$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa File: b67aefa7-c52a-31f3-8f3a-81695e41253a.roa (raw, json) Hash identifier: 1rZU6Kn2GO3xDjKk8Y/TAoxWIfcK5FEoIpLg9IJRKo8= Subject key identifier: 96:A7:4E:24:0C:07:1D:5A:B9:45:72:FF:F1:12:69:DE:AA:A2:A2:DB Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EA786DD8F9AE88DABC25A6720 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3257 IP address blocks: 173.232.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:dd:8f:9a:e8:8d:ab:c2:5a:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ab1f33b9-3caa-40ed-99b3-bb9e97a2c6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:7e:f2:80:55:42:f0:8a:b1:d9:73:ea:cd: dd:5b:dd:9e:90:4e:b1:7d:ef:48:56:76:ef:8b:98: e0:a9:75:ea:4c:4d:d3:56:dd:b4:3b:3b:61:a1:35: c8:2d:5e:2e:6b:08:0b:22:60:3f:4b:e5:d8:75:fe: aa:b2:a0:a8:d4:a6:1d:95:86:3e:4a:e7:de:34:27: 95:af:a7:05:53:54:3c:5d:8a:fa:4d:4b:f8:07:19: b0:ac:ae:df:47:7b:30:e0:eb:ee:91:7e:45:96:f2: 2f:8b:71:4d:1c:2f:d9:22:b8:5e:fd:62:2c:59:55: 82:c3:e7:77:9b:2f:99:f9:54:a3:20:11:c8:2d:22: a7:4e:2e:01:79:7b:fc:81:a7:1a:85:38:fe:23:43: fb:1d:33:a0:13:be:94:fe:69:af:09:3b:e5:c1:35: 0f:68:bb:54:f0:30:76:01:ac:c2:f2:fc:ed:e5:c3: eb:4e:a7:63:04:a5:18:c7:75:5c:cf:6b:e5:03:78: 26:61:2c:19:1d:18:5c:85:23:56:d4:7b:2e:d8:f7: 9d:77:2f:c5:ae:cd:90:6f:65:a5:b6:53:2b:d5:f3: 0c:d4:a4:b6:19:f6:c0:68:f7:96:f9:32:3d:99:21: ae:55:1e:0e:81:2c:72:60:ab:86:7f:38:35:4d:89: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A7:4E:24:0C:07:1D:5A:B9:45:72:FF:F1:12:69:DE:AA:A2:A2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b67aefa7-c52a-31f3-8f3a-81695e41253a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:52:9b:a9:09:f3:3f:db:b2:6a:a4:7c:a0:e6:2e:0a:e4:33: 9d:79:31:66:4c:fb:56:9e:a4:a3:a9:85:7e:ef:dd:3e:31:5a: 45:5e:a8:9c:9a:a3:1e:80:32:9d:e7:60:e4:19:9a:71:39:b3: 72:56:3d:a3:b7:1f:73:35:6e:82:74:1c:bd:2d:40:60:99:5a: 66:3b:00:99:37:fc:44:74:f3:3a:c2:7b:b3:c9:de:46:5b:37: 63:0e:a8:e3:c5:a2:31:ea:1e:42:7f:18:6f:90:2f:e7:9d:2c: 4c:f6:2e:bf:77:b2:bc:62:c7:0f:35:76:6e:58:2c:7f:8d:d9: 9a:87:5b:03:55:02:9a:72:22:12:38:59:d4:64:4c:ad:7a:01: 5b:f9:de:66:a6:e4:fe:e7:95:46:d8:99:1c:7a:a3:02:c2:27: 32:41:3e:ba:e5:c2:8d:da:73:9b:71:d8:44:ed:19:05:b3:98: 35:e9:bb:fa:d7:ea:f6:3c:44:c2:8e:12:25:19:61:df:0c:63: b6:d7:98:5d:d5:7b:67:82:a2:60:57:c9:b2:03:3e:b6:fd:6a: 07:94:e7:c6:da:da:e2:58:e5:f6:65:96:98:62:3f:c2:05:e9: 94:1e:08:97:06:a7:a2:39:27:cf:f2:e5:a5:53:ab:f4:d0:ec: 12:c8:93:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nht2PmuiNq8JaZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWIxZjMzYjktM2NhYS00MGVkLTk5YjMtYmI5ZTk3YTJjNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoB+8oBVQvCKsdlz6s3dW92ekE6xfe9IVnbv i5jgqXXqTE3TVt20OzthoTXILV4uawgLImA/S+XYdf6qsqCo1KYdlYY+SufeNCeV r6cFU1Q8XYr6TUv4BxmwrK7fR3sw4OvukX5FlvIvi3FNHC/ZIrhe/WIsWVWCw+d3 my+Z+VSjIBHILSKnTi4BeXv8gacahTj+I0P7HTOgE76U/mmvCTvlwTUPaLtU8DB2 AazC8vzt5cPrTqdjBKUYx3Vcz2vlA3gmYSwZHRhchSNW1Hsu2Peddy/Frs2Qb2Wl tlMr1fMM1KS2GfbAaPeW+TI9mSGuVR4OgSxyYKuGfzg1TYmfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJanTiQMBx1auUVy//ESad6qoqLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjY3YWVmYTctYzUyYS0z MWYzLThmM2EtODE2OTVlNDEyNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpSm6kJ8z/bsmqkfKDmLgrkM515MWZM+1aepKOphX7v3T4xWkVeqJya ox6AMp3nYOQZmnE5s3JWPaO3H3M1boJ0HL0tQGCZWmY7AJk3/ER08zrCe7PJ3kZb N2MOqOPFojHqHkJ/GG+QL+edLEz2Lr93srxixw81dm5YLH+N2ZqHWwNVAppyIhI4 WdRkTK16AVv53mam5P7nlUbYmRx6owLCJzJBPrrlwo3ac5tx2ETtGQWzmDXpu/rX 6vY8RMKOEiUZYd8MY7bXmF3Ve2eComBXybIDPrb9ageU58ba2uJY5fZllphiP8IF 6ZQeCJcGp6I5J8/y5aVTq/TQ7BLIk/g= -----END CERTIFICATE-----Generated at Wed Jul 29 13:35:06 2026 by rpki-client