$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa File: 2a1f5a03-eb95-3489-80d4-971a6ad53336.roa (raw, json) Hash identifier: JL3laFr5KEZJp+HpbZh5knr7WinqemM3c+dUAcymj9A= Subject key identifier: 1C:EE:A7:AC:F9:25:BC:93:C7:3E:D3:55:40:C0:35:E0:A9:6B:FC:A1 Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584D6B69FA87B45BBA5B9F8ABF80 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa Signing time: Mon 06 Apr 2026 19:26:36 +0000 ROA not before: Mon 06 Apr 2026 19:26:36 +0000 ROA not after: Sun 05 Jul 2026 19:26:36 +0000 asID: 46887 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:69:fa:87:b4:5b:ba:5b:9f:8a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Apr 6 19:26:36 2026 GMT Not After : Jul 5 19:26:36 2026 GMT Subject: CN=3942500d-7012-4a0c-b7cf-3eded3e23c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:1d:60:44:7e:6d:38:c5:95:69:46:f4:ab: fa:80:a8:16:12:58:f1:2b:25:20:8c:20:72:8d:6d: 1a:f7:48:9d:8e:0f:1d:8e:9e:6e:f8:f4:97:26:3d: 7a:13:f6:87:db:ea:95:55:fa:84:13:74:8a:ff:53: 5e:92:4c:80:a5:88:d0:48:06:ea:b9:c5:f1:ed:f4: dc:10:b7:e4:36:b8:b4:bd:82:14:42:2f:ce:1b:85: ea:e4:30:9b:da:d3:4b:08:85:ca:21:14:19:fa:6d: 18:52:8f:b1:c3:74:b9:e2:0c:e7:97:92:35:a6:41: ba:65:66:7a:fe:f3:5f:71:da:3c:e5:d0:67:c7:10: 04:4b:ee:36:41:73:bd:53:62:ef:ae:0f:df:e0:a0: 58:64:74:9c:d3:67:4b:c9:15:d6:b2:04:3f:a4:9c: 9e:8f:23:84:7d:a5:93:60:2b:7c:47:3e:13:98:f1: a6:a6:6e:5e:c3:68:77:b3:ce:f0:49:bb:2a:a1:7a: f2:fb:80:e9:80:a5:91:d8:34:7d:1f:30:cc:f6:25: b4:4f:8c:75:d2:42:30:3f:fc:b6:ae:27:e4:d9:f6: cf:e4:aa:21:ed:0a:84:43:3c:8a:a2:3f:36:b6:8a: 6e:04:04:cd:c9:f7:3e:63:f6:68:98:7d:99:a4:2f: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:A7:AC:F9:25:BC:93:C7:3E:D3:55:40:C0:35:E0:A9:6B:FC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c8:60:f0:46:92:2f:68:54:1e:9a:a9:d5:75:0e:3f:51:7f: ca:f2:76:ac:73:61:9c:1f:77:e5:04:6b:b3:31:84:14:49:2c: eb:7d:d1:1b:58:88:f8:9b:aa:cb:f2:b7:7d:eb:07:6d:74:49: 98:87:34:30:6b:97:66:59:e9:d0:7d:13:d5:87:39:6f:5a:da: 9c:bc:f7:96:b7:81:9a:ef:68:ca:5c:49:d2:3a:fb:8f:3a:73: 23:2c:2a:23:fd:b9:24:7c:c0:2a:cd:76:02:0c:ab:3f:12:7b: 4a:72:b3:51:5b:3b:5f:98:6f:55:ac:11:e6:7c:84:c6:31:7b: 87:73:25:9d:f6:71:09:0a:6e:a7:43:a2:99:0d:32:70:6b:8d: 56:92:d5:47:02:43:d4:1d:46:b1:88:01:f3:31:6a:dc:43:a3: bf:3f:37:e6:90:e2:c8:d5:57:8f:77:cc:d9:b3:8d:d6:ec:29: 2e:51:08:68:8a:ab:16:64:b4:82:93:f1:6b:af:9b:85:ff:8d: e1:2a:f7:db:5b:9f:a7:5b:1e:3e:f8:e7:d4:8c:0d:3f:34:db: fb:26:50:09:e2:bf:05:9e:9f:16:21:24:9a:17:36:04:ac:64: 49:c5:ec:c9:f9:31:72:18:c6:fd:85:a2:dd:5d:45:ec:a1:75: 9b:e8:bf:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1rafqHtFu6W5+Kv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI2MDQwNjE5MjYzNloXDTI2MDcwNTE5MjYzNlowLzEtMCsGA1UEAxMk Mzk0MjUwMGQtNzAxMi00YTBjLWI3Y2YtM2VkZWQzZTIzYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVodYER+bTjFlWlG9Kv6gKgWEljxKyUgjCBy jW0a90idjg8djp5u+PSXJj16E/aH2+qVVfqEE3SK/1NekkyApYjQSAbqucXx7fTc ELfkNri0vYIUQi/OG4Xq5DCb2tNLCIXKIRQZ+m0YUo+xw3S54gznl5I1pkG6ZWZ6 /vNfcdo85dBnxxAES+42QXO9U2Lvrg/f4KBYZHSc02dLyRXWsgQ/pJyejyOEfaWT YCt8Rz4TmPGmpm5ew2h3s87wSbsqoXry+4DpgKWR2DR9HzDM9iW0T4x10kIwP/y2 rifk2fbP5Koh7QqEQzyKoj82topuBATNyfc+Y/ZomH2ZpC/u1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzup6z5JbyTxz7TVUDANeCpa/yhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvMmExZjVhMDMtZWI5NS0z NDg5LTgwZDQtOTcxYTZhZDUzMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7IYPBGki9oVB6aqdV1Dj9Rf8rydqxzYZwfd+UEa7MxhBRJLOt90RtY iPibqsvyt33rB210SZiHNDBrl2ZZ6dB9E9WHOW9a2py895a3gZrvaMpcSdI6+486 cyMsKiP9uSR8wCrNdgIMqz8Se0pys1FbO1+Yb1WsEeZ8hMYxe4dzJZ32cQkKbqdD opkNMnBrjVaS1UcCQ9QdRrGIAfMxatxDo78/N+aQ4sjVV493zNmzjdbsKS5RCGiK qxZktIKT8Wuvm4X/jeEq99tbn6dbHj7459SMDT802/smUAnivwWenxYhJJoXNgSs ZEnF7Mn5MXIYxv2Fot1dReyhdZvov4w= -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:13 2026 by rpki-client