$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa File: 7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa (raw, json) Hash identifier: O1WmWzo/EMJvZEpglaIPxE5avtiaaM7tbcZnwiNot5E= Subject key identifier: 3F:DA:E0:07:C1:14:18:13:E3:22:BE:06:29:01:77:5D:23:C0:F5:D4 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584D3DFFB10A09B2805D928C6700 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 399275 IP address blocks: 167.253.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b1:0a:09:b2:80:5d:92:8c:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8cfa974a-a084-4fa3-a126-3b0c7a6c9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:27:4a:da:cf:b6:ac:b2:2a:54:e0:c8:6c: 8e:76:6c:36:21:0b:fd:ca:c2:43:ed:e1:cd:6f:1e: 69:ac:d0:b6:8b:1f:c1:02:f0:22:12:ab:e0:27:83: dd:66:f8:3b:87:26:4b:8a:43:b7:c5:c1:28:d9:2c: 3a:ca:86:22:f8:ee:5c:b6:21:f6:ca:31:a7:36:ba: 03:9b:82:3c:99:db:ae:55:b1:9d:b7:f5:33:c3:5a: 6d:90:ce:da:2c:ab:4c:d3:c0:f5:d8:d4:d7:92:c9: 7d:c5:5c:d7:49:39:47:e7:63:4e:fe:13:7f:65:60: 06:c1:81:91:3d:ff:4f:ed:56:98:e8:31:a7:01:b3: ce:51:b1:bf:ff:7c:0e:0a:45:91:3b:d4:a5:4f:8c: f3:70:28:b3:08:32:1a:ed:78:71:29:70:e5:0f:10: f5:66:87:e7:f3:46:82:1b:89:79:08:7e:dd:4f:cf: 1a:d1:72:dd:1f:05:b6:6c:2e:11:cc:62:f6:e2:58: 3b:6e:52:9b:b6:30:94:52:ea:32:d3:4e:56:ea:da: 5d:a2:0d:e3:eb:80:dc:fc:ef:d1:c6:89:6a:7d:1d: 45:55:6d:b2:88:fb:f4:02:f0:5f:c0:da:97:ec:1a: cd:fc:2c:f1:cd:54:6a:48:f1:fb:d7:31:ca:1c:71: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DA:E0:07:C1:14:18:13:E3:22:BE:06:29:01:77:5D:23:C0:F5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:69:1e:41:4e:53:05:90:6b:8a:0c:3e:f0:11:12:d3:c5:98: 1d:9e:06:d7:75:54:05:fd:46:7d:0f:32:54:1d:ba:50:3b:79: 51:d9:a5:e4:3a:7b:40:c0:c5:9e:b6:b2:20:e1:c8:07:9f:93: f7:f1:06:94:66:50:f0:9b:68:c4:dd:be:10:75:30:f1:1d:3a: 2a:5a:ab:a6:50:dc:ff:30:79:33:ab:0a:be:72:e1:44:1c:84: 5c:fc:4b:6c:d7:71:ab:e8:77:37:76:85:af:2d:a9:c0:ce:52: 7e:83:4f:e7:cc:f4:5e:ad:e7:7c:39:4c:82:bc:65:02:de:31: ce:25:f0:6f:a8:32:b2:32:94:85:7c:23:1e:5b:70:15:98:1a: 6a:82:bc:20:0e:53:a4:74:18:75:52:53:25:1e:8a:0a:c3:6e: ff:76:4b:81:6e:03:05:8f:71:0a:34:4b:6c:73:a5:7d:9a:57: 73:84:03:c2:8f:8e:03:1a:66:72:87:83:de:a3:97:b1:78:23: 34:d7:d9:13:d0:8c:44:0c:dd:c3:75:be:9e:ce:1d:43:1d:4d: 41:21:be:f3:b1:76:f2:00:04:8c:50:cd:2f:7c:e1:23:92:a4: 2f:9f:3b:69:0f:2d:a8:2b:66:b1:18:e7:36:c8:8c:d3:96:ed: bd:e7:80:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7EKCbKAXZKMZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGNmYTk3NGEtYTA4NC00ZmEzLWExMjYtM2IwYzdhNmM5MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKAnStrPtqyyKlTgyGyOdmw2IQv9ysJD7eHN bx5prNC2ix/BAvAiEqvgJ4PdZvg7hyZLikO3xcEo2Sw6yoYi+O5ctiH2yjGnNroD m4I8mduuVbGdt/Uzw1ptkM7aLKtM08D12NTXksl9xVzXSTlH52NO/hN/ZWAGwYGR Pf9P7VaY6DGnAbPOUbG//3wOCkWRO9SlT4zzcCizCDIa7XhxKXDlDxD1Zofn80aC G4l5CH7dT88a0XLdHwW2bC4RzGL24lg7blKbtjCUUuoy005W6tpdog3j64Dc/O/R xolqfR1FVW2yiPv0AvBfwNqX7BrN/CzxzVRqSPH71zHKHHGHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/a4AfBFBgT4yK+BikBd10jwPXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvN2U5Y2ZlYjctNDg0OC0z N2E2LWEzMTctNjBiZmRlZDdiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJpHkFOUwWQa4oMPvAREtPFmB2eBtd1VAX9Rn0PMlQdulA7eVHZpeQ6 e0DAxZ62siDhyAefk/fxBpRmUPCbaMTdvhB1MPEdOipaq6ZQ3P8weTOrCr5y4UQc hFz8S2zXcavodzd2ha8tqcDOUn6DT+fM9F6t53w5TIK8ZQLeMc4l8G+oMrIylIV8 Ix5bcBWYGmqCvCAOU6R0GHVSUyUeigrDbv92S4FuAwWPcQo0S2xzpX2aV3OEA8KP jgMaZnKHg96jl7F4IzTX2RPQjEQM3cN1vp7OHUMdTUEhvvOxdvIABIxQzS984SOS pC+fO2kPLagrZrEY5zbIjNOW7b3ngNQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:18 2026 by rpki-client