$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa File: 602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa (raw, json) Hash identifier: pRVp2fdAgqyWaJXswzVhUj+ltsT8BHaKzNVh7C83zmI= Subject key identifier: 09:52:07:35:2A:32:0A:04:90:20:0E:2B:D3:FA:7E:BF:B0:89:C3:E7 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584D3B34E90C1DB470E01905E580 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 16739 IP address blocks: 67.217.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e9:0c:1d:b4:70:e0:19:05:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=403f17af-4187-4eb0-b763-e8b7bff110ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:3e:64:98:a2:ad:3f:99:62:be:2b:81:0d: 0d:0b:99:6c:c6:7c:03:41:c0:50:bc:a1:ca:a6:17: 82:00:e6:bc:ba:48:7a:ac:76:3c:cd:94:4d:94:ce: ff:6a:06:3c:ed:3f:86:61:fb:f7:00:4e:66:a8:c2: d8:2e:55:dd:47:38:eb:39:20:b6:ca:0f:c2:ba:43: c5:db:65:98:2e:e7:97:83:56:80:8e:3e:b2:46:5b: 55:90:70:8f:01:d1:08:3a:b5:1d:bb:fd:5c:58:b6: 93:56:ed:d7:0c:23:a2:7e:7d:b4:7b:ca:fa:82:b8: d8:79:13:af:a1:25:ae:74:32:0c:fd:a2:ed:82:57: b5:7e:a8:f2:34:51:e0:ee:83:01:1f:54:79:91:ff: 50:09:97:3a:1e:2d:dc:53:cd:76:55:ca:4c:5e:43: 1c:6e:42:c2:9d:63:e6:eb:9c:f6:d5:cb:f9:2d:d6: c9:ed:1a:c2:a2:3d:1f:37:1f:ef:ae:16:97:1d:0d: 87:de:30:66:c5:8b:36:18:d4:28:af:a8:06:8a:cf: 64:15:e5:c5:1a:07:08:6e:f3:f3:6a:58:e5:4e:c6: 19:b1:5e:87:94:89:67:1d:06:bb:ee:b3:eb:8d:67: d5:e5:87:a9:02:6a:3f:bd:e1:cc:71:52:43:25:38: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:52:07:35:2A:32:0A:04:90:20:0E:2B:D3:FA:7E:BF:B0:89:C3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:17:ac:f8:d8:dc:10:a5:1e:22:0c:47:42:c4:6f:e9:03:34: 4a:ba:97:ff:18:c3:c0:12:e9:ac:d1:60:37:d8:b2:21:0b:41: 16:67:44:f6:43:22:61:ea:18:55:2b:21:07:77:ec:9c:e2:1c: a9:f9:fe:ba:72:d7:fc:1d:55:3b:ad:02:09:ee:e3:a9:0e:b7: b1:52:20:10:56:94:de:9b:b8:8f:39:53:c7:80:f1:55:1a:cb: 06:2b:93:cf:af:91:1b:7a:20:ac:ac:61:d5:dd:b9:2f:38:7a: 16:1c:e8:d2:7a:6c:31:fd:b2:bc:21:05:d9:95:0f:b1:9e:d4: b7:f4:79:b7:50:ac:6a:dd:ca:24:4e:78:58:3e:d1:3d:32:24: 1e:b3:6f:f3:f2:0d:59:66:bb:81:06:74:9d:d2:ed:fe:a1:ef: e6:32:e3:a1:d5:4b:1b:be:fc:65:50:4b:a7:ed:f4:eb:64:93: c3:89:7d:48:4a:d1:a0:04:66:a6:29:60:08:9f:41:18:eb:51: 87:87:3e:6f:da:cc:2a:f0:69:c2:b1:3a:05:1e:96:71:fd:e0: 15:cc:33:97:79:f5:fc:e0:90:7c:c6:0f:e6:26:bc:6d:bc:f4: bd:0d:1d:fb:0a:e0:cf:17:22:27:7d:a2:e2:8c:d8:bd:7e:2d: a1:df:eb:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOkMHbRw4BkF5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NDAzZjE3YWYtNDE4Ny00ZWIwLWI3NjMtZThiN2JmZjExMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKA+ZJiirT+ZYr4rgQ0NC5lsxnwDQcBQvKHK pheCAOa8ukh6rHY8zZRNlM7/agY87T+GYfv3AE5mqMLYLlXdRzjrOSC2yg/CukPF 22WYLueXg1aAjj6yRltVkHCPAdEIOrUdu/1cWLaTVu3XDCOifn20e8r6grjYeROv oSWudDIM/aLtgle1fqjyNFHg7oMBH1R5kf9QCZc6Hi3cU812VcpMXkMcbkLCnWPm 65z21cv5LdbJ7RrCoj0fNx/vrhaXHQ2H3jBmxYs2GNQor6gGis9kFeXFGgcIbvPz aljlTsYZsV6HlIlnHQa77rPrjWfV5YepAmo/veHMcVJDJTjLjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlSBzUqMgoEkCAOK9P6fr+wicPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjAyZjA3ZTEtMDIxYi0z NDdkLWI1NWYtMWEzYzZhMGFmZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8XrPjY3BClHiIMR0LEb+kDNEq6l/8Yw8AS6azRYDfYsiELQRZnRPZD ImHqGFUrIQd37JziHKn5/rpy1/wdVTutAgnu46kOt7FSIBBWlN6buI85U8eA8VUa ywYrk8+vkRt6IKysYdXduS84ehYc6NJ6bDH9srwhBdmVD7Ge1Lf0ebdQrGrdyiRO eFg+0T0yJB6zb/PyDVlmu4EGdJ3S7f6h7+Yy46HVSxu+/GVQS6ft9Otkk8OJfUhK 0aAEZqYpYAifQRjrUYeHPm/azCrwacKxOgUelnH94BXMM5d59fzgkHzGD+YmvG28 9L0NHfsK4M8XIid9ouKM2L1+LaHf65c= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:12 2026 by rpki-client