$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3f3d84b7-8a51-302d-b9c3-f35f21c6937a.roa File: 3f3d84b7-8a51-302d-b9c3-f35f21c6937a.roa (raw, json) Hash identifier: dNS/eAFRWB1qy6mD24DR3Vb3f4Y2JRKrLMgLfY/oIto= Subject key identifier: D7:1F:DC:C8:BD:8C:65:B0:3E:8B:0A:51:32:05:E9:CF:10:FA:41:86 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584F156DB1C5449E963FE44D8700 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3f3d84b7-8a51-302d-b9c3-f35f21c6937a.roa Signing time: Sun 06 Sep 2026 09:48:27 +0000 ROA not before: Sun 06 Sep 2026 09:48:27 +0000 ROA not after: Sat 05 Dec 2026 10:48:27 +0000 asID: 60404 IP address blocks: 167.253.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:6d:b1:c5:44:9e:96:3f:e4:4d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Sep 6 09:48:27 2026 GMT Not After : Dec 5 10:48:27 2026 GMT Subject: CN=6fb78c81-426f-4865-ae47-04a225ea0aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:9e:73:b2:ed:85:5c:ab:29:f1:b3:6a:6a: c0:67:65:9e:99:fa:49:8e:05:07:92:ea:80:8e:a0: 20:f4:07:c7:53:9c:4f:08:69:88:4b:92:9c:30:a9: 65:e6:d0:4d:ce:1c:4b:db:a1:d4:25:3d:69:d2:4d: 8e:cf:9f:57:f9:ce:e8:c5:45:9f:50:33:27:19:06: d9:a9:01:4c:7f:a5:83:55:e6:5b:d1:0e:ed:49:53: 48:d2:3a:21:3d:c1:1d:38:f4:bd:ae:d6:4e:7c:ef: a4:e3:3f:ef:44:0a:4c:52:af:37:db:66:b5:2a:d5: 14:84:c4:09:c5:8f:f3:a3:e0:ac:69:fd:92:78:30: 96:b0:10:9b:5f:0e:82:66:92:72:96:d5:2e:9f:e9: 52:ee:8d:2f:cd:e0:fe:d2:65:88:b2:19:e9:cb:4e: e8:de:00:c5:8a:f9:b9:da:29:c2:c6:0c:57:03:f3: dc:a6:0b:db:80:a4:e6:aa:ce:59:a4:35:b0:d0:ce: a5:cb:36:87:a7:89:c9:ca:cc:79:39:df:ba:fe:b2: af:10:08:7a:3c:22:ff:82:4e:1d:e0:d8:bc:ff:48: 9f:f0:4a:13:d5:da:76:12:2d:d4:0c:bf:26:c2:54: 2d:34:32:fa:2c:84:de:0b:03:49:e1:e3:90:73:7b: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:DC:C8:BD:8C:65:B0:3E:8B:0A:51:32:05:E9:CF:10:FA:41:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3f3d84b7-8a51-302d-b9c3-f35f21c6937a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1f:5c:fe:7d:09:8f:e1:4d:42:28:cf:61:f1:e0:c7:d0:09: 69:87:62:87:e9:d5:ac:fe:9e:ae:27:de:07:a7:01:40:d1:a9: 29:d4:e7:07:83:40:aa:33:7e:01:43:72:88:73:a4:f6:d1:d7: 24:7f:6d:f1:da:49:ba:0a:39:1c:01:e2:9d:cd:ed:e5:ac:f7: 4c:3b:8e:0c:eb:64:2d:60:9c:35:d8:99:f7:c6:f6:26:22:bb: 17:ac:ae:b9:b3:2e:d0:b5:88:df:67:76:8b:fd:99:57:b9:d7: 99:57:07:76:62:58:02:af:6e:db:2f:a8:32:69:76:94:4d:2b: 03:01:94:9e:c0:bd:02:9b:98:a5:0f:f9:7e:4c:c1:68:79:ab: a7:82:6d:1c:a9:38:77:e9:b5:0a:e9:f2:b0:45:2b:a9:f4:bb: 0e:46:66:49:2b:3a:cb:1d:c8:a0:78:e4:4f:9c:f1:2e:f8:74: 44:40:3f:88:90:ca:3f:73:dd:82:16:87:dc:a0:5a:c0:94:8c: 51:1d:f1:21:18:62:d8:8b:a2:4d:c3:ed:4e:6b:99:ca:0e:3a: a6:b1:37:9e:53:4c:33:a7:02:88:b4:f7:51:e9:58:af:9b:d3: 42:40:0f:ce:ee:cc:ae:79:8e:01:c4:23:dc:ed:1c:a2:f0:3c: 6b:a8:e7:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VbbHFRJ6WP+RNhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MDkwNjA5NDgyN1oXDTI2MTIwNTEwNDgyN1owLzEtMCsGA1UEAxMk NmZiNzhjODEtNDI2Zi00ODY1LWFlNDctMDRhMjI1ZWEwYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46eec7LthVyrKfGzamrAZ2WemfpJjgUHkuqA jqAg9AfHU5xPCGmIS5KcMKll5tBNzhxL26HUJT1p0k2Oz59X+c7oxUWfUDMnGQbZ qQFMf6WDVeZb0Q7tSVNI0johPcEdOPS9rtZOfO+k4z/vRApMUq8322a1KtUUhMQJ xY/zo+Csaf2SeDCWsBCbXw6CZpJyltUun+lS7o0vzeD+0mWIshnpy07o3gDFivm5 2inCxgxXA/PcpgvbgKTmqs5ZpDWw0M6lyzaHp4nJysx5Od+6/rKvEAh6PCL/gk4d 4Ni8/0if8EoT1dp2Ei3UDL8mwlQtNDL6LITeCwNJ4eOQc3tlzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcf3Mi9jGWwPosKUTIF6c8Q+kGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvM2YzZDg0YjctOGE1MS0z MDJkLWI5YzMtZjM1ZjIxYzY5MzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIfXP59CY/hTUIoz2Hx4MfQCWmHYofp1az+nq4n3genAUDRqSnU5weD QKozfgFDcohzpPbR1yR/bfHaSboKORwB4p3N7eWs90w7jgzrZC1gnDXYmffG9iYi uxesrrmzLtC1iN9ndov9mVe515lXB3ZiWAKvbtsvqDJpdpRNKwMBlJ7AvQKbmKUP +X5MwWh5q6eCbRypOHfptQrp8rBFK6n0uw5GZkkrOssdyKB45E+c8S74dERAP4iQ yj9z3YIWh9ygWsCUjFEd8SEYYtiLok3D7U5rmcoOOqaxN55TTDOnAoi091HpWK+b 00JAD87uzK55jgHEI9ztHKLwPGuo55I= -----END CERTIFICATE-----Generated at Sat Sep 26 11:47:52 2026 by rpki-client