$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/b8aa03b5-ca48-3bc2-979a-f95adaa1d149.roa File: b8aa03b5-ca48-3bc2-979a-f95adaa1d149.roa (raw, json) Hash identifier: cb38r5ujcrpAKao6Jd4p8db0iEaNwZGAEZ1Z02gjF9o= Subject key identifier: 51:FF:89:1E:B2:AF:34:18:36:03:31:28:B7:44:49:76:69:85:6A:F6 Certificate issuer: /CN=69233f52-8a17-4eb0-ae6a-62c861686718 Certificate serial: 010D0C9F4328584D88B0BDDB83C5B2CB1B0B7F00 Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/b8aa03b5-ca48-3bc2-979a-f95adaa1d149.roa Signing time: Fri 17 Apr 2026 07:07:37 +0000 ROA not before: Fri 17 Apr 2026 07:07:37 +0000 ROA not after: Thu 16 Jul 2026 07:07:37 +0000 asID: 64445 IP address blocks: 167.253.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:b0:bd:db:83:c5:b2:cb:1b:0b:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718 Validity Not Before: Apr 17 07:07:37 2026 GMT Not After : Jul 16 07:07:37 2026 GMT Subject: CN=630b2c37-26e8-4840-8842-a4cf12f9992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:c3:78:fa:ec:27:46:45:f1:68:6c:43:5d: ad:a4:a2:63:8a:3c:04:6c:a4:84:51:fd:68:dd:7b: bf:89:eb:5c:7e:5e:a7:42:62:b5:0b:aa:8a:19:cd: e9:69:20:35:7a:b4:3f:50:62:51:ab:3d:ce:80:bc: ee:75:a3:02:73:56:3d:af:17:98:dc:8f:b3:c6:68: 9d:89:75:75:50:dc:2a:10:8f:05:fa:12:79:b1:cb: 5c:44:15:cf:cc:b5:64:cd:32:3e:56:01:e8:4e:ae: 60:8a:67:86:85:e3:00:56:b0:59:0a:bc:7d:77:45: de:2c:5d:ab:1a:a8:3d:cf:a4:8a:2c:56:a3:67:d9: a7:5f:ff:bb:f3:6e:9d:f9:09:36:28:f1:db:64:76: ed:f7:37:e3:2b:99:c4:45:58:37:b8:1a:19:87:64: 60:28:fc:20:91:9b:31:5c:f4:d6:22:50:8e:e5:e0: 0b:fe:60:ba:7a:c7:df:22:1b:30:11:40:97:77:94: 1d:a5:8f:13:59:5c:92:ed:2c:f7:bb:9f:7c:89:3b: d9:a5:b8:16:bf:4b:81:21:6e:d7:68:25:76:ae:bd: 29:c3:74:e7:bc:bc:52:84:c3:c2:7e:46:c3:ca:da: 43:6c:b1:2a:eb:a2:26:1f:af:da:ed:03:c5:ab:53: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:89:1E:B2:AF:34:18:36:03:31:28:B7:44:49:76:69:85:6A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/b8aa03b5-ca48-3bc2-979a-f95adaa1d149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl X509v3 Authority Key Identifier: keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer sbgp-ipAddrBlock: critical IPv4: 167.253.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e9:cb:14:f8:7d:4d:94:e3:8c:22:d8:5f:6b:e1:64:08:eb: a8:95:74:b5:fb:07:64:3f:ca:6a:b5:ca:4c:63:33:f6:03:6c: 76:76:7c:12:c9:32:cd:b6:3b:b2:3d:78:a4:fe:54:7f:f5:94: 4a:ae:3d:e0:82:24:e5:c8:b4:9c:0b:1c:4d:34:c5:03:e3:18: 9d:9b:33:1f:f6:f1:3e:56:4b:4f:70:75:82:1b:e1:f2:fc:67: e7:45:62:62:0a:e2:7e:24:50:1a:04:5a:cf:6d:a0:85:ec:55: 1b:35:da:47:7b:1b:0d:c6:c0:a6:cd:2e:c4:1e:c1:91:1f:6a: 64:2d:b0:d1:82:c1:37:9f:27:0a:1a:65:5f:fb:c2:5c:35:0c: fa:bf:ce:39:da:27:b9:a7:10:ac:83:23:c5:54:00:57:60:13: b3:e9:5f:bb:db:2d:4d:ac:84:1f:37:81:bd:12:84:97:2a:4e: 19:81:e0:cc:aa:b4:9b:67:7b:79:52:72:7e:a7:79:79:7e:90: 06:08:1b:cf:a4:19:8d:9f:e0:69:7a:ad:a1:ee:2d:5b:83:5c: 64:37:df:e1:80:a2:10:fa:bd:f3:08:57:a1:d9:4e:60:0a:83: 44:c9:ed:07:29:ba:64:d1:33:97:32:0c:52:91:d5:fd:de:76: 2b:12:c6:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2IsL3bg8WyyxsLfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkyMzNmNTItOGExNy00ZWIwLWFlNmEtNjJjODYxNjg2 NzE4MB4XDTI2MDQxNzA3MDczN1oXDTI2MDcxNjA3MDczN1owLzEtMCsGA1UEAxMk NjMwYjJjMzctMjZlOC00ODQwLTg4NDItYTRjZjEyZjk5OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnDePrsJ0ZF8WhsQ12tpKJjijwEbKSEUf1o 3Xu/ietcfl6nQmK1C6qKGc3paSA1erQ/UGJRqz3OgLzudaMCc1Y9rxeY3I+zxmid iXV1UNwqEI8F+hJ5sctcRBXPzLVkzTI+VgHoTq5gimeGheMAVrBZCrx9d0XeLF2r Gqg9z6SKLFajZ9mnX/+7826d+Qk2KPHbZHbt9zfjK5nERVg3uBoZh2RgKPwgkZsx XPTWIlCO5eAL/mC6esffIhswEUCXd5QdpY8TWVyS7Sz3u598iTvZpbgWv0uBIW7X aCV2rr0pw3TnvLxShMPCfkbDytpDbLEq66ImH6/a7QPFq1OXNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFH/iR6yrzQYNgMxKLdESXZphWr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTIz M2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2ODY3MTgvYjhhYTAzYjUtY2E0OC0z YmMyLTk3OWEtZjk1YWRhYTFkMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjkyMzNmNTItOGExNy00ZWIwLWFl NmEtNjJjODYxNjg2NzE4LzY5MjMzZjUyLThhMTctNGViMC1hZTZhLTYyYzg2MTY4 NjcxOC5jcmwwHwYDVR0jBBgwFoAUeQC6dQ2pfMdSLyY/q+/zjvOEgVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4 NjE2ODY3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbpyxT4fU2U44wi2F9r4WQI66iVdLX7B2Q/ymq1ykxjM/YDbHZ2fBLJ Ms22O7I9eKT+VH/1lEquPeCCJOXItJwLHE00xQPjGJ2bMx/28T5WS09wdYIb4fL8 Z+dFYmIK4n4kUBoEWs9toIXsVRs12kd7Gw3GwKbNLsQewZEfamQtsNGCwTefJwoa ZV/7wlw1DPq/zjnaJ7mnEKyDI8VUAFdgE7PpX7vbLU2shB83gb0ShJcqThmB4Myq tJtne3lScn6neXl+kAYIG8+kGY2f4Gl6raHuLVuDXGQ33+GAohD6vfMIV6HZTmAK g0TJ7QcpumTRM5cyDFKR1f3edisSxl4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:34 2026 by rpki-client