$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa File: 578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa (raw, json) Hash identifier: bcActjCRpIgyE6KG7wTLR1+HW8iG6XNCV+ELZJamqZ0= Subject key identifier: 21:A6:F9:1F:5E:97:3A:D7:2E:B0:12:85:4A:22:26:68:53:71:E5:5A Certificate issuer: /CN=2521532d-a0f2-43a5-a2a8-640c423476ff Certificate serial: 010D0C9F4328584DB3403803FB6A856900F443A0 Authority key identifier: 02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa Signing time: Sat 02 May 2026 13:00:31 +0000 ROA not before: Sat 02 May 2026 13:00:31 +0000 ROA not after: Fri 31 Jul 2026 13:00:31 +0000 asID: 10922 IP address blocks: 167.254.228.0/22 maxlen: 24 2604:2c20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b3:40:38:03:fb:6a:85:69:00:f4:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2521532d-a0f2-43a5-a2a8-640c423476ff Validity Not Before: May 2 13:00:31 2026 GMT Not After : Jul 31 13:00:31 2026 GMT Subject: CN=b2a0bb7b-5a50-479c-97d0-ccfe3bc257b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:42:6e:d9:14:32:73:d3:05:d4:c7:c8:bb: f3:e6:4b:64:be:f5:6c:f1:42:dc:93:0c:f3:5c:64: a5:b7:76:bc:1b:25:11:5b:19:3b:b7:5d:7f:ee:fd: 9e:e8:df:a1:29:f2:99:f9:0c:ec:39:09:94:56:0b: 39:eb:50:4c:fb:8d:94:14:68:ab:3d:34:4c:bb:77: 11:4e:9d:9e:2e:7e:6e:99:f9:3f:15:56:60:43:b5: 7d:ef:a8:13:c6:81:d2:77:29:4f:c0:e2:99:18:d0: f3:bf:66:2b:64:5c:83:5a:e2:19:8d:82:f2:7c:3a: e0:d1:39:4f:66:79:01:53:89:8c:1b:28:0a:98:9a: 9c:cb:62:6f:9d:d0:31:e4:5b:6c:c9:f1:64:1f:74: bc:f3:41:e7:44:67:6e:4f:0e:46:44:7b:4e:71:00: 5d:8a:ec:01:d4:27:24:30:c3:d1:52:eb:7f:31:16: 81:29:3b:56:92:44:d3:06:cb:b3:eb:69:57:f1:93: ae:81:82:d3:91:01:ae:a5:1f:29:ec:4e:27:be:5e: c0:f3:06:e5:f5:49:a7:f7:f8:6d:7f:c4:95:6c:b1: 5c:5d:88:eb:f3:76:f3:a7:43:13:df:3d:e1:3f:4c: 3c:79:91:d4:93:36:4b:95:b5:1c:b8:f3:02:81:7f: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A6:F9:1F:5E:97:3A:D7:2E:B0:12:85:4A:22:26:68:53:71:E5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/578bdcce-a87e-3f1d-aa0d-d460efb18cbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl X509v3 Authority Key Identifier: keyid:02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer sbgp-ipAddrBlock: critical IPv4: 167.254.228.0/22 IPv6: 2604:2c20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:95:92:e6:cf:fe:07:15:ec:b0:a1:9f:ed:05:ac:aa:79:ab: 98:63:36:a8:f2:5a:06:25:c4:ee:6b:54:d5:45:3e:14:7f:a2: 