$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa File: baafe8fc-bff9-3c93-b421-7768a68436d3.roa (raw, json) Hash identifier: YlNveK/9s8cBifChtMcyU69O6wShiEkNvKasJ0s1gZA= Subject key identifier: 82:19:AD:7B:83:E9:BB:2C:6D:D9:F8:3A:FF:56:A9:3E:D7:EF:66:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DB10AF9A2286E4AAE2530F100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa Signing time: Fri 01 May 2026 18:01:46 +0000 ROA not before: Fri 01 May 2026 18:01:46 +0000 ROA not after: Thu 30 Jul 2026 18:01:46 +0000 asID: 19905 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:0a:f9:a2:28:6e:4a:ae:25:30:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 1 18:01:46 2026 GMT Not After : Jul 30 18:01:46 2026 GMT Subject: CN=ae007018-412b-4c92-8895-81955f4c49f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:2c:32:a6:57:40:67:e8:df:f0:31:a4:d6: 43:b3:b7:cd:f2:b2:fb:08:c9:51:18:47:ac:cf:53: a7:86:73:ad:07:e4:53:cc:88:26:9f:83:1f:59:c4: 9f:87:6e:32:14:0b:62:de:5e:86:bb:6f:12:b6:57: 61:fb:ed:0e:43:56:f3:e6:89:48:71:72:04:e7:8d: b4:fb:16:0d:b3:79:71:f1:86:30:a3:a5:95:30:ef: 1c:8e:70:a8:72:34:25:c3:de:de:4c:ed:98:3c:d4: 92:77:fc:50:05:f9:ef:11:fa:e6:43:97:64:6f:53: 61:4e:67:3c:db:37:4a:8e:d8:65:17:41:72:07:bb: ba:d0:e7:4a:34:49:91:89:ab:8e:a7:64:cc:f3:85: 0b:2b:40:1f:a2:68:97:e9:eb:cc:cb:60:b7:02:13: ca:a0:87:75:94:4c:a6:4d:aa:95:6c:d1:e8:87:7c: cf:d2:c5:09:da:da:34:1a:e2:1c:14:61:f1:8b:87: 4d:1c:13:7e:c3:5c:d0:52:d2:4b:ae:4b:25:e0:a9: 2c:a6:06:8c:b2:6c:e0:74:cf:f9:69:11:56:66:57: 94:65:ab:25:55:18:61:aa:3c:b3:6a:17:c7:46:71: 54:a0:92:b0:36:27:37:bd:32:6d:76:00:21:ae:8e: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:AD:7B:83:E9:BB:2C:6D:D9:F8:3A:FF:56:A9:3E:D7:EF:66:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/baafe8fc-bff9-3c93-b421-7768a68436d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:df:bd:71:0b:90:8f:dd:23:6a:64:6e:06:b3:86:ab:3d:41: 42:26:dc:dc:b5:2e:b3:ff:74:dd:ff:f3:88:05:05:80:cf:61: 6b:d3:e8:bb:73:b3:39:c0:0a:6d:af:d3:b7:e7:d4:fe:7f:7e: 36:9c:35:b3:20:c5:61:2c:f0:51:69:25:55:bd:77:ad:80:4c: 37:f9:0e:89:d6:ae:94:4e:45:bb:db:4f:75:0a:0b:0e:11:86: 6e:5b:c0:06:70:46:a7:0d:b2:50:9a:34:c3:6d:15:b3:9b:22: a0:57:30:34:b8:8d:28:ae:f1:49:de:4a:18:29:03:d1:8b:61: 2d:20:63:46:0d:55:57:19:0c:0b:b1:4c:0a:6f:26:31:b8:90: 64:25:c0:ed:17:eb:b8:ff:a2:e9:5f:06:27:be:64:f1:91:5f: 08:17:b3:be:27:78:b9:fa:8b:71:23:e8:86:57:2b:cc:74:47: 0f:24:38:9e:b1:8a:dc:6c:34:4a:ac:c3:e7:47:b8:c5:95:20: 6e:df:a0:9a:47:04:90:86:bd:35:a2:57:a4:51:84:09:59:8d: b4:c2:d2:0e:52:77:a2:8c:a4:8b:09:3d:06:75:7a:36:cd:b9: d5:62:45:37:7e:cb:db:8f:b3:c7:f4:3a:32:c3:5d:53:cf:13: c2:fd:df:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2xCvmiKG5KriUw8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUwMTE4MDE0NloXDTI2MDczMDE4MDE0NlowLzEtMCsGA1UEAxMk YWUwMDcwMTgtNDEyYi00YzkyLTg4OTUtODE5NTVmNGM0OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSgsMqZXQGfo3/AxpNZDs7fN8rL7CMlRGEes z1OnhnOtB+RTzIgmn4MfWcSfh24yFAti3l6Gu28Stldh++0OQ1bz5olIcXIE5420 +xYNs3lx8YYwo6WVMO8cjnCocjQlw97eTO2YPNSSd/xQBfnvEfrmQ5dkb1NhTmc8 2zdKjthlF0FyB7u60OdKNEmRiauOp2TM84ULK0AfomiX6evMy2C3AhPKoId1lEym TaqVbNHoh3zP0sUJ2to0GuIcFGHxi4dNHBN+w1zQUtJLrksl4KkspgaMsmzgdM/5 aRFWZleUZaslVRhhqjyzahfHRnFUoJKwNic3vTJtdgAhro7DTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIZrXuD6bssbdn4Ov9WqT7X72Y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFhZmU4ZmMtYmZmOS0z YzkzLWI0MjEtNzc2OGE2ODQzNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7fvXELkI/dI2pkbgazhqs9QUIm3Ny1LrP/dN3/84gFBYDPYWvT6Ltz sznACm2v07fn1P5/fjacNbMgxWEs8FFpJVW9d62ATDf5DonWrpRORbvbT3UKCw4R hm5bwAZwRqcNslCaNMNtFbObIqBXMDS4jSiu8UneShgpA9GLYS0gY0YNVVcZDAux TApvJjG4kGQlwO0X67j/oulfBie+ZPGRXwgXs74neLn6i3Ej6IZXK8x0Rw8kOJ6x itxsNEqsw+dHuMWVIG7foJpHBJCGvTWiV6RRhAlZjbTC0g5Sd6KMpIsJPQZ1ejbN udViRTd+y9uPs8f0OjLDXVPPE8L934s= -----END CERTIFICATE-----Generated at Fri May 8 20:25:57 2026 by rpki-client