$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: XjuMOeGpTQ32tzTxlPlZ1zYrowJIidgZ7usqjIVFuGk= Subject key identifier: C4:4E:8B:C5:34:CA:27:BF:C5:16:53:CF:E6:07:6E:62:EB:BA:86:00 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DFBD5DFA72F6261FA29ACB3E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:df:a7:2f:62:61:fa:29:ac:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=ba97b545-032e-46f0-b426-289897b0f247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:b7:a9:5a:b1:18:fd:dc:66:02:74:2a:65: 33:bc:35:54:ac:d2:27:0c:2b:7b:96:8f:85:50:8b: 23:3d:41:33:47:7c:d7:78:16:d9:66:21:14:b9:8f: 2a:05:c7:3f:14:d7:88:3d:b5:ba:b2:5e:5a:89:57: 29:ca:bd:06:e2:65:19:26:94:ad:bf:e5:70:23:b2: 4e:cd:9a:70:5f:70:6c:ad:a2:09:a8:0e:e9:d1:6e: bd:d2:1c:74:ae:ec:61:8e:08:e6:6b:40:88:2f:4f: e5:f9:30:66:78:15:ce:94:b8:35:35:de:22:dd:f0: 2f:67:ae:b9:a6:d7:5c:60:5e:5e:8a:c9:7a:1c:45: 60:2a:7d:38:45:aa:75:a3:02:28:68:09:99:5f:64: 9c:26:1c:4a:17:e2:5b:81:7f:fa:11:52:70:ae:da: 55:e6:89:eb:48:f1:d8:53:f5:b3:6e:22:e5:4e:ba: f8:66:40:7c:6b:8a:a9:ee:ad:31:11:68:85:00:f2: 7f:a5:a0:00:29:a9:90:1c:89:da:ec:69:ae:ce:d3: 51:fb:52:9f:0c:26:0c:c2:fc:a9:63:cd:33:1b:54: 1b:b6:e8:65:13:98:1c:85:20:be:ad:17:fb:de:06: 29:e2:ae:a0:ee:18:ad:32:e6:3f:f2:a5:7f:1e:c7: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4E:8B:C5:34:CA:27:BF:C5:16:53:CF:E6:07:6E:62:EB:BA:86:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:62:8b:35:49:6e:90:be:a8:be:42:43:7f:11:74:cb:d3:df: db:72:4b:18:24:3d:d1:e7:63:2a:7b:49:14:4d:1c:c4:39:76: 3a:dc:73:b2:11:b5:67:61:96:28:7d:66:a1:7f:9a:3d:ab:b8: 31:6c:60:00:18:de:ea:e4:30:51:89:97:b7:3b:ff:09:68:17: fd:5d:15:7b:2a:b3:68:f8:5e:fc:c3:b8:d5:05:ea:dc:96:45: c7:1b:df:ea:d2:64:15:95:cd:1e:0c:f1:0f:0a:da:24:95:e6: 11:d0:64:9e:74:57:34:30:0a:7b:7c:66:5d:c7:6d:d6:ee:1c: be:1f:74:67:8a:dd:d8:3f:bc:ba:1d:01:69:4d:b4:a9:fb:bb: c2:11:d1:ef:d5:10:c5:a9:53:3b:eb:7b:d6:85:05:e8:3c:e9: 16:45:38:0d:5b:40:88:6f:5c:39:18:ab:3b:d7:96:73:2c:70: e2:61:3f:be:6a:d2:b3:8e:31:ba:de:ab:8c:e6:36:7e:e8:94: db:db:1c:d0:bc:91:64:fe:da:48:5d:a2:f3:f9:2b:81:9c:16: 7a:5b:56:48:e8:8b:cc:dd:c7:53:c6:60:d0:1b:9e:bd:50:7c: ea:da:0e:68:e8:1b:65:d7:30:ed:2d:54:33:d1:53:11:f4:8f: 13:7e:35:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371d+nL2Jh+imss+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk YmE5N2I1NDUtMDMyZS00NmYwLWI0MjYtMjg5ODk3YjBmMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO+3qVqxGP3cZgJ0KmUzvDVUrNInDCt7lo+F UIsjPUEzR3zXeBbZZiEUuY8qBcc/FNeIPbW6sl5aiVcpyr0G4mUZJpStv+VwI7JO zZpwX3BsraIJqA7p0W690hx0ruxhjgjma0CIL0/l+TBmeBXOlLg1Nd4i3fAvZ665 ptdcYF5eisl6HEVgKn04Rap1owIoaAmZX2ScJhxKF+JbgX/6EVJwrtpV5onrSPHY U/WzbiLlTrr4ZkB8a4qp7q0xEWiFAPJ/paAAKamQHIna7GmuztNR+1KfDCYMwvyp Y80zG1QbtuhlE5gchSC+rRf73gYp4q6g7hitMuY/8qV/HsexrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMROi8U0yie/xRZTz+YHbmLruoYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtiizVJbpC+qL5CQ38RdMvT39tySxgkPdHnYyp7SRRNHMQ5djrcc7IR tWdhlih9ZqF/mj2ruDFsYAAY3urkMFGJl7c7/wloF/1dFXsqs2j4XvzDuNUF6tyW Rccb3+rSZBWVzR4M8Q8K2iSV5hHQZJ50VzQwCnt8Zl3HbdbuHL4fdGeK3dg/vLod AWlNtKn7u8IR0e/VEMWpUzvre9aFBeg86RZFOA1bQIhvXDkYqzvXlnMscOJhP75q 0rOOMbreq4zmNn7olNvbHNC8kWT+2khdovP5K4GcFnpbVkjoi8zdx1PGYNAbnr1Q fOraDmjoG2XXMO0tVDPRUxH0jxN+NUM= -----END CERTIFICATE-----Generated at Tue Jun 9 08:13:20 2026 by rpki-client