$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa File: 2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa (raw, json) Hash identifier: 40SvEP8xOs38K/iKlGmViSuvancX9+EvyiYf0yUvdNc= Subject key identifier: F2:55:9D:B5:62:34:FC:F4:C6:96:5E:0C:F3:A6:D7:5F:4E:28:45:E4 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA9988C263B3608EDE12D80 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 67.221.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:98:8c:26:3b:36:08:ed:e1:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=2ab64076-3829-414b-95f9-464b55eeb71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c3:b7:a5:6d:d2:d8:59:eb:3d:19:3a:bf:ad: db:3d:51:46:30:15:8e:5b:e6:a2:15:3e:ae:ba:df: 1f:26:c6:44:5e:d4:c2:cf:88:78:03:e0:8e:a6:2f: 68:64:9f:b6:d1:2a:31:f4:23:ea:17:fd:e2:df:ad: fa:94:22:9a:cf:f9:b5:12:00:de:4d:ea:2f:41:20: a6:c8:eb:29:b4:b5:ab:da:ef:ba:dc:80:db:d1:7a: 8e:8f:c4:cb:fb:eb:ff:89:49:b4:14:7a:eb:5a:ec: 76:da:7b:ac:e4:53:ea:79:09:c0:ba:0d:ae:ff:cb: b5:4a:69:86:0d:0d:54:1d:f1:2f:58:eb:b6:20:18: 89:a6:25:29:58:fe:e5:e0:bb:2e:83:ac:9e:3a:10: bf:a0:44:c3:ce:01:fe:40:28:52:f7:da:88:41:21: 16:7a:4a:06:99:2b:92:6d:ac:22:85:11:90:c1:45: 01:9b:5c:c2:68:7a:2b:8d:a4:f0:7a:93:cb:d5:ec: 82:d8:f3:a9:9d:f0:67:40:b3:99:c1:d6:f3:85:3f: 99:32:75:97:88:05:1b:5a:00:d9:b6:45:0f:cd:62: 46:39:30:d2:02:3a:95:f3:74:70:43:ac:32:20:7e: 90:f0:ec:ba:2c:ab:e6:14:28:5f:ff:55:2c:4e:36: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:55:9D:B5:62:34:FC:F4:C6:96:5E:0C:F3:A6:D7:5F:4E:28:45:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2a100aef-69e9-3767-ab66-74b1ee2e59a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a7:4e:ab:b3:76:1b:45:b5:8f:84:27:90:cf:a2:bc:ca:db: b0:97:03:6f:71:85:bf:55:46:37:34:27:fd:81:b6:0f:10:19: 65:40:1d:fc:04:01:ad:e3:bf:4b:1e:fb:e4:ed:da:e3:3d:50: 61:17:e0:5b:50:6b:80:8e:e9:55:93:48:b4:b8:45:8c:5d:bc: 4e:a7:86:95:d1:07:49:4e:36:b9:a7:38:10:7f:95:e6:c0:7a: f0:09:63:9c:3b:32:6b:47:bf:68:2a:78:65:0a:c9:37:87:34: 9d:14:56:bf:63:bc:9a:70:d2:fa:83:48:a7:f4:c9:a9:74:58: 7e:76:dd:10:5b:46:23:1a:0c:cb:dc:aa:00:a5:dd:7e:60:d4: 1c:87:05:17:7c:36:66:26:60:7e:da:44:02:af:13:3c:7e:a4: 59:1b:7d:66:23:78:a7:f8:fa:4c:5e:c1:ef:64:d6:b5:02:e0: 52:a9:53:8b:57:8f:5e:8d:be:f5:74:f6:9d:fc:2b:e9:ad:50: 93:12:eb:45:bd:e3:d8:2a:7d:3a:eb:89:f8:1e:51:e1:2f:c2: f6:f8:94:9e:36:fb:19:4d:c8:39:f3:f9:21:e8:8b:1b:69:76: ca:4b:c3:3e:36:7e:0c:b6:57:3c:42:c6:cb:a3:da:0e:f5:1a: ce:f5:85:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqZiMJjs2CO3hLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MmFiNjQwNzYtMzgyOS00MTRiLTk1ZjktNDY0YjU1ZWViNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8O3pW3S2FnrPRk6v63bPVFGMBWOW+aiFT6u ut8fJsZEXtTCz4h4A+COpi9oZJ+20Sox9CPqF/3i3636lCKaz/m1EgDeTeovQSCm yOsptLWr2u+63IDb0XqOj8TL++v/iUm0FHrrWux22nus5FPqeQnAug2u/8u1SmmG DQ1UHfEvWOu2IBiJpiUpWP7l4Lsug6yeOhC/oETDzgH+QChS99qIQSEWekoGmSuS bawihRGQwUUBm1zCaHorjaTwepPL1eyC2POpnfBnQLOZwdbzhT+ZMnWXiAUbWgDZ tkUPzWJGOTDSAjqV83RwQ6wyIH6Q8Oy6LKvmFChf/1UsTjbLRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJVnbViNPz0xpZeDPOm119OKEXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmExMDBhZWYtNjllOS0z NzY3LWFiNjYtNzRiMWVlMmU1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ93cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGanTquzdhtFtY+EJ5DPorzK27CXA29xhb9VRjc0J/2Btg8QGWVAHfwE Aa3jv0se++Tt2uM9UGEX4FtQa4CO6VWTSLS4RYxdvE6nhpXRB0lONrmnOBB/lebA evAJY5w7MmtHv2gqeGUKyTeHNJ0UVr9jvJpw0vqDSKf0yal0WH523RBbRiMaDMvc qgCl3X5g1ByHBRd8NmYmYH7aRAKvEzx+pFkbfWYjeKf4+kxewe9k1rUC4FKpU4tX j16NvvV09p38K+mtUJMS60W949gqfTrrifgeUeEvwvb4lJ42+xlNyDnz+SHoixtp dspLwz42fgy2VzxCxsuj2g71Gs71hQs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:47:31 2026 by rpki-client