$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa File: 2dc48c37-9e72-3fe8-b575-dd121af8515d.roa (raw, json) Hash identifier: ccD7lJxNMs/p211E0qdefzFXsuK7tTcp/OKTT21pAc8= Subject key identifier: 5D:DC:69:E6:0E:FD:13:C7:F3:B7:CD:6F:BB:A5:19:65:2B:DC:E7:E1 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA9B500E03F687B9468B600 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 67.221.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:b5:00:e0:3f:68:7b:94:68:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=9b9ef91f-dd23-4c47-b832-d769446bc486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:42:2e:bd:84:3e:bb:ab:6a:a1:88:9a:d0:1e: 20:d5:9f:6c:4a:be:89:c8:d9:d6:83:f3:2c:eb:05: 14:68:63:d6:8f:77:71:f9:31:10:66:c7:d0:98:fb: 34:62:44:e5:f3:db:6d:77:e7:8c:ac:f1:6b:94:68: 27:fb:7a:ac:52:9c:33:33:bd:bc:cf:04:51:73:61: 94:12:20:94:3b:c9:38:fd:5e:d2:dc:43:df:69:ca: 96:ae:a7:71:85:f0:8a:36:b6:10:bf:8a:de:ce:13: b6:69:12:8e:de:96:fe:7e:c5:d2:5e:54:02:0a:cc: 4d:1c:9d:71:ec:17:20:20:49:34:6d:92:57:74:3f: cd:96:4b:1e:84:25:b3:c6:b6:38:0f:24:0d:c1:75: f0:3d:c5:f8:e5:b8:6c:6c:b8:8e:f2:8c:1e:a7:53: 9b:2c:3e:2b:47:db:71:15:56:b6:77:de:c6:ad:cf: 5d:06:99:37:24:72:39:90:4a:f7:5b:49:3c:44:a3: 36:af:78:87:db:91:0a:79:bf:02:21:04:41:ed:c5: 94:c3:3a:80:71:3c:4a:5a:68:03:66:33:ca:10:65: e9:fe:f2:42:e7:fb:f2:c7:76:22:f9:88:37:9b:eb: d1:2b:8e:2b:18:0c:56:50:f8:2f:5a:3a:bf:e5:c2: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DC:69:E6:0E:FD:13:C7:F3:B7:CD:6F:BB:A5:19:65:2B:DC:E7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1e:88:a3:f5:63:8e:28:85:e8:cf:42:1f:ff:bd:09:cb:fa: 2b:b4:72:e3:52:b4:df:89:21:59:07:61:7a:58:2e:d5:46:54: 05:34:46:d5:4d:f2:45:c1:6d:97:d1:fd:84:7f:e7:62:a1:dc: cf:3d:1e:94:dc:dd:1f:6e:4f:b0:87:ee:6b:05:be:35:e4:d6: 38:54:d9:16:58:95:c8:b2:46:d0:56:a2:ec:9a:d1:72:30:3d: 93:a7:37:1e:bb:48:2f:dd:eb:b9:4d:91:45:8f:a0:d2:76:b8: 12:31:31:37:a7:2b:30:8d:ee:0f:81:f5:33:d7:98:67:b0:ee: 47:72:f8:4a:fa:2f:85:8c:a4:cb:03:69:4a:02:2c:57:9e:8f: 12:81:79:b8:a6:45:60:a8:7e:ed:89:95:78:bc:b9:5e:99:84: 46:ea:a4:5d:ec:13:46:cf:87:a5:ae:13:20:43:9c:9b:78:75: a1:ec:ec:89:d7:ef:2a:83:93:4d:20:d7:9c:9d:78:66:e9:00: af:26:44:44:90:e7:3d:26:6b:50:f1:e7:46:d8:f4:c1:33:08: 2d:e6:48:68:e4:d0:78:97:7a:a9:59:9a:c4:eb:de:f0:4f:70: f6:31:5d:0c:f4:bd:4c:0a:15:07:04:db:c5:2c:c7:63:6b:0f: 4c:b2:c2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqbUA4D9oe5RotgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk OWI5ZWY5MWYtZGQyMy00YzQ3LWI4MzItZDc2OTQ0NmJjNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0IuvYQ+u6tqoYia0B4g1Z9sSr6JyNnWg/Ms 6wUUaGPWj3dx+TEQZsfQmPs0YkTl89ttd+eMrPFrlGgn+3qsUpwzM728zwRRc2GU EiCUO8k4/V7S3EPfacqWrqdxhfCKNrYQv4rezhO2aRKO3pb+fsXSXlQCCsxNHJ1x 7BcgIEk0bZJXdD/NlksehCWzxrY4DyQNwXXwPcX45bhsbLiO8owep1ObLD4rR9tx FVa2d97Grc9dBpk3JHI5kEr3W0k8RKM2r3iH25EKeb8CIQRB7cWUwzqAcTxKWmgD ZjPKEGXp/vJC5/vyx3Yi+Yg3m+vRK44rGAxWUPgvWjq/5cIhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3caeYO/RPH87fNb7ulGWUr3OfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMmRjNDhjMzctOWU3Mi0z ZmU4LWI1NzUtZGQxMjFhZjg1MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ93HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4eiKP1Y44ohejPQh//vQnL+iu0cuNStN+JIVkHYXpYLtVGVAU0RtVN 8kXBbZfR/YR/52Kh3M89HpTc3R9uT7CH7msFvjXk1jhU2RZYlciyRtBWouya0XIw PZOnNx67SC/d67lNkUWPoNJ2uBIxMTenKzCN7g+B9TPXmGew7kdy+Er6L4WMpMsD aUoCLFeejxKBebimRWCofu2JlXi8uV6ZhEbqpF3sE0bPh6WuEyBDnJt4daHs7InX 7yqDk00g15ydeGbpAK8mRESQ5z0ma1Dx50bY9MEzCC3mSGjk0HiXeqlZmsTr3vBP cPYxXQz0vUwKFQcE28Usx2NrD0yywrM= -----END CERTIFICATE-----Generated at Sat Jun 13 07:23:49 2026 by rpki-client