$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json) Hash identifier: L38Ihe3YB6Ech1ZGO6BHvRrocLldwbdY/fIWX2uSEME= Subject key identifier: 9F:2C:32:DC:1F:32:14:67:65:73:4D:58:37:92:FA:2D:67:92:54:8E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584DC135C6F0611336AFC2D40CC0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22652 IP address blocks: 173.231.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c6:f0:61:13:36:af:c2:d4:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=4df42ebf-3c66-43df-95ce-9879adeb460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:62:48:ec:a3:49:7b:4a:f4:fa:ae:ae:5b: 04:db:6b:c5:ac:7c:54:25:bd:f3:91:68:7f:52:40: 56:97:34:db:e3:a5:ee:a1:c9:e4:d9:62:33:e0:89: 8d:98:32:01:78:cf:0c:f6:32:5d:42:cd:aa:32:57: d5:0a:9e:67:92:3e:2d:94:89:11:77:17:fe:62:05: 8c:f1:8a:73:44:74:d3:03:d7:50:4e:86:27:ba:dd: ae:8e:d7:73:fc:01:aa:b4:6f:3a:bc:b3:4d:67:ce: 6b:3c:63:53:4f:2d:19:6f:3d:3a:85:34:e6:e7:ef: 04:f6:22:93:2f:7b:1f:cf:da:22:5e:c9:e6:5a:d0: c6:8b:1c:bb:9b:99:aa:54:c8:db:97:28:d9:0e:bb: 91:1f:22:d3:01:89:1d:c8:f5:33:45:c3:1d:0c:3e: f7:62:e7:42:3d:9c:5f:42:b9:33:57:b4:11:3a:55: 40:a9:ba:fb:72:43:e6:fa:41:c3:e4:53:0c:9f:9f: 23:58:42:67:d6:14:a9:7a:d6:02:bf:0b:c8:b0:d0: 8e:cf:f0:4f:db:db:fd:16:60:3a:5a:3e:f3:8a:de: 61:b8:8a:a8:72:bc:21:c8:62:ec:35:e8:a2:8b:23: 77:ad:ee:a1:f2:a0:37:f1:12:5e:74:fb:81:b3:e6: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2C:32:DC:1F:32:14:67:65:73:4D:58:37:92:FA:2D:67:92:54:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:92:bb:6b:b0:fb:ad:3f:11:fa:7e:80:5e:31:93:a7:eb:a2: 44:a9:3f:47:ed:e4:1e:a4:b1:2d:67:e0:e9:9c:2b:d1:4f:70: e1:3a:9a:9a:1f:be:66:11:1d:89:2a:7e:13:7b:0a:4f:45:71: ce:5b:9b:7e:54:8d:41:97:79:c8:c6:04:1b:ea:dd:36:60:a7: 21:c2:0f:04:8e:bd:52:c0:49:2b:89:a4:57:6b:c4:a7:b5:e6: 00:25:49:87:7e:dc:4d:0a:4b:bc:88:64:e9:da:0c:b9:29:a5: 18:e5:2a:d9:ca:67:9f:c2:a5:b2:0f:d8:4f:f6:ca:8a:13:c3: 22:5d:28:47:73:21:d5:a1:ad:2c:1a:cf:3b:45:ba:fb:79:06: 68:24:03:aa:bf:41:99:3c:9b:ec:b1:0d:e7:79:1b:05:63:aa: 32:81:fd:06:e2:c6:e9:15:39:38:3e:50:d7:4b:2d:c3:10:38: 7c:6a:fe:5f:19:d2:b0:5d:b6:38:9b:86:ab:07:0b:b1:9f:73: 58:a5:68:50:5e:d4:90:bb:0f:9e:30:24:e3:c9:25:4d:2f:9e: 0a:76:14:a6:ea:0d:a1:d3:51:99:7e:d2:69:ab:e8:eb:c6:80: 9a:ea:71:a1:eb:af:66:8f:56:a2:0d:dd:af:ab:b3:5c:4d:29: 73:a8:f0:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcbwYRM2r8LUDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk NGRmNDJlYmYtM2M2Ni00M2RmLTk1Y2UtOTg3OWFkZWI0NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw5iSOyjSXtK9PqurlsE22vFrHxUJb3zkWh/ UkBWlzTb46Xuocnk2WIz4ImNmDIBeM8M9jJdQs2qMlfVCp5nkj4tlIkRdxf+YgWM 8YpzRHTTA9dQToYnut2ujtdz/AGqtG86vLNNZ85rPGNTTy0Zbz06hTTm5+8E9iKT L3sfz9oiXsnmWtDGixy7m5mqVMjblyjZDruRHyLTAYkdyPUzRcMdDD73YudCPZxf QrkzV7QROlVAqbr7ckPm+kHD5FMMn58jWEJn1hSpetYCvwvIsNCOz/BP29v9FmA6 Wj7zit5huIqocrwhyGLsNeiiiyN3re6h8qA38RJedPuBs+bsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8sMtwfMhRnZXNNWDeS+i1nklSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmE0NDhhMzctMGEyMS0z NjNlLWJlZjMtMmY5ZWU3ZGM1NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAredsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6Su2uw+60/Efp+gF4xk6frokSpP0ft5B6ksS1n4OmcK9FPcOE6mpof vmYRHYkqfhN7Ck9Fcc5bm35UjUGXecjGBBvq3TZgpyHCDwSOvVLASSuJpFdrxKe1 5gAlSYd+3E0KS7yIZOnaDLkppRjlKtnKZ5/CpbIP2E/2yooTwyJdKEdzIdWhrSwa zztFuvt5BmgkA6q/QZk8m+yxDed5GwVjqjKB/QbixukVOTg+UNdLLcMQOHxq/l8Z 0rBdtjibhqsHC7Gfc1ilaFBe1JC7D54wJOPJJU0vngp2FKbqDaHTUZl+0mmr6OvG gJrqcaHrr2aPVqIN3a+rs1xNKXOo8Dk= -----END CERTIFICATE-----Generated at Sat May 9 19:28:26 2026 by rpki-client