$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: //Gg8CGoqSK9rvHX3g0DcbNYW+QuIgRq9M6HMUtDeow= Subject key identifier: D7:85:96:50:E3:AD:F2:B7:2A:3E:05:28:9B:4E:04:77:64:E4:95:90 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584DE9B079DE1F1D32D65B9A8710 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:79:de:1f:1d:32:d6:5b:9a:87:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=52988521-e979-472e-8894-4f4bd6e1174d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:df:48:cd:93:b0:62:c0:8a:da:97:7b:4c: 72:ad:0e:8f:7d:3d:6d:83:f1:1a:ab:ed:ca:40:a3: 12:8b:0c:44:80:6d:17:5b:e2:1b:57:2f:0a:71:7d: 8e:87:57:f7:2b:15:85:ce:16:80:f4:31:a1:b7:78: 20:25:04:19:69:4b:bf:66:22:b3:18:f9:75:ed:3c: bc:af:58:df:32:19:38:a7:8c:29:57:1f:11:96:dd: 2e:f1:4f:6b:aa:de:90:e5:37:4d:fb:f6:11:29:90: 17:69:4c:c9:fb:de:fa:dd:ba:eb:96:53:51:e3:5e: 54:3b:45:9c:b5:89:c2:d9:c1:d0:77:d8:71:d6:d5: 70:c6:c2:d2:0b:cd:89:43:54:ed:b4:8a:26:50:57: ac:ee:7c:12:f4:a4:d7:89:5c:1a:cc:80:fd:91:5b: 81:d1:50:ec:ad:89:79:aa:22:1d:3a:df:5e:c2:14: bd:d7:5d:6c:65:e4:06:d6:0f:dd:a3:0e:99:52:6a: a8:c7:b0:f8:83:09:4a:77:15:dd:a1:5b:bd:30:1e: e7:86:92:ba:82:c4:3e:7c:73:c4:ab:1b:eb:28:50: fb:90:87:9d:f7:27:d9:4e:6b:50:8c:c7:b8:4a:c8: fc:cd:12:f1:9c:84:0d:5c:41:92:33:6a:09:3b:2f: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:96:50:E3:AD:F2:B7:2A:3E:05:28:9B:4E:04:77:64:E4:95:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cf:13:a7:60:59:63:bd:30:0a:99:b5:d9:05:70:b1:c6:c7: 9e:a3:ad:ab:8e:60:85:6d:be:43:04:7c:99:26:9b:f1:4c:bb: 7f:7b:c3:dd:81:3e:c6:17:72:98:1e:01:bc:58:a6:03:eb:03: 7b:01:e9:7b:2f:ce:ac:de:08:6f:4f:46:c3:76:30:87:f2:2c: d6:39:a3:1c:1d:7f:50:d6:d7:67:4f:d9:9f:3e:ab:da:2c:c1: 9b:ee:9b:76:22:92:f3:eb:d3:d9:a7:b8:26:20:fb:c6:b3:d6: 59:49:70:ed:ae:6a:36:22:48:ab:f3:3f:0e:ab:eb:8d:15:c2: c2:78:16:98:19:b8:8f:76:b6:ba:01:da:36:ba:26:c0:dd:fe: 3d:94:31:20:d6:0e:4d:f0:43:ef:59:a1:ca:e5:e7:4e:a0:1a: cd:3e:77:07:fd:d6:a9:ec:16:e3:d5:cb:1b:99:21:61:38:fc: 42:92:73:1a:16:f0:e0:5d:89:29:2b:cf:28:a5:99:a2:14:88: 74:9a:e3:c2:45:35:92:bc:fc:38:9f:d7:95:84:3d:f2:1a:47: 02:fc:bc:b5:b0:6b:95:2e:2d:06:e8:40:37:c3:44:c0:56:6a: 2c:71:1b:c0:5d:dd:f2:43:7c:0d:36:42:b4:67:b7:70:a7:24: 57:aa:05:70 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3psHneHx0y1luahxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NTI5ODg1MjEtZTk3OS00NzJlLTg4OTQtNGY0YmQ2ZTExNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL7fSM2TsGLAitqXe0xyrQ6PfT1tg/Eaq+3K QKMSiwxEgG0XW+IbVy8KcX2Oh1f3KxWFzhaA9DGht3ggJQQZaUu/ZiKzGPl17Ty8 r1jfMhk4p4wpVx8Rlt0u8U9rqt6Q5TdN+/YRKZAXaUzJ+9763brrllNR415UO0Wc tYnC2cHQd9hx1tVwxsLSC82JQ1TttIomUFes7nwS9KTXiVwazID9kVuB0VDsrYl5 qiIdOt9ewhS9111sZeQG1g/dow6ZUmqox7D4gwlKdxXdoVu9MB7nhpK6gsQ+fHPE qxvrKFD7kIed9yfZTmtQjMe4Ssj8zRLxnIQNXEGSM2oJOy9q9wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNeFllDjrfK3Kj4FKJtOBHdk5JWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTzxOnYFljvTAKmbXZBXCxxseeo62rjmCF bb5DBHyZJpvxTLt/e8PdgT7GF3KYHgG8WKYD6wN7Ael7L86s3ghvT0bDdjCH8izW OaMcHX9Q1tdnT9mfPqvaLMGb7pt2IpLz69PZp7gmIPvGs9ZZSXDtrmo2Ikir8z8O q+uNFcLCeBaYGbiPdra6Ado2uibA3f49lDEg1g5N8EPvWaHK5edOoBrNPncH/dap 7Bbj1csbmSFhOPxCknMaFvDgXYkpK88opZmiFIh0muPCRTWSvPw4n9eVhD3yGkcC /Ly1sGuVLi0G6EA3w0TAVmoscRvAXd3yQ3wNNkK0Z7dwpyRXqgVw -----END CERTIFICATE-----Generated at Mon May 25 03:05:17 2026 by rpki-client