$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa File: 0c63918d-8469-3f06-8f4a-6a786f9c4338.roa (raw, json) Hash identifier: ShWtXL110y9WSZ7iwjOEluBjEjC1N1h4meoIWsCHUug= Subject key identifier: 1F:48:C0:C8:B7:1A:0C:15:1D:C5:61:5E:F4:90:0E:1A:17:DD:EA:59 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CF9A4DD5771782C28680 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 67.221.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cf:9a:4d:d5:77:17:82:c2:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=bf08cb6a-eca0-46b6-9872-54ee3e64d144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:f3:7c:4e:da:b6:3e:f0:e7:21:79:ab:0a: 1a:08:5c:5c:80:66:3f:3a:e5:72:e9:1d:d0:f1:82: 05:69:84:47:05:dd:a1:59:99:37:1c:ca:20:47:af: 07:f6:40:06:0b:86:7e:03:e7:5f:ce:c2:ae:6e:b7: c5:d8:2b:02:57:8b:0f:f9:42:5e:5e:f9:e5:c6:2e: 77:f9:69:89:95:55:53:b2:52:2e:7c:43:b3:72:e4: 36:d5:a7:f0:2f:2f:28:da:d3:4a:e5:74:0c:50:ab: 37:0b:8a:07:0f:6d:c3:a5:ea:43:1a:e3:ce:67:d3: a5:88:ac:78:02:e1:22:ea:74:1d:c8:cb:9a:03:4d: 34:12:2f:88:bf:2f:87:70:93:a4:25:1b:bc:97:ac: 46:9d:f8:7e:48:1c:41:7e:5f:15:49:ff:ed:3a:de: 6b:4a:c7:74:11:ba:64:ec:d5:95:48:a5:11:a1:5e: 66:f1:ed:dd:a0:b3:00:a7:80:55:1c:99:ac:c5:e5: 5b:bf:4a:db:61:c1:7d:5f:82:e1:6d:e0:bc:5e:b6: c7:a0:2f:d7:3e:be:58:f7:02:96:14:fa:96:4c:79: b4:08:25:c6:54:77:ac:bb:ff:6d:a5:4e:3b:e9:aa: 1d:15:dd:32:67:f9:1b:4c:6e:73:5a:a7:14:5d:3e: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:48:C0:C8:B7:1A:0C:15:1D:C5:61:5E:F4:90:0E:1A:17:DD:EA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:37:b2:2c:0a:73:07:c2:6f:7e:f5:79:8b:5c:dc:0e:8e:4d: 6b:48:45:ac:6e:8d:03:06:2c:d8:b8:8b:c2:73:95:29:59:98: aa:cc:3c:95:12:ef:98:a6:fa:2a:c1:e1:58:0d:1a:eb:1f:2d: ff:83:1a:89:75:77:e6:99:9c:1a:96:e6:bc:ed:51:88:34:a7: 49:61:20:f6:21:8a:2f:38:9a:50:58:22:5d:fc:65:5d:e9:a7: e9:ed:03:ce:91:17:18:a7:86:fa:09:0a:40:50:b7:df:0d:e7: 60:18:d1:62:79:2f:c0:e3:e7:fe:4c:45:a9:49:07:6f:a2:1f: 05:65:e4:ed:88:d4:01:24:4c:66:b1:b8:31:71:2c:41:15:94: 73:b5:c2:32:19:22:d5:9b:a7:97:f9:2b:a4:7c:32:1e:61:f7: d6:f0:80:a5:bb:8f:a2:1c:b9:fa:dd:2e:55:b1:78:cb:bb:61: 35:a7:d0:f7:70:55:54:20:e3:b2:1e:ef:17:5f:e9:18:96:fc: b0:79:cf:03:08:91:2a:5e:cd:25:39:b8:d6:61:de:37:85:e6: 09:97:cc:9f:90:26:73:9d:4f:38:8b:cd:ea:62:08:44:74:bd: dc:85:32:cd:94:eb:e2:bb:b5:8c:9c:d5:e8:29:b8:6a:cd:b8: 9d:b6:d1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM+aTdV3F4LChoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YmYwOGNiNmEtZWNhMC00NmI2LTk4NzItNTRlZTNlNjRkMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyLzfE7atj7w5yF5qwoaCFxcgGY/OuVy6R3Q 8YIFaYRHBd2hWZk3HMogR68H9kAGC4Z+A+dfzsKubrfF2CsCV4sP+UJeXvnlxi53 +WmJlVVTslIufEOzcuQ21afwLy8o2tNK5XQMUKs3C4oHD23DpepDGuPOZ9OliKx4 AuEi6nQdyMuaA000Ei+Ivy+HcJOkJRu8l6xGnfh+SBxBfl8VSf/tOt5rSsd0Ebpk 7NWVSKURoV5m8e3doLMAp4BVHJmsxeVbv0rbYcF9X4LhbeC8XrbHoC/XPr5Y9wKW FPqWTHm0CCXGVHesu/9tpU476aodFd0yZ/kbTG5zWqcUXT6oIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9IwMi3GgwVHcVhXvSQDhoX3epZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMGM2MzkxOGQtODQ2OS0z ZjA2LThmNGEtNmE3ODZmOWM0MzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ93ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU3siwKcwfCb371eYtc3A6OTWtIRaxujQMGLNi4i8JzlSlZmKrMPJUS 75im+irB4VgNGusfLf+DGol1d+aZnBqW5rztUYg0p0lhIPYhii84mlBYIl38ZV3p p+ntA86RFxinhvoJCkBQt98N52AY0WJ5L8Dj5/5MRalJB2+iHwVl5O2I1AEkTGax uDFxLEEVlHO1wjIZItWbp5f5K6R8Mh5h99bwgKW7j6IcufrdLlWxeMu7YTWn0Pdw VVQg47Ie7xdf6RiW/LB5zwMIkSpezSU5uNZh3jeF5gmXzJ+QJnOdTziLzepiCER0 vdyFMs2U6+K7tYyc1egpuGrNuJ220X0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:35 2026 by rpki-client