$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa File: d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json) Hash identifier: XM/f/CMZQbbWrJ7GwhC9exPnGZu1vBsW6cUxgnlCr78= Subject key identifier: 0C:85:F7:2B:AE:0A:90:56:F7:8A:7C:5E:9A:97:EC:C9:15:C1:22:FC Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584D4A8FA70AF46FBA432BBBAC3E Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 397666 IP address blocks: 167.253.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a7:0a:f4:6f:ba:43:2b:bb:ac:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=d189ef01-24a1-4bec-b2a4-b6d6acce909a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:5f:c7:9c:8d:45:ff:c1:15:e2:a0:81:9e: 6d:ab:2e:d2:4d:f2:a7:4b:e7:35:d8:15:d8:f8:79: fc:39:e8:84:b6:17:73:25:0f:dc:23:ae:9b:cd:e6: 83:4e:9c:a9:30:26:fe:06:b5:e3:e2:12:07:89:72: 61:13:19:80:69:09:1f:e0:be:ce:cb:01:31:53:fa: 68:b2:95:06:eb:a9:ad:bd:5b:a0:86:16:3b:ba:c9: 5e:ee:01:2a:5d:ea:d4:9b:49:a6:0d:d4:4a:23:45: 4b:7c:92:ea:42:89:e7:88:06:82:c5:3d:72:fc:24: 35:ad:25:33:88:b1:c5:f0:0e:f7:2e:86:c2:d0:b4: f0:b1:6d:64:6b:ca:3d:32:95:20:a3:79:b6:eb:61: d2:ca:cb:1c:79:88:65:bf:f4:03:c1:9d:9c:83:4e: 21:3b:47:04:f6:0c:26:ee:89:76:29:8c:b2:75:fa: b5:f8:01:fb:97:55:31:2a:d1:b3:63:95:63:7a:49: c4:44:da:f8:cf:48:3b:e2:75:92:a0:29:5b:10:66: ed:9f:d7:fb:1c:12:fd:81:f7:4a:e7:b6:d4:1f:b3: a8:7a:dc:5e:45:ec:1f:2d:3d:9f:02:74:00:e4:fc: ec:80:d0:a3:4d:0e:71:15:1c:be:84:c9:5d:20:76: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:F7:2B:AE:0A:90:56:F7:8A:7C:5E:9A:97:EC:C9:15:C1:22:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a8:a8:52:89:29:03:58:9f:92:2c:bf:5d:71:53:ec:88:1c: 00:21:b1:8b:21:89:3f:45:6f:4b:d1:b6:00:86:0d:e7:76:10: 8a:e0:ff:fb:c6:f6:4e:b4:c5:e3:71:69:37:3b:3f:7a:df:60: 49:e7:0d:61:c4:9e:19:db:95:36:13:34:50:ab:64:df:1b:07: b6:17:71:c6:f1:17:71:ad:52:7a:21:25:a6:26:b0:c0:f2:18: 35:89:bc:67:01:c4:eb:7b:b5:ab:23:21:c4:46:8f:4b:98:2e: 39:e3:d2:6c:95:54:f5:dd:35:84:13:86:21:5d:da:f7:cf:58: 59:3b:92:2e:f2:13:e7:42:02:c7:a6:47:2b:27:d4:56:8c:df: bd:3b:13:c4:65:3d:59:54:a7:69:06:f9:aa:10:2e:b5:0a:a8: 24:e5:8b:3d:30:a4:59:a9:1c:4c:ba:de:6c:b9:1a:8f:9c:50: 8d:0f:6f:ec:da:c8:b2:b0:a4:f4:b9:5e:85:ab:fb:9b:73:e3: 1d:66:bf:ef:07:70:39:22:3f:ce:09:1a:f0:62:ab:95:5b:c1: 7b:60:bc:51:a5:91:f9:f1:89:58:97:ad:84:f8:0c:77:60:5a: 0e:d4:10:36:e4:fa:61:43:09:9e:1b:5f:53:4c:6a:74:b1:79: c6:36:65:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6cK9G+6Qyu7rD4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZDE4OWVmMDEtMjRhMS00YmVjLWIyYTQtYjZkNmFjY2U5MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDRfx5yNRf/BFeKggZ5tqy7STfKnS+c12BXY +Hn8OeiEthdzJQ/cI66bzeaDTpypMCb+BrXj4hIHiXJhExmAaQkf4L7OywExU/po spUG66mtvVughhY7usle7gEqXerUm0mmDdRKI0VLfJLqQonniAaCxT1y/CQ1rSUz iLHF8A73LobC0LTwsW1ka8o9MpUgo3m262HSyssceYhlv/QDwZ2cg04hO0cE9gwm 7ol2KYyydfq1+AH7l1UxKtGzY5VjeknERNr4z0g74nWSoClbEGbtn9f7HBL9gfdK 57bUH7OoetxeRewfLT2fAnQA5PzsgNCjTQ5xFRy+hMldIHaW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyF9yuuCpBW94p8XpqX7MkVwSL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDJmMjYxMGEtYTYyYy0z YjAzLTk5ZjktMTM4MjE0NTMzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeoqFKJKQNYn5Isv11xU+yIHAAhsYshiT9Fb0vRtgCGDed2EIrg//vG 9k60xeNxaTc7P3rfYEnnDWHEnhnblTYTNFCrZN8bB7YXccbxF3GtUnohJaYmsMDy GDWJvGcBxOt7tasjIcRGj0uYLjnj0myVVPXdNYQThiFd2vfPWFk7ki7yE+dCAsem Rysn1FaM3707E8RlPVlUp2kG+aoQLrUKqCTliz0wpFmpHEy63my5Go+cUI0Pb+za yLKwpPS5XoWr+5tz4x1mv+8HcDkiP84JGvBiq5VbwXtgvFGlkfnxiViXrYT4DHdg Wg7UEDbk+mFDCZ4bX1NManSxecY2ZYo= -----END CERTIFICATE-----Generated at Thu Mar 26 21:35:19 2026 by rpki-client