$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa File: 2dc48c37-9e72-3fe8-b575-dd121af8515d.roa (raw, json) Hash identifier: maujKXkHVsxGC7wXA1vMB+0AUpfgQzO0FuZ6/SO7Q1I= Subject key identifier: 73:A7:EF:40:CE:B1:DD:F1:BD:2E:22:DC:E7:5F:01:00:91:68:D1:83 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CFB1143E8BB4760E6680 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 67.221.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cf:b1:14:3e:8b:b4:76:0e:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=53bded75-77c7-4814-9e8e-b3c381074207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:96:1d:af:e3:76:78:6a:3f:cc:63:66:94: 57:42:7f:55:ed:b0:cf:b4:02:1d:e6:76:eb:24:d2: 12:86:72:ac:f3:b6:e6:96:02:db:29:75:9c:d4:4b: fd:4f:54:98:ba:e6:f4:ed:a9:27:66:e8:2b:12:6f: 95:77:24:61:6c:8a:36:35:43:2a:f4:44:6e:f4:85: 6d:6d:0b:7c:9f:d7:68:51:cf:cc:fb:23:d0:ca:55: 65:4f:5b:fa:a4:ec:c0:22:42:ca:80:61:ed:b1:e2: 71:ec:a6:f9:a2:bb:68:ee:cf:88:16:02:08:c3:b1: d4:7c:38:9b:06:f5:f2:40:70:76:80:bb:72:23:9c: 26:d0:38:ac:71:4c:92:e3:b2:c9:0a:04:f4:75:b7: 8b:98:33:26:d0:48:cd:18:24:7b:e4:a3:29:b5:41: d1:d7:39:6e:10:a6:ff:78:fc:f5:79:f8:9b:e8:0b: 62:cb:88:ca:87:70:56:f5:8f:fb:8e:99:33:67:4e: 3c:15:3d:11:bb:27:95:32:57:bc:b0:8e:35:96:52: ee:b8:94:c9:1d:42:d7:3f:ea:41:6b:90:50:b4:b3: c6:f4:a1:33:10:d1:03:fc:8b:5a:93:9e:8a:2b:c9: 54:75:34:31:73:45:df:db:7e:22:16:3c:66:7c:0d: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A7:EF:40:CE:B1:DD:F1:BD:2E:22:DC:E7:5F:01:00:91:68:D1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4e:60:5d:8f:d5:9d:96:26:fa:60:1e:a0:d7:dd:50:b8:15: de:a2:d0:df:82:48:ca:ae:6c:5f:0c:da:8b:e2:db:c1:9e:5a: 7f:99:96:9d:fc:90:f5:39:7a:ea:cc:7d:da:60:25:ef:ee:6f: ec:69:9b:21:15:e1:0e:09:a3:3a:b7:15:69:42:5e:45:bc:65: 8a:46:14:66:ea:16:cb:14:55:58:df:fa:ed:4a:aa:44:e1:c4: 12:3d:9d:49:15:10:b2:31:65:46:e5:bc:8b:c9:ee:9b:21:0a: 59:12:35:b9:83:5e:21:7c:9b:ab:7b:5d:81:38:de:7e:95:1a: 0e:a6:20:e9:5b:9f:e5:5b:53:24:57:a8:a7:45:2b:5b:f1:1a: 73:fb:6d:80:e7:cf:15:b9:d4:c0:00:d4:ae:2a:0f:3d:87:78: c0:dd:0d:a4:51:3d:39:34:76:63:14:51:2e:9c:7c:8a:69:fb: e4:b6:48:e4:6a:37:b3:c5:08:9e:9e:af:87:b9:d5:74:e2:c6: 7c:02:d1:df:25:54:b5:98:cc:af:9e:a2:2d:bd:d4:bf:fc:f0: 0d:e5:bb:94:b2:39:40:b3:11:72:9c:15:6e:ff:9d:0e:81:d5: 55:39:53:d3:f3:e9:f2:26:3f:cc:18:80:56:e8:07:46:fe:c6: 53:ab:83:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM+xFD6LtHYOZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTNiZGVkNzUtNzdjNy00ODE0LTllOGUtYjNjMzgxMDc0MjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zyWHa/jdnhqP8xjZpRXQn9V7bDPtAId5nbr JNIShnKs87bmlgLbKXWc1Ev9T1SYuub07aknZugrEm+VdyRhbIo2NUMq9ERu9IVt bQt8n9doUc/M+yPQylVlT1v6pOzAIkLKgGHtseJx7Kb5orto7s+IFgIIw7HUfDib BvXyQHB2gLtyI5wm0DiscUyS47LJCgT0dbeLmDMm0EjNGCR75KMptUHR1zluEKb/ ePz1efib6Atiy4jKh3BW9Y/7jpkzZ048FT0RuyeVMle8sI41llLuuJTJHULXP+pB a5BQtLPG9KEzENED/Itak56KK8lUdTQxc0Xf234iFjxmfA1+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOn70DOsd3xvS4i3OdfAQCRaNGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmRjNDhjMzctOWU3Mi0z ZmU4LWI1NzUtZGQxMjFhZjg1MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ93HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFOYF2P1Z2WJvpgHqDX3VC4Fd6i0N+CSMqubF8M2ovi28GeWn+Zlp38 kPU5eurMfdpgJe/ub+xpmyEV4Q4Jozq3FWlCXkW8ZYpGFGbqFssUVVjf+u1KqkTh xBI9nUkVELIxZUblvIvJ7pshClkSNbmDXiF8m6t7XYE43n6VGg6mIOlbn+VbUyRX qKdFK1vxGnP7bYDnzxW51MAA1K4qDz2HeMDdDaRRPTk0dmMUUS6cfIpp++S2SORq N7PFCJ6er4e51XTixnwC0d8lVLWYzK+eoi291L/88A3lu5SyOUCzEXKcFW7/nQ6B 1VU5U9Pz6fImP8wYgFboB0b+xlOrgwc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:37 2026 by rpki-client