$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa File: af6e1c06-e0dd-30a7-b762-34073540394a.roa (raw, json) Hash identifier: /m11oA57jw39dDX7PNh73Bq/8IoaeS7R6qTuKAAS2FE= Subject key identifier: 97:86:8D:56:C7:A5:8E:59:1F:DE:E9:A7:65:CF:84:43:6C:3A:3D:0A Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584DC565C0F1CA5410E3A23C5080 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 16524 IP address blocks: 72.11.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:c0:f1:ca:54:10:e3:a2:3c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=f5cbba32-f1cb-4a26-8e5a-c4814f513590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:0d:4d:51:7f:b5:30:84:21:68:14:4c:4c: e7:19:48:41:d3:d4:16:75:c6:1b:13:64:ea:08:56: 06:0a:8d:d0:ab:06:36:0f:55:1f:26:80:7b:d9:a6: 79:7e:e9:9e:c9:ed:ab:a7:df:7e:d7:b6:04:49:b5: 89:52:64:12:81:26:2c:e7:3a:fd:3b:93:1f:61:1c: c9:4d:9e:15:9d:5f:53:a9:f8:28:86:8a:15:85:c0: 1c:96:5d:5b:c4:bc:d7:fc:e7:31:93:ed:79:cb:f4: 26:be:89:48:8e:9a:14:db:3b:ce:2e:0c:a4:43:ac: de:cc:bb:52:f3:cc:8e:0d:6a:0c:61:80:d0:b2:e0: dd:d9:a8:e0:2e:a8:a9:0b:97:fa:12:b9:62:0c:1b: b4:2a:cb:6c:77:d5:30:d4:2e:48:08:06:c9:d0:ab: d8:d8:78:0c:95:e5:93:69:2b:a1:28:7e:05:a2:54: 17:e0:00:99:37:dc:7e:45:e3:82:d7:0f:0f:05:dc: d6:dd:98:f7:17:23:1f:15:10:62:ff:97:83:f8:79: 90:6c:01:61:d6:5b:a6:01:9a:42:b2:64:24:77:a4: c2:af:b9:e1:2c:3e:44:25:99:45:19:d9:95:c0:d3: 58:bd:38:af:9d:2f:66:35:d8:bf:34:a7:82:bd:86: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:86:8D:56:C7:A5:8E:59:1F:DE:E9:A7:65:CF:84:43:6C:3A:3D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/af6e1c06-e0dd-30a7-b762-34073540394a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv4: 72.11.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a3:e2:d1:24:ab:bf:2b:fa:5d:e1:d5:08:63:ea:94:8b:6b: eb:a0:ad:21:f9:c5:a0:ef:89:5a:29:f2:09:f2:76:4c:35:31: cb:6f:85:e4:67:e0:fa:79:34:db:4d:6c:8d:40:25:9f:e0:7a: ad:06:e1:d9:ac:54:a7:85:26:b5:3f:30:0d:d1:fe:bc:71:3a: 7a:11:a9:70:f6:f1:33:d1:f8:d9:50:cb:83:49:03:63:3f:7a: 36:1f:83:ce:ed:68:07:15:e2:cc:92:a0:29:b0:0e:b7:31:da: 0c:7b:88:c2:55:83:d9:14:d2:d9:9e:7b:ab:22:1c:0b:38:51: b7:f2:e5:ca:0c:55:14:0c:13:c8:be:d4:3a:ef:b5:7a:8d:cc: b7:41:66:27:6a:d7:f3:02:10:9c:41:a7:de:43:e0:65:1a:67: 31:32:d6:6c:af:e8:80:06:92:fd:19:d0:02:3c:40:69:60:52: 8f:f0:d6:a3:46:59:cd:95:74:0a:bd:b6:18:bc:92:32:59:ab: 8c:c0:88:9f:4f:91:46:cf:0f:55:69:14:92:3c:b1:d1:ef:59: 23:ce:64:17:3c:8c:1b:d7:1d:ba:9a:c3:f0:fe:6d:34:0f:4b: 21:ad:ed:be:fa:84:4b:aa:4e:f3:4f:ae:c9:70:39:22:ac:37: ea:e8:ca:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZcDxylQQ46I8UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk ZjVjYmJhMzItZjFjYi00YTI2LThlNWEtYzQ4MTRmNTEzNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocsNTVF/tTCEIWgUTEznGUhB09QWdcYbE2Tq CFYGCo3QqwY2D1UfJoB72aZ5fumeye2rp99+17YESbWJUmQSgSYs5zr9O5MfYRzJ TZ4VnV9TqfgohooVhcAcll1bxLzX/Ocxk+15y/QmvolIjpoU2zvOLgykQ6zezLtS 88yODWoMYYDQsuDd2ajgLqipC5f6ErliDBu0Kstsd9Uw1C5ICAbJ0KvY2HgMleWT aSuhKH4FolQX4ACZN9x+ReOC1w8PBdzW3Zj3FyMfFRBi/5eD+HmQbAFh1lumAZpC smQkd6TCr7nhLD5EJZlFGdmVwNNYvTivnS9mNdi/NKeCvYacAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeGjVbHpY5ZH97pp2XPhENsOj0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvYWY2ZTFjMDYtZTBkZC0z MGE3LWI3NjItMzQwNzM1NDAzOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAvZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCj4tEkq78r+l3h1Qhj6pSLa+ugrSH5xaDviVop8gnydkw1MctvheRn 4Pp5NNtNbI1AJZ/geq0G4dmsVKeFJrU/MA3R/rxxOnoRqXD28TPR+NlQy4NJA2M/ ejYfg87taAcV4sySoCmwDrcx2gx7iMJVg9kU0tmee6siHAs4Ubfy5coMVRQME8i+ 1DrvtXqNzLdBZidq1/MCEJxBp95D4GUaZzEy1myv6IAGkv0Z0AI8QGlgUo/w1qNG Wc2VdAq9thi8kjJZq4zAiJ9PkUbPD1VpFJI8sdHvWSPOZBc8jBvXHbqaw/D+bTQP SyGt7b76hEuqTvNPrslwOSKsN+royqM= -----END CERTIFICATE-----Generated at Wed May 13 12:50:10 2026 by rpki-client