$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa File: cc14649a-e604-33da-b145-eed98529505d.roa (raw, json) Hash identifier: Pir1/zqOS+dOcwyrEkZcUmzUVj34HyUhIm/nHwNQWr4= Subject key identifier: D2:14:3B:6A:42:1C:D6:45:56:96:19:7D:1F:DA:8D:32:27:8E:41:0D Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584DEB15ECD3D73336F56DFBB300 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa Signing time: Fri 22 May 2026 13:00:31 +0000 ROA not before: Fri 22 May 2026 13:00:31 +0000 ROA not after: Thu 20 Aug 2026 13:00:31 +0000 asID: 395494 IP address blocks: 167.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:ec:d3:d7:33:36:f5:6d:fb:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: May 22 13:00:31 2026 GMT Not After : Aug 20 13:00:31 2026 GMT Subject: CN=cb831619-d586-47d2-a4a8-c867ea16285c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:58:d3:b7:0b:c4:14:4a:dd:05:45:e0:b2:b0: 26:51:51:76:30:58:b3:67:95:65:4d:13:27:aa:13: 56:5d:e1:3c:24:c7:6e:35:e8:60:24:34:61:fa:a9: 1a:ed:a6:2f:59:98:23:b6:b1:27:1a:10:10:e3:e1: e2:d2:51:63:1b:3f:49:d4:f8:a9:90:44:3e:6f:b2: fd:0a:eb:66:5a:a3:40:7a:d7:25:d7:ed:42:0a:f6: 70:c9:55:21:94:db:2f:f7:bf:9b:9b:93:c0:94:65: 2e:8d:6f:11:c1:ab:50:97:46:a8:68:d6:bd:ac:a3: f5:5b:a0:86:48:11:ba:03:f5:77:bd:37:31:ef:71: a7:95:04:83:a3:28:dd:78:06:dc:d6:02:3a:3f:87: a7:da:92:d2:ca:9d:ae:1a:e8:09:23:76:00:63:ec: 14:a3:63:27:ac:53:18:61:35:96:ce:9b:a2:7b:ec: c6:c5:e4:26:ce:ac:63:2b:4c:c8:7e:cc:b6:52:d8: ca:ee:41:38:45:de:64:90:cc:3d:44:fb:8d:50:98: 75:68:de:bf:54:27:7f:85:31:b8:4c:5d:cc:5c:1f: 16:8b:f6:81:33:8c:ba:3c:fc:54:10:ca:35:cc:f9: 53:3b:cb:b7:22:02:bb:d8:07:13:52:27:c8:79:d3: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:3B:6A:42:1C:D6:45:56:96:19:7D:1F:DA:8D:32:27:8E:41:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 167.253.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5a:57:73:9a:36:76:90:da:45:f9:4e:db:d1:76:ec:86:65: 63:36:75:01:1e:9e:ed:3b:ef:cf:dc:b4:7c:9e:98:ff:85:fd: d9:d4:cb:51:4a:df:56:37:95:96:88:50:5a:59:d4:6d:d2:7f: 81:a3:6e:0d:c2:9b:32:cf:00:02:9f:f6:4e:71:4f:0f:16:b1: c5:5e:c4:1a:e8:43:a8:6d:43:07:79:d9:e4:08:81:b4:7f:1a: 85:ea:d2:1f:90:68:2b:08:56:fc:9a:ae:4d:ac:c4:29:2d:25: 73:16:3d:ed:b3:d2:6c:91:c4:76:cb:3b:30:dc:77:09:dc:8c: d5:70:8a:0b:b4:04:6c:d5:d8:a3:87:89:09:f0:f5:2c:4e:96: 46:22:63:c9:a8:33:b0:60:29:98:00:f9:2c:a0:cc:0a:c4:8e: 42:66:70:8b:d0:fb:39:bc:92:3a:9f:b8:3a:db:d2:20:d4:da: 97:3e:56:c3:e9:f8:97:d2:79:b0:06:b7:ad:2c:f9:01:b3:82: 7f:f5:e0:68:58:91:8c:6d:6f:84:1b:27:ad:d6:e6:4d:45:36: 74:c9:f6:80:38:a6:1b:20:a3:fc:6b:2b:b8:e0:ff:da:53:8f: e6:38:7d:e1:f5:8c:91:c0:b5:c5:d8:53:28:78:23:72:59:9d: c6:d8:1e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFezT1zM29W37swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk Y2I4MzE2MTktZDU4Ni00N2QyLWE0YTgtYzg2N2VhMTYyODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgljTtwvEFErdBUXgsrAmUVF2MFizZ5VlTRMn qhNWXeE8JMduNehgJDRh+qka7aYvWZgjtrEnGhAQ4+Hi0lFjGz9J1PipkEQ+b7L9 CutmWqNAetcl1+1CCvZwyVUhlNsv97+bm5PAlGUujW8RwatQl0aoaNa9rKP1W6CG SBG6A/V3vTcx73GnlQSDoyjdeAbc1gI6P4en2pLSyp2uGugJI3YAY+wUo2MnrFMY YTWWzpuie+zGxeQmzqxjK0zIfsy2UtjK7kE4Rd5kkMw9RPuNUJh1aN6/VCd/hTG4 TF3MXB8Wi/aBM4y6PPxUEMo1zPlTO8u3IgK72AcTUifIedOU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIUO2pCHNZFVpYZfR/ajTInjkENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvY2MxNDY0OWEtZTYwNC0z M2RhLWIxNDUtZWVkOTg1Mjk1MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1aV3OaNnaQ2kX5TtvRduyGZWM2dQEenu0778/ctHyemP+F/dnUy1FK 31Y3lZaIUFpZ1G3Sf4Gjbg3CmzLPAAKf9k5xTw8WscVexBroQ6htQwd52eQIgbR/ GoXq0h+QaCsIVvyark2sxCktJXMWPe2z0myRxHbLOzDcdwncjNVwigu0BGzV2KOH iQnw9SxOlkYiY8moM7BgKZgA+SygzArEjkJmcIvQ+zm8kjqfuDrb0iDU2pc+VsPp +JfSebAGt60s+QGzgn/14GhYkYxtb4QbJ63W5k1FNnTJ9oA4phsgo/xrK7jg/9pT j+Y4feH1jJHAtcXYUyh4I3JZncbYHpI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:37:34 2026 by rpki-client