$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa File: 67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json) Hash identifier: dRQDokLaPuQV8jU9RYvXKGqQTOh4FLRmRlF7KnpRRQo= Subject key identifier: 21:80:07:9F:A4:ED:EC:32:5E:E1:E0:58:8E:B4:32:A4:C9:3E:89:D7 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584DC29AE18F4248F1A69E7C2E80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 54113 IP address blocks: 162.247.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:e1:8f:42:48:f1:a6:9e:7c:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=0bed5613-2b27-4487-91ff-cb1ea221b421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:e3:04:76:5d:4e:0e:73:15:19:32:4d:61: 89:72:59:35:99:ef:a6:9c:1a:ee:b8:6f:00:9b:01: 92:ae:06:ba:bb:02:28:9a:0d:86:df:b0:d9:ed:66: a6:29:e7:45:9e:d0:0a:14:b7:85:1d:11:b7:7a:5f: 34:3b:8a:ef:91:ea:a0:91:23:83:c1:24:93:61:79: 3b:bf:ed:df:60:59:a5:29:30:16:75:be:0a:eb:7f: 1b:d7:c6:ab:14:e8:a5:08:45:0c:b4:16:c8:c1:19: a0:4e:6d:52:ef:ee:24:d3:7b:1c:7f:66:73:66:ba: 96:ba:86:c8:b1:90:8c:b4:95:4b:e8:61:1c:35:f7: 34:91:68:cf:e4:68:a1:f5:25:a3:c2:6a:d8:06:c6: 77:8e:8d:85:52:7a:a5:04:03:00:ff:22:2c:55:fd: 80:4a:0c:8e:e9:c6:23:f0:13:29:1a:8e:3e:cc:6a: f1:0b:e5:2a:e9:94:c3:6b:60:52:17:98:d9:99:2b: 72:1c:5e:da:3c:9f:1f:8f:b6:a1:6e:96:3e:3a:2c: f5:ed:b6:47:ba:f6:90:d3:d1:88:4a:4a:4b:13:95: 24:cb:c1:07:fc:2a:fe:4f:2d:f3:a2:45:bd:8a:cd: 55:c9:5d:b7:17:e3:3b:cd:44:13:8f:4f:ca:2e:32: 98:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:07:9F:A4:ED:EC:32:5E:E1:E0:58:8E:B4:32:A4:C9:3E:89:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:18:df:89:53:d1:82:a9:c7:7c:a6:af:6a:b5:15:fc:c1:c3: 6b:d2:c4:83:3f:8e:6b:b5:d7:70:f5:16:22:fd:78:fe:fc:d8: 4b:f3:d3:a6:8e:20:a2:d8:0e:52:ae:37:da:82:d0:71:74:93: 02:60:a9:65:e0:9f:d2:e0:1a:bf:99:44:ba:04:20:67:95:99: 74:d8:90:93:e7:48:23:40:75:70:71:40:c9:07:ce:27:61:6a: 0f:b3:87:8d:4f:a1:b3:e2:b5:07:b4:bb:23:ac:0c:5a:41:20: 5d:a5:7b:d6:d7:89:9d:15:7d:0e:b0:33:d4:fc:63:4d:13:2e: c2:94:e3:22:a1:42:3e:dc:a9:ab:01:22:09:e7:29:6b:d2:55: d6:90:23:68:59:15:ab:13:7f:0a:f2:32:15:d4:88:a3:b3:1c: 9c:08:35:ff:c0:41:02:b1:01:26:9d:c4:17:43:6c:ee:1c:00: 72:e1:77:a7:79:74:e9:ba:a4:95:b4:55:7a:5e:f4:84:96:60: 27:05:84:35:fa:20:6f:04:64:4e:0f:9f:61:64:a9:14:41:6a: 83:62:21:6e:1c:a5:09:17:9e:ad:b0:27:f1:67:9b:86:3f:5b: b6:d4:15:95:22:fd:6c:4a:b0:29:e7:40:51:2c:95:35:c6:4b: 00:fd:3e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuGPQkjxpp58LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk MGJlZDU2MTMtMmIyNy00NDg3LTkxZmYtY2IxZWEyMjFiNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7jBHZdTg5zFRkyTWGJclk1me+mnBruuG8A mwGSrga6uwIomg2G37DZ7WamKedFntAKFLeFHRG3el80O4rvkeqgkSODwSSTYXk7 v+3fYFmlKTAWdb4K638b18arFOilCEUMtBbIwRmgTm1S7+4k03scf2ZzZrqWuobI sZCMtJVL6GEcNfc0kWjP5Gih9SWjwmrYBsZ3jo2FUnqlBAMA/yIsVf2ASgyO6cYj 8BMpGo4+zGrxC+Uq6ZTDa2BSF5jZmStyHF7aPJ8fj7ahbpY+Oiz17bZHuvaQ09GI SkpLE5Uky8EH/Cr+Ty3zokW9is1VyV23F+M7zUQTj0/KLjKYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGAB5+k7ewyXuHgWI60MqTJPonXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkY34lT0YKpx3ymr2q1FfzBw2vSxIM/jmu113D1FiL9eP782Evz06aO IKLYDlKuN9qC0HF0kwJgqWXgn9LgGr+ZRLoEIGeVmXTYkJPnSCNAdXBxQMkHzidh ag+zh41PobPitQe0uyOsDFpBIF2le9bXiZ0VfQ6wM9T8Y00TLsKU4yKhQj7cqasB IgnnKWvSVdaQI2hZFasTfwryMhXUiKOzHJwINf/AQQKxASadxBdDbO4cAHLhd6d5 dOm6pJW0VXpe9ISWYCcFhDX6IG8EZE4Pn2FkqRRBaoNiIW4cpQkXnq2wJ/Fnm4Y/ W7bUFZUi/WxKsCnnQFEslTXGSwD9Pqw= -----END CERTIFICATE-----Generated at Wed May 13 04:15:30 2026 by rpki-client