$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa File: 9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json) Hash identifier: Y0xQ+/5RKzjzfJ0/ipUE006putVZrSiiE1Kpp4CkIO0= Subject key identifier: 66:47:78:63:92:B9:C2:C4:0C:35:24:B5:43:5B:DE:53:F8:7F:A7:44 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584D4A8FA722D6503E8D06D22980 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 397666 IP address blocks: 167.253.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a7:22:d6:50:3e:8d:06:d2:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=74a074c6-662d-4555-9d80-38a7569c4f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:49:d4:d7:04:27:ad:8c:b7:31:a1:a0:bc: 9a:4c:42:8e:7a:c8:1f:d1:ee:9b:47:73:da:71:d9: 97:24:0a:09:90:66:26:ab:fb:51:25:2f:11:99:92: e2:fb:61:5b:c0:e1:88:d4:4f:20:92:43:d6:d3:16: 44:e5:b5:90:8f:d2:c5:17:0b:d4:6e:3d:f9:50:1b: bc:8b:0d:f8:c0:15:67:f0:22:8f:16:c1:94:66:0d: 51:60:90:ad:ae:bd:cc:b1:45:e0:fc:b9:7e:50:b7: 69:ce:9b:94:fc:6b:bf:36:6f:98:ff:f4:2e:63:7a: 9d:55:87:e5:09:a9:88:2c:cc:57:08:9a:d3:c8:39: 27:56:6c:49:a6:f7:60:37:fc:92:84:ec:c0:eb:1e: 39:0a:46:a2:ea:a1:81:3e:c9:1b:eb:6b:11:67:22: d4:63:04:e7:08:8a:7d:7e:95:af:1b:e2:bc:23:58: 13:b2:b3:0d:49:63:f3:98:68:35:e6:ec:53:46:73: 23:f0:04:14:a2:80:69:1e:a0:4d:a3:ee:55:9e:17: 3c:8e:29:ea:2b:b0:34:c9:ac:fc:62:ef:93:01:14: 56:dc:e3:a1:b5:77:89:33:17:a1:b5:33:1d:63:cb: 16:47:42:7a:e4:f4:1b:97:f7:de:04:ca:c4:d1:1b: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:78:63:92:B9:C2:C4:0C:35:24:B5:43:5B:DE:53:F8:7F:A7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4a:15:61:01:b9:10:38:68:aa:93:79:05:6b:5d:90:15:09: 95:20:ca:bb:12:ac:b3:9d:4f:70:69:f2:62:a7:4a:7c:c8:a0: 07:8b:94:46:3d:96:8f:02:b5:ea:3e:9b:df:3c:c9:6a:82:a0: 0e:98:7f:f6:5a:68:82:32:2b:8b:59:b4:f5:7d:d8:36:d0:a4: ea:5b:13:d7:85:55:5a:cb:33:59:d9:a7:36:9f:50:70:36:58: 80:3a:78:b5:7f:27:64:bd:e6:a9:09:02:32:09:04:70:cf:d6: 5d:aa:79:86:98:79:e6:10:c7:76:12:ac:f6:07:6c:78:f9:77: 6c:ac:87:af:df:2e:af:6c:90:eb:9f:0e:65:da:7d:dd:ff:4f: 72:a1:a1:24:37:ce:d6:1c:0d:28:04:16:8a:3e:69:52:be:39: 1d:e2:7c:e3:c0:6a:ef:ad:cd:e1:1d:b0:36:12:51:e6:f0:71: 27:b9:47:2e:75:2f:a5:13:63:de:2c:5f:5e:10:3f:67:8a:aa: 77:2b:e5:16:65:33:43:cd:bd:4d:a3:d3:ad:fb:35:36:a1:26: 4e:0e:a4:87:e3:ad:82:3c:44:41:ff:47:1e:c7:16:dd:6f:d6: e6:d0:4a:1c:22:a9:b8:ee:a6:96:c9:4e:25:c9:a4:63:1c:1e: bc:67:9b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6ci1lA+jQbSKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NzRhMDc0YzYtNjYyZC00NTU1LTlkODAtMzhhNzU2OWM0ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFdJ1NcEJ62MtzGhoLyaTEKOesgf0e6bR3Pa cdmXJAoJkGYmq/tRJS8RmZLi+2FbwOGI1E8gkkPW0xZE5bWQj9LFFwvUbj35UBu8 iw34wBVn8CKPFsGUZg1RYJCtrr3MsUXg/Ll+ULdpzpuU/Gu/Nm+Y//QuY3qdVYfl CamILMxXCJrTyDknVmxJpvdgN/yShOzA6x45Ckai6qGBPskb62sRZyLUYwTnCIp9 fpWvG+K8I1gTsrMNSWPzmGg15uxTRnMj8AQUooBpHqBNo+5Vnhc8jinqK7A0yaz8 Yu+TARRW3OOhtXeJMxehtTMdY8sWR0J65PQbl/feBMrE0RusjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZHeGOSucLEDDUktUNb3lP4f6dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZKFWEBuRA4aKqTeQVrXZAVCZUgyrsSrLOdT3Bp8mKnSnzIoAeLlEY9 lo8Cteo+m988yWqCoA6Yf/ZaaIIyK4tZtPV92DbQpOpbE9eFVVrLM1nZpzafUHA2 WIA6eLV/J2S95qkJAjIJBHDP1l2qeYaYeeYQx3YSrPYHbHj5d2ysh6/fLq9skOuf DmXafd3/T3KhoSQ3ztYcDSgEFoo+aVK+OR3ifOPAau+tzeEdsDYSUebwcSe5Ry51 L6UTY94sX14QP2eKqncr5RZlM0PNvU2j0637NTahJk4OpIfjrYI8REH/Rx7HFt1v 1ubQShwiqbjuppbJTiXJpGMcHrxnm9s= -----END CERTIFICATE-----Generated at Fri Mar 27 01:56:40 2026 by rpki-client