$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa File: 3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa (raw, json) Hash identifier: rMpj/fpcEZeq+G5tUOtZE+ptPxDeQdptaEeNoP7iZc4= Subject key identifier: 37:89:FD:99:A8:7A:49:AE:EC:83:1E:1D:DA:20:11:3C:60:9A:E9:EE Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584ECD372A466E6BC8DE0D6E1320 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 397666 IP address blocks: 167.253.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:46:6e:6b:c8:de:0d:6e:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=747d51c6-9d8c-474c-9789-bfd04bbf5d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:0b:22:de:6a:fe:2b:35:ce:5a:41:2a:6c: 16:b2:1d:26:38:54:d6:4d:de:fa:fd:ff:45:d7:73: af:17:eb:16:84:51:6a:fb:47:38:c7:5a:a7:95:a3: d6:fb:e3:c8:8f:43:a4:8d:c9:13:89:55:7e:2c:63: 5e:00:34:a9:fb:53:27:07:e2:53:b4:18:6f:42:d0: be:e3:d3:5d:a1:34:59:e0:e2:9a:ee:78:23:e8:ae: 58:c9:b0:a1:7f:98:6f:51:5b:28:84:64:67:a4:08: 0e:e7:e9:68:d1:95:17:20:fb:5c:40:4e:97:24:d1: 12:ea:e2:8d:df:9f:ca:74:c1:da:97:89:65:a5:95: 68:0e:b6:6a:53:5b:a6:8e:f4:dc:2d:76:bf:18:b6: 5f:7d:5a:a8:6a:41:3b:bc:8e:3b:72:64:5f:12:34: 81:20:e7:a1:d8:9a:dd:d0:07:d8:75:79:e3:bb:2b: d9:3c:39:dd:da:a0:f0:97:53:74:43:cd:20:19:4f: 04:82:57:0e:11:04:54:56:72:8f:38:9a:73:a9:6b: e9:34:c4:1a:67:84:d9:1f:92:76:2a:48:4d:ee:b3: 67:ab:e0:af:c7:22:e1:c6:fe:6b:17:4a:43:b5:7e: 91:cf:47:be:45:61:a5:7c:36:03:84:39:b7:12:c7: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:FD:99:A8:7A:49:AE:EC:83:1E:1D:DA:20:11:3C:60:9A:E9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:9e:40:99:59:d7:50:31:ad:11:31:39:ef:a1:f2:e3:e2:81: 4d:f1:cc:85:df:8b:ed:bc:c1:fc:f4:73:60:bc:10:d4:c4:bb: ce:40:f6:62:a6:bd:90:fc:86:0c:31:a9:08:ed:d8:15:5f:58: c4:af:70:61:1e:6e:40:c0:c7:92:e3:be:b1:c0:d0:35:56:d5: 2d:17:63:8e:31:ea:66:9b:fd:85:74:5c:a5:75:eb:fc:e0:d0: 31:d5:55:21:aa:b4:50:f2:a5:75:f5:af:4a:ad:db:31:73:e0: 5f:62:21:b1:7c:d9:22:0f:07:71:f3:15:fc:a3:c5:4e:96:52: 4d:a0:29:d3:14:d6:49:8e:fe:72:d3:a8:22:e7:a0:ac:77:a0: b5:35:db:8a:ab:72:f0:bb:fe:38:c1:f9:73:5a:97:74:fb:00: bb:21:d0:43:60:65:dc:00:80:36:a1:80:75:87:1f:b8:6c:d2: d4:ef:f9:46:30:a3:83:5b:20:94:29:12:69:51:d8:94:f3:6f: 62:9a:b6:07:f1:3e:fb:1f:04:1d:95:fe:a3:bb:7d:5e:09:bc: 41:1e:89:67:c1:24:51:93:f5:ef:8d:e6:4f:99:64:f2:b0:ed: cc:00:19:f2:99:62:1b:84:de:6b:4c:7c:52:90:4f:14:cb:41: e1:52:24:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNypGbmvI3g1uEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NzQ3ZDUxYzYtOWQ4Yy00NzRjLTk3ODktYmZkMDRiYmY1ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUoLIt5q/is1zlpBKmwWsh0mOFTWTd76/f9F 13OvF+sWhFFq+0c4x1qnlaPW++PIj0OkjckTiVV+LGNeADSp+1MnB+JTtBhvQtC+ 49NdoTRZ4OKa7ngj6K5YybChf5hvUVsohGRnpAgO5+lo0ZUXIPtcQE6XJNES6uKN 35/KdMHal4llpZVoDrZqU1umjvTcLXa/GLZffVqoakE7vI47cmRfEjSBIOeh2Jrd 0AfYdXnjuyvZPDnd2qDwl1N0Q80gGU8EglcOEQRUVnKPOJpzqWvpNMQaZ4TZH5J2 KkhN7rNnq+CvxyLhxv5rF0pDtX6Rz0e+RWGlfDYDhDm3EsfwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeJ/Zmoekmu7IMeHdogETxgmunuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2NmM2JiZDgtZjEzYy0z MjEwLWEzMWYtZTYyYTI5MTdlYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKeQJlZ11AxrRExOe+h8uPigU3xzIXfi+28wfz0c2C8ENTEu85A9mKm vZD8hgwxqQjt2BVfWMSvcGEebkDAx5LjvrHA0DVW1S0XY44x6mab/YV0XKV16/zg 0DHVVSGqtFDypXX1r0qt2zFz4F9iIbF82SIPB3HzFfyjxU6WUk2gKdMU1kmO/nLT qCLnoKx3oLU124qrcvC7/jjB+XNal3T7ALsh0ENgZdwAgDahgHWHH7hs0tTv+UYw o4NbIJQpEmlR2JTzb2KatgfxPvsfBB2V/qO7fV4JvEEeiWfBJFGT9e+N5k+ZZPKw 7cwAGfKZYhuE3mtMfFKQTxTLQeFSJP0= -----END CERTIFICATE-----Generated at Mon Aug 24 13:21:42 2026 by rpki-client