$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa File: 5025a268-fe54-38c3-b693-a58aa12b8433.roa (raw, json) Hash identifier: t449tCXm6t6pu4he6qbvM2EncZyhzRbkJuSJFzHA8mU= Subject key identifier: A5:FD:82:85:05:39:23:EF:49:98:14:8A:45:10:55:89:0C:4B:BD:62 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584DC135C6FBCA32DA60142B7800 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22652 IP address blocks: 173.231.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c6:fb:ca:32:da:60:14:2b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=f2f278f7-ae64-4cba-8021-d1ee51b6dc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e5:8c:f6:7e:0f:68:21:a8:96:95:4f:90:1b: 77:73:38:92:34:30:c4:92:56:af:07:0b:b2:05:4f: 26:b0:ec:82:6a:8c:cf:27:6c:db:34:2a:04:9f:a8: 40:89:4e:4b:92:86:e3:c2:12:f3:04:de:0b:c3:7d: 03:cf:b2:6c:37:3c:f1:e9:98:9e:c1:07:17:c6:f7: af:ee:e3:29:c5:7b:22:7b:33:6d:d6:4a:1b:ce:b3: ff:9c:4a:d3:5a:62:ce:18:b2:84:ac:07:2d:ac:cd: 51:57:8a:f2:06:13:27:50:31:77:83:53:8c:29:0e: 9e:b0:2c:aa:b4:03:e8:48:87:0e:9a:b1:ac:ac:21: 8b:0a:b5:9e:6f:ce:7f:1b:d3:5d:12:90:a1:60:80: 59:58:a3:20:a4:fe:5f:95:0d:cd:b7:a9:bc:ee:32: 1b:39:dd:37:20:ba:9b:3c:60:a2:82:ac:e7:57:13: da:85:cf:97:f0:70:46:24:0a:91:27:27:75:54:7c: e9:e3:1f:0a:0e:29:d2:81:f7:c2:9b:26:16:ce:bc: 0a:31:6c:99:f1:ea:14:58:2d:98:1d:8d:17:f5:94: ff:8d:51:c3:a6:05:55:0e:2e:da:ac:a9:c7:6e:78: 19:0e:21:f9:2a:f3:a1:5a:ae:30:7e:89:f1:c1:81: 46:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FD:82:85:05:39:23:EF:49:98:14:8A:45:10:55:89:0C:4B:BD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6a:aa:d1:c3:f5:bb:55:21:ce:f1:f2:ca:cb:3c:e1:57:06: fa:57:d4:f5:84:86:8a:3c:4a:c8:81:0c:10:10:d9:60:f5:13: 61:55:47:b7:f1:dc:ee:70:aa:9f:a4:7f:ee:a1:ac:35:40:f9: 98:d1:cd:79:29:a1:ec:4a:05:bf:13:33:31:7e:4b:92:89:b3: 0a:0c:42:e0:9f:a9:06:81:55:fb:d6:74:64:cb:9f:af:fa:ad: 50:a5:24:06:dd:54:fa:b9:a4:ac:75:5b:e4:68:dc:f6:33:2c: af:a3:56:4f:7f:83:dc:c1:cc:ec:39:67:8e:91:b9:98:07:f4: 3f:7a:d2:5d:ec:2c:c6:b7:8d:17:ee:bd:1a:b8:6f:69:cf:30: 23:d7:b5:df:53:23:1a:a2:4f:55:7a:1e:35:e4:d3:2b:66:c5: 1c:3d:29:3a:3e:ae:76:62:c1:99:97:c9:b3:f4:86:b1:3b:92: f4:4f:90:0c:8f:71:cf:05:8c:00:1c:35:ad:86:5b:59:96:fa: d1:64:5a:89:63:aa:b7:9e:fa:8d:6f:83:50:1b:3d:69:ef:48: 3f:5f:fe:14:d8:d8:03:3a:79:de:65:f1:96:e0:d9:a2:e1:ca: 1b:58:ee:8b:8d:db:1f:4e:89:c9:74:f0:0c:55:82:6b:df:a6: 67:30:f2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcb7yjLaYBQreAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk ZjJmMjc4ZjctYWU2NC00Y2JhLTgwMjEtZDFlZTUxYjZkYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleWM9n4PaCGolpVPkBt3cziSNDDEklavBwuy BU8msOyCaozPJ2zbNCoEn6hAiU5LkobjwhLzBN4Lw30Dz7JsNzzx6ZiewQcXxvev 7uMpxXsiezNt1kobzrP/nErTWmLOGLKErActrM1RV4ryBhMnUDF3g1OMKQ6esCyq tAPoSIcOmrGsrCGLCrWeb85/G9NdEpChYIBZWKMgpP5flQ3Nt6m87jIbOd03ILqb PGCigqznVxPahc+X8HBGJAqRJyd1VHzp4x8KDinSgffCmyYWzrwKMWyZ8eoUWC2Y HY0X9ZT/jVHDpgVVDi7arKnHbngZDiH5KvOhWq4wfonxwYFGwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX9goUFOSPvSZgUikUQVYkMS71iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTAyNWEyNjgtZmU1NC0z OGMzLWI2OTMtYTU4YWExMmI4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANqqtHD9btVIc7x8srLPOFXBvpX1PWEhoo8SsiBDBAQ2WD1E2FVR7fx 3O5wqp+kf+6hrDVA+ZjRzXkpoexKBb8TMzF+S5KJswoMQuCfqQaBVfvWdGTLn6/6 rVClJAbdVPq5pKx1W+Ro3PYzLK+jVk9/g9zBzOw5Z46RuZgH9D960l3sLMa3jRfu vRq4b2nPMCPXtd9TIxqiT1V6HjXk0ytmxRw9KTo+rnZiwZmXybP0hrE7kvRPkAyP cc8FjAAcNa2GW1mW+tFkWoljqree+o1vg1AbPWnvSD9f/hTY2AM6ed5l8Zbg2aLh yhtY7ouN2x9Oicl08AxVgmvfpmcw8uc= -----END CERTIFICATE-----Generated at Sat May 9 19:33:12 2026 by rpki-client