$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa File: b67aefa7-c52a-31f3-8f3a-81695e41253a.roa (raw, json) Hash identifier: BZl/eEXsfJwUyUXScRY7D8/+7bfaw8dAHQPgHy/Q/bQ= Subject key identifier: 19:C2:7A:9B:7E:2D:B4:D2:AF:AB:CC:81:27:17:84:2F:14:CD:31:E7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DC6CAF5416C8FF9CB2758AA80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 3257 IP address blocks: 173.232.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f5:41:6c:8f:f9:cb:27:58:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=e321ab29-b042-4535-baca-3ae11e2cb573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:63:1b:48:5b:69:18:12:2e:fb:cc:bd:71: 1e:08:01:6f:64:d6:2c:81:bd:ae:36:16:aa:2a:bc: 7f:d9:53:cd:68:6c:14:59:2a:f1:9e:bc:54:60:c4: d5:3f:ad:51:60:43:8d:b8:b3:aa:17:31:5b:94:18: af:b6:e1:bc:6e:2b:2e:d9:de:c5:6c:0f:b4:a4:99: e9:e3:10:e2:26:73:fe:13:09:14:86:41:39:e6:db: 69:50:2f:78:c8:ab:f2:ed:50:d1:8c:13:04:35:b2: d3:67:77:5b:15:55:46:4b:fb:3e:24:46:c5:80:bf: a9:4b:c9:5e:85:d0:60:eb:33:13:0c:29:bb:f5:a1: c1:cf:16:e5:10:e0:91:3e:e8:e6:61:e4:a4:4d:f2: fb:a3:24:81:75:f2:30:12:a6:cd:13:9f:7e:78:43: 43:ed:ce:8d:2b:68:2c:15:d1:0d:1b:e0:27:23:51: ba:a7:d2:30:de:90:ce:bd:19:db:d5:ea:d2:18:82: 6a:2f:04:c0:9c:90:4f:d2:35:bc:89:73:62:b7:9a: c0:96:3f:fa:fc:d2:8f:fb:be:36:d8:ae:2f:3b:33: cb:94:33:0b:07:83:2a:1e:80:a7:62:b2:c5:fe:04: 67:ff:5f:d0:2b:59:1d:22:b0:a3:f6:87:e8:91:d3: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C2:7A:9B:7E:2D:B4:D2:AF:AB:CC:81:27:17:84:2F:14:CD:31:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7c:72:6e:a9:be:db:6c:06:ea:04:5e:25:81:c3:96:5e:c3: 12:1b:32:5b:4c:52:d8:c2:c8:41:59:1b:17:9d:8d:2b:ed:08: 0d:e6:c1:e7:29:b9:e5:12:86:d9:d5:cb:f1:11:ec:7c:dc:04: b2:c6:35:34:72:b3:28:8a:50:eb:14:1c:ab:28:4c:37:88:4a: 0f:b5:6a:c7:d4:e1:d3:91:9f:a9:5a:33:de:69:54:b1:bd:2d: c8:b1:fe:4a:a3:c0:51:05:97:aa:97:41:a3:52:6f:c1:ab:09: 76:69:9a:c2:67:54:6a:c1:38:0d:a6:6a:81:c2:96:45:94:17: 61:bc:a4:4b:6d:ec:4e:74:e9:56:74:42:a2:3e:69:15:df:fa: 9d:8f:a1:75:cd:64:70:3a:86:4d:f4:cb:c1:ef:ec:c6:8d:a7: 32:22:ed:b8:b5:1a:f1:52:4e:ad:29:aa:ac:98:c7:9d:02:79: 88:55:de:53:27:c0:c1:72:f6:58:3b:93:3c:aa:f1:7e:45:66: 5e:67:6d:65:50:56:b6:24:08:2c:f3:d4:b2:8a:22:ae:fe:17: 15:9b:32:85:48:9a:cc:8d:41:34:2e:c9:be:aa:34:34:46:46: 11:33:88:5a:f7:59:12:e1:c9:90:0e:69:5d:0d:d2:e9:ac:e4: c5:d4:16:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyvVBbI/5yydYqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZTMyMWFiMjktYjA0Mi00NTM1LWJhY2EtM2FlMTFlMmNiNTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJljG0hbaRgSLvvMvXEeCAFvZNYsgb2uNhaq Krx/2VPNaGwUWSrxnrxUYMTVP61RYEONuLOqFzFblBivtuG8bisu2d7FbA+0pJnp 4xDiJnP+EwkUhkE55ttpUC94yKvy7VDRjBMENbLTZ3dbFVVGS/s+JEbFgL+pS8le hdBg6zMTDCm79aHBzxblEOCRPujmYeSkTfL7oySBdfIwEqbNE59+eEND7c6NK2gs FdENG+AnI1G6p9Iw3pDOvRnb1erSGIJqLwTAnJBP0jW8iXNit5rAlj/6/NKP+742 2K4vOzPLlDMLB4MqHoCnYrLF/gRn/1/QK1kdIrCj9ofokdNjhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnCept+LbTSr6vMgScXhC8UzTHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjY3YWVmYTctYzUyYS0z MWYzLThmM2EtODE2OTVlNDEyNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF8cm6pvttsBuoEXiWBw5ZewxIbMltMUtjCyEFZGxedjSvtCA3mwecp ueUShtnVy/ER7HzcBLLGNTRysyiKUOsUHKsoTDeISg+1asfU4dORn6laM95pVLG9 Lcix/kqjwFEFl6qXQaNSb8GrCXZpmsJnVGrBOA2maoHClkWUF2G8pEtt7E506VZ0 QqI+aRXf+p2PoXXNZHA6hk30y8Hv7MaNpzIi7bi1GvFSTq0pqqyYx50CeYhV3lMn wMFy9lg7kzyq8X5FZl5nbWVQVrYkCCzz1LKKIq7+FxWbMoVImsyNQTQuyb6qNDRG RhEziFr3WRLhyZAOaV0N0ums5MXUFpQ= -----END CERTIFICATE-----Generated at Tue May 12 21:34:17 2026 by rpki-client