$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa File: b1ea09db-6881-386b-a227-66ff08df673c.roa (raw, json) Hash identifier: CGGrcEX3DEnFX0yquO/hw5/oI3uRi6Ob4kEqF7y8Qvc= Subject key identifier: 93:CD:6A:5B:08:32:64:1B:A9:0D:17:58:49:C1:57:63:3E:0D:62:63 Certificate issuer: /CN=a327a78b-38c6-4e70-927c-f4959d89c6b4 Certificate serial: 010D0C9F4328584D0D42807BB8FDC581C90CD180 Authority key identifier: 75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 167.150.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:80:7b:b8:fd:c5:81:c9:0c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a327a78b-38c6-4e70-927c-f4959d89c6b4 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=668e476e-d1d6-40bc-a246-3dcd6ccbe2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:3f:6e:5f:d6:46:e1:2e:40:f1:7b:80:40: 4d:2f:63:96:58:95:09:c0:f8:74:f3:a5:8e:21:4f: 2b:f5:fd:a2:90:6e:9f:bb:be:65:73:34:a4:4d:41: 71:f1:11:0b:02:da:38:6d:42:ad:bd:36:a9:b8:c2: 3f:95:c5:b3:48:b5:84:d6:6c:a2:6e:74:7b:17:19: 65:50:bd:34:9c:f4:16:35:97:05:45:8f:f0:00:cb: 00:31:99:95:6d:26:97:5e:46:e7:0e:8b:94:09:3f: 06:dd:1a:78:fc:54:11:51:69:4d:e3:42:b9:eb:3d: 5b:7b:c5:75:c0:80:f2:25:d7:99:be:f6:49:88:09: 9c:07:d1:e5:45:71:e8:28:66:7d:6b:9d:45:6a:af: 7d:01:bb:9b:6f:e7:b7:39:c9:15:67:e4:94:9d:b6: 50:fb:31:3a:6f:ee:d2:f0:ab:8b:24:87:bc:d7:06: cd:92:eb:9b:11:e9:b6:23:8a:12:d4:76:d9:9a:c8: 52:0c:ae:3f:df:a4:be:6e:74:fd:d6:fb:d5:ce:77: ef:79:87:76:d7:36:ef:b2:e4:9a:64:33:9c:8d:c1: f0:b9:9d:3b:43:a1:be:7e:a2:d0:70:3c:2c:52:5a: 53:f3:1f:cf:50:c2:37:12:f2:c6:e6:20:25:f2:e3: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:CD:6A:5B:08:32:64:1B:A9:0D:17:58:49:C1:57:63:3E:0D:62:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl X509v3 Authority Key Identifier: keyid:75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer sbgp-ipAddrBlock: critical IPv4: 167.150.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:88:42:2b:9b:39:1b:d6:92:1b:d9:1d:81:94:dc:b6:6e:dd: 4f:53:0e:bb:77:23:f8:ee:8b:b1:67:a2:dc:00:95:1e:e2:7d: 67:dc:5a:81:4c:73:d4:1a:ea:bf:f6:c8:df:da:e8:af:77:20: c7:41:5c:88:f1:22:0e:3d:be:31:7b:28:98:99:07:a5:de:ef: 54:2a:55:f1:0e:72:7d:ef:5a:a1:0a:3f:2d:64:88:51:27:46: bf:32:1e:d8:ba:cc:a7:2f:68:1e:74:5f:e7:a1:be:4b:48:f2: c0:74:aa:b9:55:d2:19:44:0d:59:47:b2:91:10:1a:4a:37:ba: cd:8b:ca:d6:2a:29:8e:59:a6:1e:64:8a:27:1f:86:83:b6:b3: 4f:a2:d4:c0:54:4c:de:3c:4a:3c:91:cd:db:31:02:7b:78:70: e9:83:d0:82:64:49:aa:5b:0e:9e:d0:a8:b1:41:36:36:6f:68: 1b:88:ca:8c:dc:5c:93:a7:38:88:f6:e4:64:72:28:13:9c:11: 94:d5:d2:41:9a:5f:4b:ff:16:df:6a:d5:56:7c:cd:1e:02:60: 22:a0:7c:d4:72:ab:9d:42:b9:70:e6:d1:58:47:18:de:3a:d2: ea:33:a8:07:a1:b8:0c:cb:f3:e5:3c:93:e9:f7:f8:96:2c:b1: 67:11:07:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQoB7uP3FgckM0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyN2E3OGItMzhjNi00ZTcwLTkyN2MtZjQ5NTlkODlj NmI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjY4ZTQ3NmUtZDFkNi00MGJjLWEyNDYtM2RjZDZjY2JlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbw/bl/WRuEuQPF7gEBNL2OWWJUJwPh086WO IU8r9f2ikG6fu75lczSkTUFx8RELAto4bUKtvTapuMI/lcWzSLWE1myibnR7Fxll UL00nPQWNZcFRY/wAMsAMZmVbSaXXkbnDouUCT8G3Rp4/FQRUWlN40K56z1be8V1 wIDyJdeZvvZJiAmcB9HlRXHoKGZ9a51Faq99Abubb+e3OckVZ+SUnbZQ+zE6b+7S 8KuLJIe81wbNkuubEem2I4oS1HbZmshSDK4/36S+bnT91vvVznfveYd21zbvsuSa ZDOcjcHwuZ07Q6G+fqLQcDwsUlpT8x/PUMI3EvLG5iAl8uOLawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPNalsIMmQbqQ0XWEnBV2M+DWJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3 YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1OWQ4OWM2YjQvYjFlYTA5ZGItNjg4MS0z ODZiLWEyMjctNjZmZjA4ZGY2NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTMyN2E3OGItMzhjNi00ZTcwLTky N2MtZjQ5NTlkODljNmI0L2EzMjdhNzhiLTM4YzYtNGU3MC05MjdjLWY0OTU5ZDg5 YzZiNC5jcmwwHwYDVR0jBBgwFoAUdfjaz3Hz7vSyCimFX9P3ymLtWv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1 OWQ4OWM2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5bhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCIQiubORvWkhvZHYGU3LZu3U9TDrt3I/jui7FnotwAlR7ifWfcWoFM c9Qa6r/2yN/a6K93IMdBXIjxIg49vjF7KJiZB6Xe71QqVfEOcn3vWqEKPy1kiFEn Rr8yHti6zKcvaB50X+ehvktI8sB0qrlV0hlEDVlHspEQGko3us2LytYqKY5Zph5k iicfhoO2s0+i1MBUTN48SjyRzdsxAnt4cOmD0IJkSapbDp7QqLFBNjZvaBuIyozc XJOnOIj25GRyKBOcEZTV0kGaX0v/Ft9q1VZ8zR4CYCKgfNRyq51CuXDm0VhHGN46 0uozqAehuAzL8+U8k+n3+JYssWcRB/E= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:53 2026 by rpki-client