$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa File: a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa (raw, json) Hash identifier: rWZCkDE5TFtPkkeAHGgpg4oR59gGFUUmOTi9AWlKKqg= Subject key identifier: 44:88:8E:A9:C0:99:3C:2F:B8:68:16:70:3D:A7:17:6F:D3:AC:F7:68 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584DAC457570B17674C3C33F1BC0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11260 IP address blocks: 24.222.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:75:70:b1:76:74:c3:c3:3f:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=6f3e747f-b063-46ea-8eaa-a06c5cb0ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:f4:5c:35:32:15:67:6b:cd:8e:db:74:70: 54:9d:64:63:cf:98:32:38:54:7b:75:31:bd:cd:96: bf:25:c6:bf:8e:6c:f3:d6:91:c3:7b:30:78:7a:f0: 84:3c:c2:94:4b:a0:32:aa:41:82:de:5e:c8:88:b2: 40:1a:2d:e2:c6:04:6d:96:ff:a8:7a:f5:86:e7:91: dc:8b:a8:b4:9e:54:ed:ed:5c:a5:cd:f3:ba:85:9e: d8:32:04:2e:0a:91:b7:93:eb:2d:9e:06:d9:50:30: 95:16:04:d0:36:3f:37:63:2e:2e:b0:77:ee:4b:56: 14:2d:c8:95:15:bf:74:06:72:a6:7b:2d:a1:55:27: e7:e2:50:38:24:ca:d4:55:a3:6a:35:4d:87:c2:15: 6c:83:30:f9:bd:2d:e3:f2:22:0a:00:bf:22:39:98: 87:c9:62:c5:0a:82:9c:cd:fe:5b:cc:26:5b:d4:3f: 5e:c9:e0:3d:04:b2:8a:b8:f0:5e:71:d8:17:4b:ea: 9f:60:60:88:c5:52:60:02:9a:e2:1c:6f:4c:89:2c: 62:a2:23:d9:b2:ff:8d:13:17:7f:64:c6:37:65:1c: 18:cd:f7:df:80:29:dc:16:cc:f9:35:bd:02:51:0d: 11:21:96:1d:7c:90:99:72:d2:3e:ae:44:5f:3b:0c: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:88:8E:A9:C0:99:3C:2F:B8:68:16:70:3D:A7:17:6F:D3:AC:F7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a2241e64-ed32-3f3d-8b1e-19c73ebc633b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.222.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:88:56:33:c2:1c:69:f3:39:99:3f:a6:cf:ee:a3:e2:95:3e: 74:fe:31:36:06:d5:be:b3:f4:e2:08:71:4c:19:4d:2b:b7:d9: c2:28:be:d5:32:3a:09:3d:d7:8f:a9:ef:a8:8c:15:59:99:5e: 0f:d3:e2:de:45:1f:e0:0e:bc:c5:96:50:0a:03:11:55:d4:67: 3b:8a:29:64:a9:e7:e8:44:4d:f7:cb:66:7d:6b:39:26:ea:62: eb:2e:3d:76:56:68:09:ac:c9:af:1c:ec:11:06:15:29:a9:54: bb:fa:1b:66:34:1b:74:50:43:e0:a8:36:43:6e:fc:47:0a:b4: 9a:a5:25:54:b4:e3:3f:f9:9d:29:30:f8:38:ad:d4:ab:2e:96: 4c:54:49:59:81:0b:4d:ae:74:0c:ce:03:8c:72:07:3a:45:91: e6:81:48:d2:30:ac:91:a8:e3:47:f8:25:7e:65:4b:c9:fc:f1: 0c:a4:87:a9:71:d4:02:63:cb:cc:30:b1:19:08:de:13:e7:87: c0:a4:ed:58:6b:e1:7a:53:31:f0:b5:c4:38:7e:22:b3:8d:04: 16:1b:d0:b0:74:52:63:0f:9c:42:27:03:09:ad:98:cf:69:35: 93:7e:c7:fc:d1:f0:cb:38:cc:0f:cd:80:52:fa:87:32:ec:ac: 14:f0:13:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXVwsXZ0w8M/G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NmYzZTc0N2YtYjA2My00NmVhLThlYWEtYTA2YzVjYjBmZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM70XDUyFWdrzY7bdHBUnWRjz5gyOFR7dTG9 zZa/Jca/jmzz1pHDezB4evCEPMKUS6AyqkGC3l7IiLJAGi3ixgRtlv+oevWG55Hc i6i0nlTt7VylzfO6hZ7YMgQuCpG3k+stngbZUDCVFgTQNj83Yy4usHfuS1YULciV Fb90BnKmey2hVSfn4lA4JMrUVaNqNU2HwhVsgzD5vS3j8iIKAL8iOZiHyWLFCoKc zf5bzCZb1D9eyeA9BLKKuPBecdgXS+qfYGCIxVJgApriHG9MiSxioiPZsv+NExd/ ZMY3ZRwYzfffgCncFsz5Nb0CUQ0RIZYdfJCZctI+rkRfOwy1mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESIjqnAmTwvuGgWcD2nF2/TrPdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYTIyNDFlNjQtZWQzMi0z ZjNkLThiMWUtMTljNzNlYmM2MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGN7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCIVjPCHGnzOZk/ps/uo+KVPnT+MTYG1b6z9OIIcUwZTSu32cIovtUy Ogk914+p76iMFVmZXg/T4t5FH+AOvMWWUAoDEVXUZzuKKWSp5+hETffLZn1rOSbq YusuPXZWaAmsya8c7BEGFSmpVLv6G2Y0G3RQQ+CoNkNu/EcKtJqlJVS04z/5nSkw +Dit1KsulkxUSVmBC02udAzOA4xyBzpFkeaBSNIwrJGo40f4JX5lS8n88Qykh6lx 1AJjy8wwsRkI3hPnh8Ck7Vhr4XpTMfC1xDh+IrONBBYb0LB0UmMPnEInAwmtmM9p NZN+x/zR8Ms4zA/NgFL6hzLsrBTwEw8= -----END CERTIFICATE-----Generated at Wed May 13 07:06:46 2026 by rpki-client