$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa File: 2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa (raw, json) Hash identifier: inSdkqwEz1bTYlfWi4erOWVnmgblsfOJ7NmYD4cFwnY= Subject key identifier: 4A:B8:65:78:54:33:63:F0:F5:98:13:01:8A:9F:9A:50:18:FA:50:36 Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Certificate serial: 010D0C9F4328584D9B8556E85F01916D23BFB3E8 Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 62240 IP address blocks: 69.168.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:56:e8:5f:01:91:6d:23:bf:b3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=e6ca170a-d7f8-4531-8158-a757d9ce134a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:b8:64:e0:87:04:02:f8:b0:5e:62:82:34: d8:45:eb:53:2a:65:2d:59:94:76:43:f0:59:a3:17: ea:5c:5e:50:57:68:dd:4b:d7:6e:88:9b:45:69:81: 38:99:c5:8f:06:56:dc:b0:f5:2a:3e:a4:68:cf:9b: aa:87:47:ca:0f:c6:b0:da:5b:18:54:93:1b:fe:19: ae:b2:29:7b:e1:24:22:ca:d0:ce:b8:7a:fa:11:35: eb:27:91:5f:58:85:09:c1:28:15:56:fe:25:52:96: 6b:a2:40:3f:d4:de:84:d7:95:88:c8:5a:f1:be:ec: d9:8a:6a:0b:e3:3f:60:11:dc:1e:79:2b:54:09:c6: fc:84:b8:d8:c3:d3:ba:4c:7b:76:e8:ff:a9:7a:a3: 3b:fb:10:d6:7d:a8:3d:3d:22:8d:bd:9b:da:80:1d: 63:22:42:76:5d:f2:cd:a0:e6:7e:22:5c:08:e8:b9: 52:6e:19:89:ad:61:55:b7:59:be:b8:47:ee:b5:94: 30:0e:8e:64:de:d9:d0:55:3b:14:47:ae:0b:4a:05: b6:13:d9:5e:f4:70:df:33:f2:2d:4f:fd:c3:93:d2: aa:77:7e:0d:1e:5f:45:d1:47:fe:40:a5:1d:00:e1: c5:b4:98:b4:5d:45:76:c0:a4:36:5d:6d:fa:21:fc: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B8:65:78:54:33:63:F0:F5:98:13:01:8A:9F:9A:50:18:FA:50:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2aafe8a7-a001-319f-b49b-ee4bd7d3c942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl X509v3 Authority Key Identifier: keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer sbgp-ipAddrBlock: critical IPv4: 69.168.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1c:9f:4c:ba:54:78:1d:cd:05:2a:4d:88:ef:97:f0:57:14: 86:cd:31:9d:c2:59:d7:f1:da:db:cd:6e:93:a4:4c:47:e3:fa: f2:e6:fe:43:7d:27:21:eb:51:ef:43:d5:f1:5f:85:8a:4e:b2: d5:d7:03:df:80:22:af:3a:4b:ed:85:f7:11:fb:8f:48:7c:a2: 51:be:9d:b1:b6:4a:fd:85:f5:c1:a5:7c:13:d4:ef:39:6d:be: 27:81:b3:01:aa:2b:33:27:ca:56:82:54:3d:3a:3f:83:36:8f: 08:10:03:17:bd:aa:9e:e9:a2:9e:83:04:f7:a5:99:c4:91:e2: 0a:33:fc:35:b2:fb:63:52:3e:ef:01:ac:e5:dd:a4:98:65:74: b8:30:a3:81:44:21:25:72:c5:49:4f:80:05:e5:90:1e:74:6a: ca:ee:53:a9:06:13:a3:8c:4a:01:84:bc:10:f2:6b:05:7d:82: 71:2a:70:52:e0:56:33:52:8a:f4:e8:48:a6:6e:1f:f2:2b:3b: fc:b6:7b:ee:54:c6:d2:b1:3d:c1:a9:c4:e9:77:94:cd:b4:b8: 93:ad:bd:f8:f4:9d:36:10:49:c6:31:71:f5:41:c6:f1:c8:0d: f0:94:17:b3:08:f8:63:f3:ea:2e:5c:a6:97:ec:7b:54:32:21: 5a:24:55:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVboXwGRbSO/s+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm MjE4MB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ZTZjYTE3MGEtZDdmOC00NTMxLTgxNTgtYTc1N2Q5Y2UxMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpi4ZOCHBAL4sF5igjTYRetTKmUtWZR2Q/BZ oxfqXF5QV2jdS9duiJtFaYE4mcWPBlbcsPUqPqRoz5uqh0fKD8aw2lsYVJMb/hmu sil74SQiytDOuHr6ETXrJ5FfWIUJwSgVVv4lUpZrokA/1N6E15WIyFrxvuzZimoL 4z9gEdweeStUCcb8hLjYw9O6THt26P+peqM7+xDWfag9PSKNvZvagB1jIkJ2XfLN oOZ+IlwI6LlSbhmJrWFVt1m+uEfutZQwDo5k3tnQVTsUR64LSgW2E9le9HDfM/It T/3Dk9Kqd34NHl9F0Uf+QKUdAOHFtJi0XUV2wKQ2XW36Ify/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq4ZXhUM2Pw9ZgTAYqfmlAY+lA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvMmFhZmU4YTctYTAwMS0z MTlmLWI0OWItZWU0YmQ3ZDNjOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARajsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMcn0y6VHgdzQUqTYjvl/BXFIbNMZ3CWdfx2tvNbpOkTEfj+vLm/kN9 JyHrUe9D1fFfhYpOstXXA9+AIq86S+2F9xH7j0h8olG+nbG2Sv2F9cGlfBPU7zlt vieBswGqKzMnylaCVD06P4M2jwgQAxe9qp7pop6DBPelmcSR4goz/DWy+2NSPu8B rOXdpJhldLgwo4FEISVyxUlPgAXlkB50asruU6kGE6OMSgGEvBDyawV9gnEqcFLg VjNSivToSKZuH/IrO/y2e+5UxtKxPcGpxOl3lM20uJOtvfj0nTYQScYxcfVBxvHI DfCUF7MI+GPz6i5cppfse1QyIVokVfg= -----END CERTIFICATE-----Generated at Wed May 13 08:52:06 2026 by rpki-client