$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json) Hash identifier: BSGmzkkNtoh3MbgNLcEvmWQBWK5ieVi8ElGPpZjtbuY= Subject key identifier: FD:CB:80:8A:82:A6:7C:3A:90:B3:2C:86:3D:9A:95:D4:DB:65:7A:58 Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584D80FFF7BE50E87C2AFE97E9F0 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 59253 IP address blocks: 167.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f7:be:50:e8:7c:2a:fe:97:e9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=3baa9455-b6e0-4788-9c3d-42b7a3d0ef55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:03:f1:6b:76:16:6e:ea:1b:7b:90:6e:22: b9:3f:4b:fc:69:4f:2d:dc:0f:69:ef:9d:71:11:c3: 14:d4:ff:36:5f:65:0d:5f:0b:83:9a:a6:ec:f7:a8: 95:0b:4d:e7:a7:7f:93:ad:6b:95:a4:5b:b4:97:09: 0b:82:65:50:8b:45:6e:c2:ea:4e:b6:7f:ba:3a:88: 72:27:76:8c:4c:1c:07:79:f4:47:ba:05:db:39:91: ef:f0:d5:d6:aa:c3:af:68:9e:65:fd:de:e9:30:b1: 28:30:ab:ad:6a:1f:cc:ea:8a:33:37:e8:ae:e5:3e: 4a:fb:2d:3c:59:54:fe:81:20:fb:64:09:f4:17:ab: 37:65:0e:b2:00:d2:46:50:8e:20:27:c3:be:aa:e5: ce:a5:06:59:28:77:b4:49:bc:66:c0:01:2c:ed:89: c4:6d:22:7a:22:33:dd:53:29:ce:be:62:b5:64:a5: 09:ee:2b:8a:f6:0d:43:61:19:af:28:51:4b:31:8d: 52:48:8b:15:de:a9:67:0f:c5:88:f0:1e:1c:25:8a: d0:a0:f3:f4:eb:49:21:56:9a:39:64:53:74:4d:e4: 3a:33:99:f6:c6:03:35:51:60:5a:c8:6a:aa:c7:62: fe:92:f2:74:bf:ec:da:08:af:d1:5a:30:2f:00:4b: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CB:80:8A:82:A6:7C:3A:90:B3:2C:86:3D:9A:95:D4:DB:65:7A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9c:46:5b:cc:b7:0f:4d:ee:ca:4a:5f:4b:a3:30:12:1c:52: dc:b1:68:1e:39:03:f0:bf:44:44:5a:7a:b2:e9:da:b2:d7:88: 43:01:0f:26:cf:0c:6f:0a:91:fe:5d:27:37:b8:af:1a:80:ab: 93:af:4a:ac:fd:af:85:51:80:0d:d7:fe:a7:84:dc:9c:90:26: 49:9d:f7:64:8e:65:b2:f7:42:91:9e:ed:21:d7:3a:19:c2:66: c9:e7:9b:9c:d1:8b:ba:e8:d1:2b:7c:06:0d:cd:98:f9:0c:22: 5b:ae:16:ed:70:22:be:f7:47:34:52:3f:16:88:8e:67:0f:36: e4:84:2d:5f:9d:3b:61:97:dc:38:d5:6a:de:26:12:72:6b:a4: 0d:0e:61:b9:71:cd:03:45:9b:5c:4c:a9:17:0d:fb:93:12:1f: d0:ea:5e:86:f0:60:3c:e0:23:90:c0:3a:13:b5:3b:6a:03:12: 06:92:fa:7e:e4:92:0e:4d:75:a0:f0:cb:0a:d0:4e:51:db:c9: 87:99:5f:e4:b2:0b:fd:2b:30:db:d4:c5:9e:69:39:13:fb:e0: f4:d7:d4:e1:eb:cd:7c:b9:e3:4d:5d:53:8a:ab:71:9f:d9:00: 71:3d:a1:8a:79:75:e1:26:60:f9:c5:aa:9b:f7:c7:d9:23:ef: 0a:88:e9:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//e+UOh8Kv6X6fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk M2JhYTk0NTUtYjZlMC00Nzg4LTljM2QtNDJiN2EzZDBlZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhID8Wt2Fm7qG3uQbiK5P0v8aU8t3A9p751x EcMU1P82X2UNXwuDmqbs96iVC03np3+TrWuVpFu0lwkLgmVQi0VuwupOtn+6Oohy J3aMTBwHefRHugXbOZHv8NXWqsOvaJ5l/d7pMLEoMKutah/M6oozN+iu5T5K+y08 WVT+gSD7ZAn0F6s3ZQ6yANJGUI4gJ8O+quXOpQZZKHe0SbxmwAEs7YnEbSJ6IjPd UynOvmK1ZKUJ7iuK9g1DYRmvKFFLMY1SSIsV3qlnD8WI8B4cJYrQoPP060khVpo5 ZFN0TeQ6M5n2xgM1UWBayGqqx2L+kvJ0v+zaCK/RWjAvAEsaaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3LgIqCpnw6kLMshj2aldTbZXpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICcRlvMtw9N7spKX0ujMBIcUtyxaB45A/C/RERaerLp2rLXiEMBDybP DG8Kkf5dJze4rxqAq5OvSqz9r4VRgA3X/qeE3JyQJkmd92SOZbL3QpGe7SHXOhnC Zsnnm5zRi7ro0St8Bg3NmPkMIluuFu1wIr73RzRSPxaIjmcPNuSELV+dO2GX3DjV at4mEnJrpA0OYblxzQNFm1xMqRcN+5MSH9DqXobwYDzgI5DAOhO1O2oDEgaS+n7k kg5NdaDwywrQTlHbyYeZX+SyC/0rMNvUxZ5pORP74PTX1OHrzXy5401dU4qrcZ/Z AHE9oYp5deEmYPnFqpv3x9kj7wqI6c4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:31:23 2026 by rpki-client