$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa File: 67b0afd3-cdd1-304f-967b-876cfe2419b6.roa (raw, json) Hash identifier: nQNCeWoH++2b3iReCsfx+XRgBmYVFnEGYy/dP/40eTk= Subject key identifier: 13:6E:0C:5C:72:F2:2A:B3:E2:F8:21:E8:E2:7E:ED:EB:1B:B5:96:A6 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584EA7974F779BDF5B9683C18500 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14291 IP address blocks: 167.94.216.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:4f:77:9b:df:5b:96:83:c1:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81bca235-d225-42db-811c-1fca7b60ff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c7:68:c0:4f:36:3b:0d:b6:19:10:f7:3d:bc: 0b:9b:72:08:22:51:e3:d5:d7:f8:ad:28:8b:87:4e: cc:89:4d:99:01:b9:fd:69:ad:29:57:2b:91:13:06: ba:49:68:43:b4:c1:d4:f2:8f:83:4a:1d:c3:0b:e2: 5d:d3:fb:d4:54:06:71:28:e2:0d:90:59:29:6a:05: 76:08:15:02:90:6a:7d:dc:a5:49:fe:95:eb:08:d7: ca:c1:54:df:a6:e6:9e:c8:73:d2:86:e7:7b:42:c8: d2:26:47:f1:be:f4:fb:11:0b:29:2c:09:eb:d0:aa: 1d:62:c4:99:19:f7:7c:ba:0e:16:44:fd:77:63:10: f8:ab:55:a4:07:af:20:c3:90:2d:94:71:9f:94:3e: fd:5b:c1:0a:7a:5f:71:28:fe:14:d6:f0:5c:a6:ea: e6:3a:32:85:c1:bb:c5:f9:e8:5b:7b:05:77:53:a2: 67:41:e9:09:48:74:a0:bb:98:9b:f6:5b:6f:0a:31: 62:3b:b5:dd:3a:d7:c8:7a:f3:e0:9a:ce:c8:39:4a: 41:0a:08:c2:82:1a:7f:4e:1c:9d:df:15:53:c7:fb: ae:07:56:49:63:09:8a:08:a3:d2:29:d1:16:7e:cb: c6:e2:bf:a8:41:9c:4e:e3:0e:52:0c:db:f2:d3:94: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:0C:5C:72:F2:2A:B3:E2:F8:21:E8:E2:7E:ED:EB:1B:B5:96:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 167.94.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d9:48:a3:0b:1e:98:43:2b:59:df:57:9f:83:f3:23:33:41: 90:e4:81:14:af:5c:a7:7b:77:15:9c:df:12:bf:97:8e:fb:1d: 6a:0a:7e:e6:0c:ce:ae:5f:eb:1b:68:c5:88:c9:ce:b2:a4:ba: 34:96:fd:c5:98:7b:7a:85:fb:1f:1f:c3:b0:e4:f9:ec:c1:cb: 2e:3e:2c:62:f6:46:ed:8a:19:e6:76:3b:8a:67:5c:3c:e7:92: bf:51:56:a1:a3:34:96:54:b3:07:b1:a4:42:2a:0b:7c:07:57: bd:75:8d:14:12:a9:e6:da:b5:12:dd:42:53:af:04:50:58:47: 9e:bb:52:25:ee:04:03:78:16:f7:89:2e:82:53:51:ff:7b:6a: 66:d7:cb:b6:d4:45:de:c4:06:7d:f3:d9:e1:92:6e:5e:d3:eb: 60:ef:0b:6c:98:ef:69:fd:6d:3f:9e:63:ae:1e:67:a2:d6:e2: a7:6b:d2:ff:37:94:5f:1e:51:37:c7:17:9e:da:98:b0:66:e3: c7:48:b2:ad:c4:7a:c5:f3:ad:55:da:ae:04:58:c0:8c:4f:90: a5:22:91:11:7a:4f:eb:82:de:9f:6e:cf:30:a1:54:59:87:44: 0e:56:aa:15:7c:f5:30:d9:4b:5a:33:44:43:89:f4:05:db:c8: 25:86:b7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl093m99bloPBhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODFiY2EyMzUtZDIyNS00MmRiLTgxMWMtMWZjYTdiNjBmZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMdowE82Ow22GRD3PbwLm3IIIlHj1df4rSiL h07MiU2ZAbn9aa0pVyuREwa6SWhDtMHU8o+DSh3DC+Jd0/vUVAZxKOINkFkpagV2 CBUCkGp93KVJ/pXrCNfKwVTfpuaeyHPShud7QsjSJkfxvvT7EQspLAnr0KodYsSZ Gfd8ug4WRP13YxD4q1WkB68gw5AtlHGflD79W8EKel9xKP4U1vBcpurmOjKFwbvF +ehbewV3U6JnQekJSHSgu5ib9ltvCjFiO7XdOtfIevPgms7IOUpBCgjCghp/Thyd 3xVTx/uuB1ZJYwmKCKPSKdEWfsvG4r+oQZxO4w5SDNvy05Q3iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNuDFxy8iqz4vgh6OJ+7esbtZamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvNjdiMGFmZDMtY2RkMS0z MDRmLTk2N2ItODc2Y2ZlMjQxOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp17YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjZSKMLHphDK1nfV5+D8yMzQZDkgRSvXKd7dxWc3xK/l477HWoKfuYM zq5f6xtoxYjJzrKkujSW/cWYe3qF+x8fw7Dk+ezByy4+LGL2Ru2KGeZ2O4pnXDzn kr9RVqGjNJZUswexpEIqC3wHV711jRQSqebatRLdQlOvBFBYR567UiXuBAN4FveJ LoJTUf97ambXy7bURd7EBn3z2eGSbl7T62DvC2yY72n9bT+eY64eZ6LW4qdr0v83 lF8eUTfHF57amLBm48dIsq3EesXzrVXargRYwIxPkKUikRF6T+uC3p9uzzChVFmH RA5WqhV89TDZS1ozREOJ9AXbyCWGtyY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:43:26 2026 by rpki-client