$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa File: a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa (raw, json) Hash identifier: KUg2+MrHEVjUGDD2lcvFYQWL4wenNnauBGo/W9oRp6c= Subject key identifier: DD:1F:F1:18:A2:F6:11:A4:EC:23:40:ED:E9:B1:13:D3:E5:8E:7B:29 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DF905FDBCD88B27486B4E9200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa Signing time: Wed 27 May 2026 12:49:56 +0000 ROA not before: Wed 27 May 2026 12:49:56 +0000 ROA not after: Tue 25 Aug 2026 12:49:56 +0000 asID: 32043 IP address blocks: 173.232.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f9:05:fd:bc:d8:8b:27:48:6b:4e:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 27 12:49:56 2026 GMT Not After : Aug 25 12:49:56 2026 GMT Subject: CN=2c52561d-aa81-49f2-854d-53278d592f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:83:33:b8:0b:69:d9:a4:a9:e3:cf:93:ba: a4:df:fe:88:6d:a3:f2:80:ea:42:d7:5a:c6:9d:e8: 5b:be:ca:90:bf:8b:55:a6:d8:39:1d:24:1c:de:3e: 46:d7:35:e4:1d:f4:29:76:8c:d8:04:e9:0b:55:4e: eb:49:9e:33:13:a8:e7:f9:16:12:6e:af:7b:a3:a2: 02:01:b0:a0:10:f7:39:4d:f4:e2:9e:28:da:c0:63: fa:72:31:55:55:d2:22:23:3e:84:6d:a6:24:36:d4: 66:73:b8:b3:ba:85:2b:c5:6c:57:2a:65:29:6e:88: 7a:38:76:be:9f:f7:c5:68:ad:e1:77:76:77:23:05: c4:05:bb:40:f1:e3:12:ce:9d:2e:03:5b:64:3b:bd: 02:c9:05:7c:2b:46:a5:d7:d4:58:d7:14:66:c5:08: d2:6c:65:f4:d1:3c:a3:6e:42:f6:3c:d5:47:20:17: 34:27:15:c0:c2:04:b6:c3:f8:28:c5:f8:c9:98:68: 0d:d6:f4:ca:61:20:f9:33:5d:6e:9a:dd:46:e1:b7: 06:03:6f:88:75:30:eb:23:42:4e:22:26:65:ee:0d: 53:d0:e1:7e:79:5b:dc:03:7e:18:b1:77:61:23:f6: b7:de:e9:12:ae:ff:2b:51:e6:26:c2:a4:db:4e:e6: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1F:F1:18:A2:F6:11:A4:EC:23:40:ED:E9:B1:13:D3:E5:8E:7B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a0da8ba1-cc8b-32ef-83fb-26a38b1961da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9f:e6:a5:22:ea:11:1f:ba:68:82:73:13:cd:bc:7d:76:d3: 8f:55:86:ec:c4:9e:4c:72:ab:81:1b:79:b7:31:7b:eb:00:64: e7:96:83:6b:2c:e2:d7:21:c6:fe:d4:16:a4:7d:63:c6:78:e1: ab:ae:e0:ab:d2:5c:1a:5b:de:0a:07:7e:23:ca:bc:c5:04:af: 6e:aa:0c:89:5a:22:e1:9a:08:01:04:33:2b:6b:92:77:fc:f7: f5:26:30:b8:35:52:6d:75:20:48:2a:f0:fe:1f:4c:51:00:e9: fb:17:c8:19:20:e2:f4:a2:33:b3:ee:dc:4c:75:7f:aa:1d:56: 5b:e2:12:e3:e3:5a:e7:6d:a0:6c:c1:4b:fe:fa:53:a5:3b:f6: d9:b1:23:80:6c:8e:4e:36:6c:06:59:2a:d2:97:ba:3b:e3:83: 67:4e:d3:6b:02:33:49:5c:0b:a6:32:07:0f:f5:67:c9:15:9f: f6:2e:83:79:60:90:66:50:91:1f:f0:9b:6b:5d:bc:6c:33:03: 89:68:5f:00:48:24:ad:72:3d:ec:8e:91:93:69:a9:21:13:66: 92:12:8c:d5:59:c8:cb:98:37:1b:e6:f4:1a:a4:92:1c:67:8b: 66:c5:e6:9d:e1:1f:35:45:c9:18:46:4b:26:0c:a0:4b:15:90: 12:aa:bd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE35Bf282IsnSGtOkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUyNzEyNDk1NloXDTI2MDgyNTEyNDk1NlowLzEtMCsGA1UEAxMk MmM1MjU2MWQtYWE4MS00OWYyLTg1NGQtNTMyNzhkNTkyZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwuDM7gLadmkqePPk7qk3/6IbaPygOpC11rG nehbvsqQv4tVptg5HSQc3j5G1zXkHfQpdozYBOkLVU7rSZ4zE6jn+RYSbq97o6IC AbCgEPc5TfTinijawGP6cjFVVdIiIz6EbaYkNtRmc7izuoUrxWxXKmUpboh6OHa+ n/fFaK3hd3Z3IwXEBbtA8eMSzp0uA1tkO70CyQV8K0al19RY1xRmxQjSbGX00Tyj bkL2PNVHIBc0JxXAwgS2w/goxfjJmGgN1vTKYSD5M11umt1G4bcGA2+IdTDrI0JO IiZl7g1T0OF+eVvcA34YsXdhI/a33ukSrv8rUeYmwqTbTua8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0f8Rii9hGk7CNA7emxE9PljnspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTBkYThiYTEtY2M4Yi0z MmVmLTgzZmItMjZhMzhiMTk2MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2f5qUi6hEfumiCcxPNvH12049VhuzEnkxyq4Ebebcxe+sAZOeWg2ss 4tchxv7UFqR9Y8Z44auu4KvSXBpb3goHfiPKvMUEr26qDIlaIuGaCAEEMytrknf8 9/UmMLg1Um11IEgq8P4fTFEA6fsXyBkg4vSiM7Pu3Ex1f6odVlviEuPjWudtoGzB S/76U6U79tmxI4Bsjk42bAZZKtKXujvjg2dO02sCM0lcC6YyBw/1Z8kVn/Yug3lg kGZQkR/wm2tdvGwzA4loXwBIJK1yPeyOkZNpqSETZpISjNVZyMuYNxvm9Bqkkhxn i2bF5p3hHzVFyRhGSyYMoEsVkBKqvT8= -----END CERTIFICATE-----Generated at Fri May 29 17:51:41 2026 by rpki-client