$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa File: 2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa (raw, json) Hash identifier: jAs1bYAA28ImfusnuAMohZw9sm3VTfKimUz/gwRVfa0= Subject key identifier: 88:55:53:A8:02:92:6D:5A:61:C2:36:EF:A1:3C:CD:1D:BA:59:61:7D Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CF66C8507741C7205340 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 67.221.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cf:66:c8:50:77:41:c7:20:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=cd29cab5-5525-49cb-8e91-3c3b2fe92bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:28:62:d5:a8:14:91:d2:01:6a:a2:0e:58: 61:a2:e3:ac:2e:e5:b7:e7:be:2a:24:23:30:4b:d2: 9e:0e:78:a8:ec:c3:92:be:f1:0b:b3:37:2d:66:87: 54:55:c1:b3:d0:2c:b6:a8:7d:6f:f7:51:fb:d0:e8: 26:ce:8d:0f:29:47:54:d9:d3:37:f4:d0:4f:13:bc: 49:86:05:d2:41:5d:90:04:02:9e:67:31:ab:a2:3e: 51:11:5c:e2:76:b2:d5:d3:b2:51:0a:cc:ff:84:3b: 84:bf:78:1d:ae:cb:e9:4d:2e:2c:16:26:93:bf:6c: 07:fc:83:dc:fa:c7:04:c2:76:a6:16:e2:9d:9c:8f: 58:f1:3b:4b:60:44:c1:e4:e0:7a:af:de:6e:5d:47: 0c:20:a2:43:1e:ba:3d:c9:28:48:66:1a:b1:6b:c2: e3:b7:59:72:ab:56:3f:ab:10:1c:02:09:d8:1b:fb: 75:61:f5:c1:92:40:2e:94:5f:90:8e:8c:f5:ae:f5: 50:07:e4:e4:3e:60:aa:8d:63:9e:66:4c:23:8c:24: ec:0d:8c:f5:d3:7b:1a:91:ea:13:84:f3:05:76:c1: 34:7d:47:a2:a8:b0:01:8b:dc:14:26:9c:e6:f9:41: 1e:33:ee:e8:c1:1e:8e:f6:ca:69:a8:30:fb:44:c5: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:53:A8:02:92:6D:5A:61:C2:36:EF:A1:3C:CD:1D:BA:59:61:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:aa:05:b6:f9:75:e1:17:db:94:fd:04:f9:4c:11:04:b4:e1: 7b:fe:16:f6:6f:a4:1a:7f:dd:b8:0a:85:a3:1c:a9:c5:a4:36: a8:f1:68:9d:27:ae:03:e8:85:8e:e5:ad:33:e9:bd:7d:6d:27: a0:8f:1a:49:e2:6a:69:44:73:de:76:df:e5:0b:a7:77:94:60: 61:cf:00:ae:cd:c5:84:eb:a7:ba:4a:a6:bc:99:00:93:d1:ef: 87:56:05:57:75:b4:75:d2:61:f8:65:28:30:a9:f2:66:e2:54: 60:65:08:f5:ef:0a:9b:e6:62:c4:f9:2c:da:f0:cb:ee:3b:fb: 26:10:76:38:95:8b:31:be:2a:84:ff:9c:09:f8:f3:54:e2:19: 6d:ab:5b:9a:e3:70:56:af:e6:d7:1a:89:ee:7c:76:58:eb:af: 47:6b:69:b6:26:21:90:b4:20:75:78:5c:ef:de:a2:5b:7b:db: a4:ad:c4:5f:0c:37:dd:19:a6:82:d6:e8:66:0b:df:38:3e:8f: 33:7c:de:d7:c3:6d:28:28:51:4b:f2:38:a6:25:c4:d4:92:ea: df:de:56:0d:1d:19:e4:a5:44:ef:a0:cd:38:f9:bc:e5:db:60: 49:a4:f3:56:f5:3c:7b:dc:93:29:8e:36:be:72:bf:2d:b5:24: 21:de:72:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM9myFB3QccgU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2QyOWNhYjUtNTUyNS00OWNiLThlOTEtM2MzYjJmZTkyYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYoYtWoFJHSAWqiDlhhouOsLuW3574qJCMw S9KeDnio7MOSvvELszctZodUVcGz0Cy2qH1v91H70Ogmzo0PKUdU2dM39NBPE7xJ hgXSQV2QBAKeZzGroj5REVzidrLV07JRCsz/hDuEv3gdrsvpTS4sFiaTv2wH/IPc +scEwnamFuKdnI9Y8TtLYETB5OB6r95uXUcMIKJDHro9yShIZhqxa8Ljt1lyq1Y/ qxAcAgnYG/t1YfXBkkAulF+Qjoz1rvVQB+TkPmCqjWOeZkwjjCTsDYz103sakeoT hPMFdsE0fUeiqLABi9wUJpzm+UEeM+7owR6O9sppqDD7RMV/lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhVU6gCkm1aYcI276E8zR26WWF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmExMDBhZWYtNjllOS0z NzY3LWFiNjYtNzRiMWVlMmU1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ93cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaqBbb5deEX25T9BPlMEQS04Xv+FvZvpBp/3bgKhaMcqcWkNqjxaJ0n rgPohY7lrTPpvX1tJ6CPGkniamlEc9523+ULp3eUYGHPAK7NxYTrp7pKpryZAJPR 74dWBVd1tHXSYfhlKDCp8mbiVGBlCPXvCpvmYsT5LNrwy+47+yYQdjiVizG+KoT/ nAn481TiGW2rW5rjcFav5tcaie58dljrr0drabYmIZC0IHV4XO/eolt726StxF8M N90ZpoLW6GYL3zg+jzN83tfDbSgoUUvyOKYlxNSS6t/eVg0dGeSlRO+gzTj5vOXb YEmk81b1PHvckymONr5yvy21JCHecsg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:39 2026 by rpki-client