$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa File: 2a1f5a03-eb95-3489-80d4-971a6ad53336.roa (raw, json) Hash identifier: 7cHBiE3q1rv0Wf1d1PvjKUmPPE/8Zzz7jDve+UfTnkU= Subject key identifier: AE:2C:36:AA:2C:7E:19:4F:EB:97:85:C2:8C:ED:A8:AA:C0:F5:16:DF Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584E4AEF73CB75257A96E6E59400 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 46887 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:73:cb:75:25:7a:96:e6:e5:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=a0d28e58-967c-46bc-ae80-d69e16641f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:af:eb:7b:16:49:58:d8:40:89:09:bb:a4: 0a:59:d1:b0:4e:80:cd:c5:10:67:14:98:d3:c1:1d: 25:27:d9:5e:b5:e4:05:ea:3d:90:1b:b1:4e:30:11: 92:aa:87:70:0f:c4:bf:53:da:72:45:df:62:3e:d4: c4:84:de:5e:bf:37:db:15:be:9b:b3:75:77:14:a6: 45:7c:3c:c3:ab:39:fd:c5:36:db:64:d7:74:86:35: 9e:2f:18:38:cd:80:d5:1f:7f:f2:d7:4a:eb:bc:0d: df:05:09:07:52:11:87:d3:73:43:bf:45:11:93:ce: b5:d0:4a:fe:3c:ee:0c:f4:c4:26:66:21:82:2c:ce: d0:90:88:70:35:a7:26:b2:ea:58:ac:44:56:2d:6a: a6:05:c7:2c:6a:12:6b:68:9e:a8:c2:6e:b7:62:8c: 86:fa:a8:31:66:a9:88:68:13:71:dd:bb:11:95:bc: f3:19:a2:c0:aa:b8:b0:83:40:8f:79:e4:0e:b8:43: f9:0c:df:8e:15:6b:2d:a7:fb:c1:c4:cc:1c:74:70: b8:d8:8f:c7:ef:71:18:19:37:57:d3:c3:27:9e:f1: 92:ee:5f:6a:2f:83:bd:e1:72:44:2d:02:1e:b5:2b: a1:06:9b:f4:25:ef:16:d5:31:9d:d9:29:d4:7a:6d: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:36:AA:2C:7E:19:4F:EB:97:85:C2:8C:ED:A8:AA:C0:F5:16:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9c:2e:bf:c6:42:e8:20:38:34:90:1d:39:a6:94:8c:fa:d3: 33:5c:39:c6:71:79:17:ef:19:b7:c1:47:75:7c:a5:00:54:cd: 66:89:2a:ba:82:08:bc:3d:9e:0b:d4:c6:18:49:05:d1:0a:a7: e5:fa:8b:c2:ea:b2:6f:9e:38:63:3b:f8:c5:bb:b9:34:04:d5: 3b:aa:d0:63:8a:19:89:f9:ba:69:22:a6:95:ba:3a:39:29:10: f9:54:a5:24:09:33:fc:d0:50:cd:33:44:ec:f8:1f:39:47:3d: 0c:6a:ee:ef:9c:4c:fd:91:e8:e9:64:c9:2f:c6:0a:bb:75:69: 2e:bd:b5:b6:d0:72:04:55:82:8d:1d:d9:4f:c1:2f:44:45:37: 4f:55:8c:40:80:63:2a:46:7d:bd:65:46:d5:5d:b4:38:5e:2e: bd:3d:71:25:71:e3:4a:03:63:d3:fb:1d:eb:34:26:4d:10:24: ee:f7:6b:dd:17:bb:0c:8a:08:e1:ee:35:c4:9e:3f:e1:1b:77: 46:c2:37:fa:87:20:cc:91:71:db:d6:d5:df:1b:34:b0:79:c9: 1b:98:8f:94:5a:6d:95:d0:4c:92:a4:72:50:5d:b3:13:8d:05: a9:e8:67:33:fc:84:9b:a8:0b:f2:f2:a1:41:cc:43:3d:bc:2c: eb:be:21:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K73PLdSV6lubllAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YTBkMjhlNTgtOTY3Yy00NmJjLWFlODAtZDY5ZTE2NjQxZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjiv63sWSVjYQIkJu6QKWdGwToDNxRBnFJjT wR0lJ9leteQF6j2QG7FOMBGSqodwD8S/U9pyRd9iPtTEhN5evzfbFb6bs3V3FKZF fDzDqzn9xTbbZNd0hjWeLxg4zYDVH3/y10rrvA3fBQkHUhGH03NDv0URk8610Er+ PO4M9MQmZiGCLM7QkIhwNacmsupYrERWLWqmBccsahJraJ6owm63YoyG+qgxZqmI aBNx3bsRlbzzGaLAqriwg0CPeeQOuEP5DN+OFWstp/vBxMwcdHC42I/H73EYGTdX 08MnnvGS7l9qL4O94XJELQIetSuhBpv0Je8W1TGd2SnUem38OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4sNqosfhlP65eFwoztqKrA9RbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvMmExZjVhMDMtZWI5NS0z NDg5LTgwZDQtOTcxYTZhZDUzMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKcLr/GQuggODSQHTmmlIz60zNcOcZxeRfvGbfBR3V8pQBUzWaJKrqC CLw9ngvUxhhJBdEKp+X6i8Lqsm+eOGM7+MW7uTQE1Tuq0GOKGYn5umkippW6Ojkp EPlUpSQJM/zQUM0zROz4HzlHPQxq7u+cTP2R6OlkyS/GCrt1aS69tbbQcgRVgo0d 2U/BL0RFN09VjECAYypGfb1lRtVdtDheLr09cSVx40oDY9P7Hes0Jk0QJO73a90X uwyKCOHuNcSeP+Ebd0bCN/qHIMyRcdvW1d8bNLB5yRuYj5RabZXQTJKkclBdsxON BanoZzP8hJuoC/LyoUHMQz28LOu+IXo= -----END CERTIFICATE-----Generated at Fri Jul 24 00:31:30 2026 by rpki-client