a:46:ca: 44:bf:1b:04:20:ec:ff:ec:7d:7f:31:a5:28:65:01: 32:c6:04:2a:82:a8:47:a7:b4:18:11:12:30:a5:2b: 32:a6:c0:be:18:78:95:d8:76:70:05:4e:9c:ce:72: 68:cc:8f:9d:40:9f:c1:ca:9a:a0:09:af:b5:32:0d: db:49:5d:2c:ea:d1:d8:36:76:d0:77:99:30:c5:17: f6:20:5e:8b:5e:3e:59:78:aa:63:08:84:b5:e8:47: f3:85:17:6d:4a:52:85:cb:b5:12:cf:30:f9:17:c1: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:17:47:44:BD:46:A0:2B:7B:8C:5A:6A:A0:43:AB:42:DC:B6:8D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/085d01ba-b69e-30ae-a421-c117de494284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ba:4f:c2:7c:fd:40:8c:4e:7b:c4:5a:6d:80:65:30:30:50: 59:28:07:c8:a5:56:8d:e8:35:02:f2:c0:ca:2e:ae:56:b2:e3: eb:21:54:4c:17:21:71:2c:ae:b8:21:ef:53:27:e4:0e:db:76: 48:d0:43:89:c7:bb:4d:f1:4f:0b:09:38:fb:68:40:f6:cd:07: fe:ab:f9:99:25:4e:66:1c:ab:76:95:7b:01:a3:b1:ee:72:e5: 3d:29:d3:42:3b:e6:8b:87:fa:f5:33:57:67:32:58:12:5c:bd: 36:a3:f6:70:87:53:f7:12:68:0b:59:80:f3:05:ef:c5:6e:26: f0:3b:30:2e:70:3e:71:a4:af:a0:9f:7d:7b:0c:ab:19:14:52: c4:18:cc:dd:b7:90:7e:09:6f:9e:64:75:a2:d5:c1:d6:0e:b8: 67:ad:25:e3:b1:52:7d:94:aa:e8:4d:e8:ea:e7:27:bc:07:33: 77:3a:22:c6:07:4f:48:71:06:30:99:b5:13:51:7b:2e:7e:41: 1e:64:55:26:b4:d1:be:4d:60:9c:f4:21:42:6f:75:61:55:e6: 1f:ea:0d:d3:31:83:8e:ca:4c:01:7b:ad:7b:33:b2:0b:48:22: a9:22:13:51:c8:e1:42:08:4a:2f:16:89:04:bf:42:4a:d6:08: 2d:77:3d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBfdcmngFZbZlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NGE4ODc2NzMtNDc3NS00MDg5LWJhNWUtOTg2NzhmZTYxYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pw/kH5MGxIn3YUeB8XDN4vDTJ8gfNScm0ed iiz7KSQXYC1cXAPQiba4dSp8X3Nwghj6ZgK1gv6Y/r9K4UbBfSYQYkSCX1SJMhK5 Bgtx/HZeK4XY9/kpCvKzd0zHNWXn1OuPGBaxYjCIj65vtcos5C9UD8iLR/g0pFGV pK+Mb0S4iV65gVvmBzavoUehdtmlmm1aRspEvxsEIOz/7H1/MaUoZQEyxgQqgqhH p7QYERIwpSsypsC+GHiV2HZwBU6cznJozI+dQJ/BypqgCa+1Mg3bSV0s6tHYNnbQ d5kwxRf2IF6LXj5ZeKpjCIS16EfzhRdtSlKFy7USzzD5F8FyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUXR0S9RqAre4xaaqBDq0Lcto0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvMDg1ZDAxYmEtYjY5ZS0z MGFlLWE0MjEtYzExN2RlNDk0Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu6T8J8/UCMTnvEWm2AZTAwUFkoB8ilVo3oNQLywMourlay4+shVEwX IXEsrrgh71Mn5A7bdkjQQ4nHu03xTwsJOPtoQPbNB/6r+ZklTmYcq3aVewGjse5y 5T0p00I75ouH+vUzV2cyWBJcvTaj9nCHU/cSaAtZgPMF78VuJvA7MC5wPnGkr6Cf fXsMqxkUUsQYzN23kH4Jb55kdaLVwdYOuGetJeOxUn2UquhN6OrnJ7wHM3c6IsYH T0hxBjCZtRNRey5+QR5kVSa00b5NYJz0IUJvdWFV5h/qDdMxg47KTAF7rXszsgtI IqkiE1HI4UIISi8WiQS/QkrWCC13PYc= -----END CERTIFICATE-----Generated at Wed May 13 14:55:36 2026 by rpki-client