$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa File: e2661e5c-51d0-30db-b475-4b166c8c13b1.roa (raw, json) Hash identifier: DlcJHZGh91EqsTqYL+/piYWwGD/Jls4e7EH8FlAUgm4= Subject key identifier: 11:5E:63:97:50:EB:2F:06:D7:06:7E:1F:43:49:B8:C0:D1:52:DF:61 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584D465F9BEE7D4FDFA2A742C2C0 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 203963 IP address blocks: 167.253.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:9b:ee:7d:4f:df:a2:a7:42:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=f8fdff67-05a8-4ab2-b898-2a5e3f41bbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:f1:1e:36:6a:f3:80:b5:c2:42:98:dc:2c: 40:7e:37:69:bc:37:d6:a7:f9:18:ec:b2:3a:c6:86: 0b:93:9b:8a:d1:c1:fe:32:cb:c8:50:26:ca:68:bf: c3:93:c2:1f:ff:85:52:6e:ca:30:ae:a4:3e:0c:74: 2a:aa:99:04:6a:40:a8:31:5e:e6:e7:3e:90:ab:64: 05:98:e6:45:73:ea:fb:b0:1d:35:31:46:53:2f:b4: 8f:74:78:6a:e8:4a:e3:ec:e2:1e:1c:60:12:3f:5c: 85:69:83:71:a5:2f:af:fd:46:1a:02:a2:ab:52:18: ea:07:b7:34:57:a4:bd:a6:c7:ef:0e:e7:85:e2:54: ad:ad:13:72:49:0f:a5:c9:eb:fb:88:99:d8:89:e9: 91:12:3b:6c:a3:11:13:88:38:de:50:8d:a5:1a:41: 15:a3:51:1b:69:00:ba:39:f0:ba:b6:d7:32:e9:f4: c4:7e:ef:d3:a0:53:6d:29:21:f1:26:74:d9:c7:19: 26:e6:07:74:0b:6f:22:66:82:3f:fd:68:70:d9:c1: 76:3a:fd:ae:d0:ab:9d:c5:01:04:af:21:96:05:de: 55:03:59:9f:11:3a:76:5f:4b:5b:de:a0:ef:27:13: 55:84:3b:c2:d2:df:3b:6d:2a:31:fd:f7:b8:5a:cf: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:63:97:50:EB:2F:06:D7:06:7E:1F:43:49:B8:C0:D1:52:DF:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4a:72:cc:e3:00:49:c8:68:0a:6a:2d:0a:2e:83:98:32:f8: ae:47:ae:dc:9a:43:c9:15:d2:09:ba:fc:b8:9c:34:27:fc:64: 05:f2:27:b5:ff:5d:37:98:99:83:0d:9f:3e:2a:b4:af:ce:1c: eb:f6:3c:ae:cf:16:98:9e:6c:6c:03:02:7f:c2:4d:63:b1:79: 6e:a1:4a:b8:2c:78:a5:1c:22:e0:fa:b5:2d:b2:4c:a2:43:30: 50:e9:54:29:1c:4c:91:24:c4:67:53:3f:43:c5:f7:65:2f:ac: 6e:a2:6f:e2:57:53:38:0e:ca:70:90:fa:51:26:6c:fc:1c:11: 9f:51:20:1b:ef:97:fb:87:85:09:45:ab:29:6d:09:83:7b:52: f9:fb:87:cf:89:6e:68:77:b7:f2:11:b0:86:39:e8:b0:34:7c: 7d:de:1a:e8:61:c4:73:8b:98:9e:e2:d8:09:0a:96:60:81:24: 57:a4:05:aa:e5:66:3a:47:08:50:f7:95:b4:d1:af:a4:e5:85: 2a:03:1e:4b:ec:d8:b7:61:14:27:75:10:a6:29:c4:33:4c:cc: 00:29:10:77:70:1d:31:ee:64:42:57:44:49:8c:ef:34:75:3f: 0d:f1:c7:72:2b:3b:0d:46:d4:2d:1d:54:e6:7e:ff:5d:bc:06: 96:32:80:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5vufU/foqdCwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZjhmZGZmNjctMDVhOC00YWIyLWI4OTgtMmE1ZTNmNDFiYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEvxHjZq84C1wkKY3CxAfjdpvDfWp/kY7LI6 xoYLk5uK0cH+MsvIUCbKaL/Dk8If/4VSbsowrqQ+DHQqqpkEakCoMV7m5z6Qq2QF mOZFc+r7sB01MUZTL7SPdHhq6Erj7OIeHGASP1yFaYNxpS+v/UYaAqKrUhjqB7c0 V6S9psfvDueF4lStrRNySQ+lyev7iJnYiemREjtsoxETiDjeUI2lGkEVo1EbaQC6 OfC6ttcy6fTEfu/ToFNtKSHxJnTZxxkm5gd0C28iZoI//Whw2cF2Ov2u0KudxQEE ryGWBd5VA1mfETp2X0tb3qDvJxNVhDvC0t87bSox/fe4Ws84iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFeY5dQ6y8G1wZ+H0NJuMDRUt9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZTI2NjFlNWMtNTFkMC0z MGRiLWI0NzUtNGIxNjZjOGMxM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRKcszjAEnIaApqLQoug5gy+K5HrtyaQ8kV0gm6/LicNCf8ZAXyJ7X/ XTeYmYMNnz4qtK/OHOv2PK7PFpiebGwDAn/CTWOxeW6hSrgseKUcIuD6tS2yTKJD MFDpVCkcTJEkxGdTP0PF92UvrG6ib+JXUzgOynCQ+lEmbPwcEZ9RIBvvl/uHhQlF qyltCYN7Uvn7h8+Jbmh3t/IRsIY56LA0fH3eGuhhxHOLmJ7i2AkKlmCBJFekBarl ZjpHCFD3lbTRr6TlhSoDHkvs2LdhFCd1EKYpxDNMzAApEHdwHTHuZEJXREmM7zR1 Pw3xx3IrOw1G1C0dVOZ+/128BpYygMc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:18:40 2026 by rpki-client