$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: TQa/GTym3ZOefyN30seyg65JbJa80xycLpBAQQD5aVY= Subject key identifier: 29:18:39:C1:8F:AD:68:3A:A1:79:1C:A6:E9:0A:E0:EF:CF:45:E6:C2 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D1B1A069BEF4702785BFB0D00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:06:9b:ef:47:02:78:5b:fb:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=f84c3757-b066-46e7-8ab4-dc19527c428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:8c:cb:9e:fa:13:61:b6:77:74:bc:a2:b8: 51:07:73:02:13:fc:f1:16:26:61:51:34:06:b8:47: 09:8e:b4:41:46:d5:98:b1:99:8b:21:3d:e8:9d:37: b5:56:0a:77:f4:b8:b1:5f:a2:dd:c2:f3:2e:db:45: b9:7c:15:05:b3:d7:a4:62:b3:09:2b:4a:22:93:06: fd:f0:aa:ef:f8:d4:de:d4:84:27:eb:87:b9:70:db: be:05:d5:f1:92:52:8b:70:d1:2b:9d:16:98:2b:79: 23:78:52:3d:68:f0:38:b3:04:d3:d7:84:44:81:37: 0e:ed:b6:de:2b:bc:e2:7b:2e:fc:6b:c0:ab:c7:19: 04:7f:05:79:f7:b2:ff:a5:e2:03:4e:f9:e0:b0:de: 3c:13:06:d4:13:cc:12:d0:c1:d5:7b:2f:14:64:9f: 0f:84:e0:4a:59:27:a0:74:51:7f:0a:09:32:9c:05: f6:9c:16:3c:fb:ad:bb:60:9f:6b:f5:18:7e:0a:96: 6e:19:ea:17:ea:e0:4b:93:45:62:23:a5:72:87:97: 07:8d:d6:c4:55:71:f8:ea:6c:e8:3c:74:a9:0f:dc: 7c:46:9c:a0:0d:91:44:06:cf:2d:9e:50:30:bc:2c: f4:8c:9b:50:00:8d:75:88:6d:ff:25:45:43:2e:0b: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:39:C1:8F:AD:68:3A:A1:79:1C:A6:E9:0A:E0:EF:CF:45:E6:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:1d:28:5d:7a:ce:4b:93:2d:35:c6:24:66:0c:83:ed:28:37: fd:6e:92:c8:4c:46:41:ba:3d:7f:65:73:ba:44:94:c7:1a:76: 0d:b9:db:72:b6:01:15:43:70:87:fb:b5:28:f4:6d:cf:c5:b6: fb:5a:a1:e1:e0:1d:30:a4:4b:1c:c1:0e:5d:6e:1f:43:8d:09: 87:2d:2c:f9:db:ec:47:33:bd:2e:2c:78:27:7c:5a:03:60:47: 3c:58:5e:70:e3:90:06:44:f6:34:d5:48:46:99:3a:1e:b8:65: 85:60:a8:c7:13:c8:fe:a4:29:30:e1:0d:d0:3c:74:6c:d1:28: af:c4:b7:fe:c6:86:05:fa:be:d6:51:82:c2:67:60:e2:b7:fd: 62:2b:a5:ac:77:71:65:7b:88:88:cd:33:02:d1:17:18:15:26: 55:e7:38:af:5f:d5:cb:bf:5e:83:01:c7:c1:a7:4e:c1:97:9e: fa:2e:7e:b5:f8:ad:7d:9d:62:73:b2:7a:86:f1:90:91:e8:bc: 51:a2:89:f4:29:59:b0:15:c6:43:63:04:87:90:8a:b4:48:48: 12:ae:6e:61:79:46:2d:a1:bd:9d:90:e3:19:d8:9f:4b:4c:39: c1:b6:07:46:2e:45:ae:9b:aa:49:fe:03:1e:e9:38:43:36:34: 93:84:79:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgab70cCeFv7DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Zjg0YzM3NTctYjA2Ni00NmU3LThhYjQtZGMxOTUyN2M0MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpuMy576E2G2d3S8orhRB3MCE/zxFiZhUTQG uEcJjrRBRtWYsZmLIT3onTe1Vgp39LixX6LdwvMu20W5fBUFs9ekYrMJK0oikwb9 8Krv+NTe1IQn64e5cNu+BdXxklKLcNErnRaYK3kjeFI9aPA4swTT14REgTcO7bbe K7ziey78a8CrxxkEfwV597L/peIDTvngsN48EwbUE8wS0MHVey8UZJ8PhOBKWSeg dFF/CgkynAX2nBY8+627YJ9r9Rh+CpZuGeoX6uBLk0ViI6Vyh5cHjdbEVXH46mzo PHSpD9x8RpygDZFEBs8tnlAwvCz0jJtQAI11iG3/JUVDLgv7ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkYOcGPrWg6oXkcpukK4O/PRebCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcdKF16zkuTLTXGJGYMg+0oN/1ukshMRkG6PX9lc7pElMcadg2523K2 ARVDcIf7tSj0bc/FtvtaoeHgHTCkSxzBDl1uH0ONCYctLPnb7EczvS4seCd8WgNg RzxYXnDjkAZE9jTVSEaZOh64ZYVgqMcTyP6kKTDhDdA8dGzRKK/Et/7GhgX6vtZR gsJnYOK3/WIrpax3cWV7iIjNMwLRFxgVJlXnOK9f1cu/XoMBx8GnTsGXnvoufrX4 rX2dYnOyeobxkJHovFGiifQpWbAVxkNjBIeQirRISBKubmF5Ri2hvZ2Q4xnYn0tM OcG2B0YuRa6bqkn+Ax7pOEM2NJOEeR4= -----END CERTIFICATE-----Generated at Tue Mar 10 11:59:47 2026 by rpki-client