$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa File: f3af561f-6e70-31c4-86f8-a11b4790170b.roa (raw, json) Hash identifier: xZxCcbl9Sdipd+LoKSW0Ra0Eo9an3kuVwcdJapedC04= Subject key identifier: 8A:BB:E1:64:42:63:83:CC:13:8D:53:A6:B3:A6:1D:20:38:87:43:F1 Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Certificate serial: 010D0C9F4328584EA79260F18217C7A8051CE798 Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46307 IP address blocks: 23.144.248.0/24 maxlen: 24 2602:fb3c::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:60:f1:82:17:c7:a8:05:1c:e7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cea9216f-3e4e-4a2e-ad51-243c3479795d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:47:bf:41:c8:fa:37:3c:68:02:c9:70:53: 5b:2d:fa:44:8d:19:75:99:fe:92:ac:23:82:b9:4f: d2:3f:fa:d6:0c:59:44:ee:5a:dd:0c:38:77:76:80: 50:54:e7:cc:ff:6c:0a:81:e8:13:8c:d2:f2:0f:8e: 43:af:eb:c6:8b:19:b7:d8:66:a2:0c:c1:24:73:7f: 19:a5:93:7c:c2:cf:e9:22:63:30:09:01:79:6e:20: 69:6f:a1:90:d5:c5:b5:0f:8c:7c:f0:8a:fd:e7:f0: d2:54:c2:54:64:ab:35:41:f5:c3:82:29:55:25:fc: 16:39:da:a4:cf:74:3a:aa:33:cc:81:1d:d4:af:bd: 7b:bd:01:8a:57:c4:47:ca:3b:fd:83:cf:df:3b:64: 82:22:27:6b:a5:8f:0b:71:69:7e:be:62:79:bc:28: 7d:69:64:a2:cf:da:47:28:2c:4c:d7:f4:e3:16:54: 9f:a1:fd:c0:27:c7:3c:c9:d3:c4:cf:6a:8c:59:b9: eb:19:4d:cf:49:09:03:13:b2:aa:92:1c:76:a0:70: bf:21:8a:7c:a7:5a:d4:03:1a:42:52:90:a0:12:bf: 50:77:bb:35:0a:c0:f2:a4:1e:91:ca:ed:4b:e0:af: 47:5d:be:16:87:a2:07:c8:fb:a1:fe:e6:30:91:f5: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:E1:64:42:63:83:CC:13:8D:53:A6:B3:A6:1D:20:38:87:43:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/f3af561f-6e70-31c4-86f8-a11b4790170b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl X509v3 Authority Key Identifier: keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer sbgp-ipAddrBlock: critical IPv4: 23.144.248.0/24 IPv6: 2602:fb3c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f3:22:bc:57:27:06:32:a7:ba:4a:23:fe:c1:1d:ab:60:d7: 1f:ab:86:af:4d:78:5a:b5:31:ec:36:b3:d3:0d:5c:67:f8:ae: 10:48:76:0b:99:be:1c:a7:75:26:da:b0:aa:bd:d1:32:92:65: 5b:34:6a:f1:a5:33:b7:53:55:c1:8e:c0:ec:de:1e:d2:a3:d7: 74:bb:96:03:d2:87:35:be:3a:48:73:4c:93:1c:26:68:67:4e: d6:24:df:7b:32:c3:24:e2:cc:04:a4:2e:a4:45:8f:04:02:a4: 87:b1:c5:f3:ba:a4:80:84:42:10:0b:9d:56:39:2c:bf:62:70: 06:a1:c7:e9:63:7f:9c:1f:2f:eb:b3:f8:7b:f8:f7:12:0e:fe: 5a:da:5e:6f:7f:83:13:a8:00:f5:ac:fd:d2:5a:47:18:6f:c1: 91:2a:d0:9a:20:02:d0:33:50:f9:ad:30:13:3a:25:62:0f:10: 55:22:b6:2b:bd:1f:64:5b:05:7b:de:cd:2f:1c:f1:82:ac:8a: 7e:7d:f6:46:c3:e4:1c:4a:31:0e:7a:5f:f4:bb:e3:ca:f2:ae: 35:57:28:c7:e7:7c:19:a1:4e:38:86:01:24:9e:9f:84:ca:f0: 91:d8:80:84:6f:28:f0:37:51:d6:98:71:e6:59:06:c4:79:49: 63:a6:8b:75 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nkmDxghfHqAUc55gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY2YTFkYzktMjZhOC00ZTAxLTk5MTYtMGQxNmRkMTkx NjkwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2VhOTIxNmYtM2U0ZS00YTJlLWFkNTEtMjQzYzM0Nzk3OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7dHv0HI+jc8aALJcFNbLfpEjRl1mf6SrCOC uU/SP/rWDFlE7lrdDDh3doBQVOfM/2wKgegTjNLyD45Dr+vGixm32GaiDMEkc38Z pZN8ws/pImMwCQF5biBpb6GQ1cW1D4x88Ir95/DSVMJUZKs1QfXDgilVJfwWOdqk z3Q6qjPMgR3Ur717vQGKV8RHyjv9g8/fO2SCIidrpY8LcWl+vmJ5vCh9aWSiz9pH KCxM1/TjFlSfof3AJ8c8ydPEz2qMWbnrGU3PSQkDE7Kqkhx2oHC/IYp8p1rUAxpC UpCgEr9Qd7s1CsDypB6Ryu1L4K9HXb4Wh6IHyPuh/uYwkfXSIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIq74WRCY4PME41TprOmHSA4h0PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZh MWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2ZGQxOTE2OTAvZjNhZjU2MWYtNmU3MC0z MWM0LTg2ZjgtYTExYjQ3OTAxNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTY2YTFkYzktMjZhOC00ZTAxLTk5 MTYtMGQxNmRkMTkxNjkwL2E2NmExZGM5LTI2YTgtNGUwMS05OTE2LTBkMTZkZDE5 MTY5MC5jcmwwHwYDVR0jBBgwFoAUBSoarMYDzX68/IwHytY4A2TY5KEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjZhMWRjOS0yNmE4LTRlMDEtOTkxNi0wZDE2 ZGQxOTE2OTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5D4MA4E AgACMAgDBgQmAvs8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA88yK8VycGMqe6SiP+wR2rYNcfq4avTXha tTHsNrPTDVxn+K4QSHYLmb4cp3Um2rCqvdEykmVbNGrxpTO3U1XBjsDs3h7So9d0 u5YD0oc1vjpIc0yTHCZoZ07WJN97MsMk4swEpC6kRY8EAqSHscXzuqSAhEIQC51W OSy/YnAGocfpY3+cHy/rs/h7+PcSDv5a2l5vf4MTqAD1rP3SWkcYb8GRKtCaIALQ M1D5rTATOiViDxBVIrYrvR9kWwV73s0vHPGCrIp+ffZGw+QcSjEOel/0u+PK8q41 VyjH53wZoU44hgEknp+EyvCR2ICEbyjwN1HWmHHmWQbEeUljpot1 -----END CERTIFICATE-----Generated at Thu Jul 30 07:02:10 2026 by rpki-client