59:0d:61:de:bf:0b:2b:a8:21:30:ee:77:64:4f:f0:17:3e:0b: 19:23:25:11:5a:08:4c:86:7f:a5:48:33:2a:2b:3f:a1:44:7a: d9:9d:00:06:dd:74:03:9f:32:9e:13:42:27:09:61:f3:7a:f8: 42:3f:2a:77:2f:bb:88:bc:31:85:58:dc:0f:e1:3e:c9:a9:40: d8:97:07:c1:80:0f:90:f6:00:be:9d:34:32:0d:6a:9e:0b:12: 09:9f:f7:72:b4:45:bd:8e:9f:b2:2c:aa:2d:f5:a7:5a:9e:c2: 4c:e2:8a:9b:54:f9:08:46:71:47:98:e6:01:bb:52:f4:28:c7: 39:5c:1b:de:7f:17:47:fb:08:40:71:3a:5c:97:f4:fb:fe:88: b6:29:fa:19:49:bf:68:2b:3b:4a:e6:53:5f:92:ec:66:3f:ae: f7:dc:ae:75:a0:ec:e2:34:8a:17:61:08:ba:ee:21:c6:84:c4: b3:00:31:e0:56:50:a5:9f:ca:5d:2e:db:d9:8e:f3:67:4a:91: 70:11:03:25:fb:7b:ed:5a:e7:26:17:37:d2:af:75:ab:4c:76: 86:92:67:c2 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE2zQDgD+2qFaQD0Q6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMTUzMmQtYTBmMi00M2E1LWEyYTgtNjQwYzQyMzQ3 NmZmMB4XDTI2MDUwMjEzMDAzMVoXDTI2MDczMTEzMDAzMVowLzEtMCsGA1UEAxMk YjJhMGJiN2ItNWE1MC00NzljLTk3ZDAtY2NmZTNiYzI1N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9xCbtkUMnPTBdTHyLvz5ktkvvVs8ULckwzz XGSlt3a8GyURWxk7t11/7v2e6N+hKfKZ+QzsOQmUVgs561BM+42UFGirPTRMu3cR Tp2eLn5umfk/FVZgQ7V976gTxoHSdylPwOKZGNDzv2YrZFyDWuIZjYLyfDrg0TlP ZnkBU4mMGygKmJqcy2JvndAx5FtsyfFkH3S880HnRGduTw5GRHtOcQBdiuwB1Cck MMPRUut/MRaBKTtWkkTTBsuz62lX8ZOugYLTkQGupR8p7E4nvl7A8wbl9Umn9/ht f8SVbLFcXYjr83bzp0MT3z3hP0w8eZHUkzZLlbUcuPMCgX+CPwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCGm+R9elzrXLrAShUoiJmhTceVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yNTIx NTMyZC1hMGYyLTQzYTUtYTJhOC02NDBjNDIzNDc2ZmYvNTc4YmRjY2UtYTg3ZS0z ZjFkLWFhMGQtZDQ2MGVmYjE4Y2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjUyMTUzMmQtYTBmMi00M2E1LWEy YTgtNjQwYzQyMzQ3NmZmLzI1MjE1MzJkLWEwZjItNDNhNS1hMmE4LTY0MGM0MjM0 NzZmZi5jcmwwHwYDVR0jBBgwFoAUAtHtyjhMFYwxKEvtIMTW2c9s65gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yNTIxNTMyZC1hMGYyLTQzYTUtYTJhOC02NDBj NDIzNDc2ZmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCp/7kMA0E AgACMAcDBQAmBCwgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFaVkubP/gcV7LChn+0FrKp5q5hjNqjyWgYl xO5rVNVFPhR/olkNYd6/CyuoITDud2RP8Bc+CxkjJRFaCEyGf6VIMyorP6FEetmd AAbddAOfMp4TQicJYfN6+EI/Kncvu4i8MYVY3A/hPsmpQNiXB8GAD5D2AL6dNDIN ap4LEgmf93K0Rb2On7Isqi31p1qewkziiptU+QhGcUeY5gG7UvQoxzlcG95/F0f7 CEBxOlyX9Pv+iLYp+hlJv2grO0rmU1+S7GY/rvfcrnWg7OI0ihdhCLruIcaExLMA MeBWUKWfyl0u29mO82dKkXARAyX7e+1a5yYXN9KvdatMdoaSZ8I= -----END CERTIFICATE-----Generated at Wed May 13 10:49:29 2026 by rpki-client