$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa File: a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa (raw, json) Hash identifier: FrpF1oSuK+/8+w74bHmp/i2ApZ+FJfvW4RtjyOyIBsI= Subject key identifier: D6:34:80:86:DB:10:BE:97:9F:02:FC:DA:9D:C3:B8:04:78:6C:37:AB Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584DC3E74B5A818A93C28F715360 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa Signing time: Fri 08 May 2026 12:10:14 +0000 ROA not before: Fri 08 May 2026 12:10:14 +0000 ROA not after: Thu 06 Aug 2026 12:10:14 +0000 asID: 63448 IP address blocks: 167.17.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c3:e7:4b:5a:81:8a:93:c2:8f:71:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: May 8 12:10:14 2026 GMT Not After : Aug 6 12:10:14 2026 GMT Subject: CN=d9eeba1d-2106-45a5-82b5-e949a0d4ce5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:64:94:1b:f1:22:4e:e1:a4:7a:27:40:0e: a2:77:9d:ba:d5:b2:c7:a0:a8:62:4d:43:7e:9c:3d: 8b:95:ad:27:71:f7:7a:0d:6b:5e:09:2f:7e:1d:38: 10:04:d8:e2:02:a1:ca:0b:ba:68:41:37:41:4e:38: ff:14:85:f0:19:60:b6:13:0b:24:b2:e6:f8:8b:dc: 95:b5:69:dd:97:79:f2:92:f1:70:da:34:23:49:dd: 61:de:c8:ab:ec:2f:8b:41:88:01:84:0a:09:71:3d: 03:c0:a0:56:57:f8:3b:49:fc:39:8c:52:1e:78:32: b8:24:86:ff:a4:7d:62:5b:65:16:40:b2:9c:01:fb: 44:49:0a:ed:43:b2:d0:91:de:fe:25:c1:78:47:4c: 99:cf:6b:44:50:36:e2:74:ea:bf:5c:39:44:d4:3d: 2b:41:56:a1:e4:e9:77:e7:1a:a3:80:41:8d:bd:2c: 74:ab:c6:29:f2:8d:c3:d1:af:03:04:da:96:b8:89: 70:de:d1:ce:c1:c1:23:8a:ba:4c:61:41:fb:8a:df: 67:55:1f:4e:89:3b:e2:7e:4f:a0:97:7e:99:92:ab: d6:f5:b7:89:22:d2:cb:66:70:5f:48:25:05:26:64: 25:23:ac:96:fc:cc:44:15:8f:dd:d2:9b:87:7a:33: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:34:80:86:DB:10:BE:97:9F:02:FC:DA:9D:C3:B8:04:78:6C:37:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 167.17.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b5:ec:ec:71:b5:14:fc:ce:d8:68:0c:41:33:f0:7a:82:a1: 42:a9:16:c8:16:09:ca:73:9b:c7:e3:49:2b:2b:21:ce:83:d7: c5:70:d7:78:da:0e:e6:a5:c3:66:96:0e:9d:15:95:46:9d:24: 96:42:b3:88:a7:a6:91:74:10:8c:a0:b1:32:87:df:a4:49:84: c6:73:a8:2e:7e:ba:c5:5e:46:28:3f:70:47:b7:0b:2e:43:da: 39:1f:f7:b1:5b:b0:1e:10:6e:d7:49:b6:5c:f7:65:d2:ea:0b: f6:c3:df:c8:81:e9:c9:20:a5:94:7f:0b:01:e9:48:8f:69:75: b8:fd:d7:d9:1e:93:7d:0b:48:94:12:5c:61:ab:fa:5c:bd:b1: da:91:e6:81:3b:3c:10:43:81:2e:db:45:13:0b:ca:0f:c2:94: 96:56:3f:6e:63:9b:d3:2d:5c:63:4f:e3:7d:4f:b9:10:70:8a: 7c:b7:4a:67:e7:71:e9:13:13:71:bb:f3:2a:5d:fe:db:7d:1a: 18:89:da:8b:84:f3:0b:bc:ab:41:cf:7a:e7:ee:4f:09:bc:92: 6d:fa:9b:9a:68:db:83:66:ad:ab:0e:a7:99:30:f4:90:6e:02: 1d:6b:a1:bb:3f:cf:af:19:b7:f5:83:c4:91:37:0b:64:d5:07: 52:78:dd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3D50tagYqTwo9xU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDUwODEyMTAxNFoXDTI2MDgwNjEyMTAxNFowLzEtMCsGA1UEAxMk ZDllZWJhMWQtMjEwNi00NWE1LTgyYjUtZTk0OWEwZDRjZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh1klBvxIk7hpHonQA6id5261bLHoKhiTUN+ nD2Lla0ncfd6DWteCS9+HTgQBNjiAqHKC7poQTdBTjj/FIXwGWC2Ewsksub4i9yV tWndl3nykvFw2jQjSd1h3sir7C+LQYgBhAoJcT0DwKBWV/g7Sfw5jFIeeDK4JIb/ pH1iW2UWQLKcAftESQrtQ7LQkd7+JcF4R0yZz2tEUDbidOq/XDlE1D0rQVah5Ol3 5xqjgEGNvSx0q8Yp8o3D0a8DBNqWuIlw3tHOwcEjirpMYUH7it9nVR9OiTvifk+g l36ZkqvW9beJItLLZnBfSCUFJmQlI6yW/MxEFY/d0puHejOAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY0gIbbEL6XnwL82p3DuAR4bDerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvYTAxZWFkNGMtZmUzOS0z M2JkLTkzNjAtZDlkNWIzN2Y3Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa17OxxtRT8zthoDEEz8HqCoUKpFsgWCcpzm8fjSSsrIc6D18Vw13ja Dualw2aWDp0VlUadJJZCs4inppF0EIygsTKH36RJhMZzqC5+usVeRig/cEe3Cy5D 2jkf97FbsB4QbtdJtlz3ZdLqC/bD38iB6ckgpZR/CwHpSI9pdbj919kek30LSJQS XGGr+ly9sdqR5oE7PBBDgS7bRRMLyg/ClJZWP25jm9MtXGNP431PuRBwiny3Smfn cekTE3G78ypd/tt9GhiJ2ouE8wu8q0HPeufuTwm8km36m5po24NmrasOp5kw9JBu Ah1robs/z68Zt/WDxJE3C2TVB1J43Zk= -----END CERTIFICATE-----Generated at Wed May 13 08:29:15 2026 by rpki-client