$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa File: 3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa (raw, json) Hash identifier: RGTuqZRWK8r+dRPhqtE8N0C3rQhgONdBtL0EZchn058= Subject key identifier: E5:9B:64:79:9D:2E:3C:75:CD:51:8B:6F:1C:FA:81:71:20:E7:1E:F5 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584E2AD45F91EA636B9ECF0C2100 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 397666 IP address blocks: 167.253.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5f:91:ea:63:6b:9e:cf:0c:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=9a74aac8-7c46-4857-b408-1fb34946c92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:e4:bd:c1:92:eb:fa:88:35:a2:a5:f5:ae: 8c:66:cf:6b:e1:53:6a:60:d3:d6:6f:12:2d:7e:5e: ee:1b:76:e5:f0:f5:1f:17:ac:74:42:9d:45:0e:7b: 2c:46:67:64:0e:20:fb:a8:50:5d:c9:0b:93:1f:fa: 28:44:f0:1a:bd:8c:74:d5:5f:0e:f1:a0:6f:c3:72: c3:b2:c4:06:5f:f4:0e:b4:8b:9d:b0:9a:d1:15:78: 93:5c:11:30:be:e6:3c:c1:c2:70:d2:57:ad:70:4b: e3:ea:65:78:91:2e:51:02:ff:3e:b8:43:ca:80:e9: f8:93:31:df:ac:11:e6:c6:c8:64:4e:5f:4b:1f:30: 5a:a1:13:90:f1:69:a6:43:26:88:c2:fa:0c:4d:4b: b0:61:e8:46:23:80:c4:99:7f:39:f1:74:49:a9:a8: 9a:a6:ee:57:45:16:69:f1:b4:05:22:fa:24:bf:a1: 7b:8f:88:c5:95:e4:f4:90:52:ed:26:ba:43:0a:6e: dd:ca:42:5c:07:db:e9:42:d7:3d:1e:40:17:88:4b: 33:94:83:38:ec:f5:74:01:e8:c8:30:bf:61:fb:77: 46:a4:42:93:d3:71:46:dc:fa:39:78:f5:4f:58:a1: d6:03:28:30:20:67:84:ae:6a:9a:16:f3:4e:47:00: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:64:79:9D:2E:3C:75:CD:51:8B:6F:1C:FA:81:71:20:E7:1E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3cf3bbd8-f13c-3210-a31f-e62a2917eab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2b:8e:3b:0d:27:4c:75:fc:8a:46:ba:48:ef:d6:0a:5c:87: 4e:dd:32:bc:ad:87:de:4b:c3:ae:67:67:7c:95:c3:13:e6:d9: a2:28:09:27:f9:ff:d9:24:f4:c7:9f:ca:c4:75:aa:80:ba:0c: a3:e6:65:61:a9:42:72:32:a5:f3:0b:dd:db:a7:a5:a2:76:45: 94:86:7b:24:36:bc:cc:26:54:1a:ba:49:06:94:2a:94:a8:a2: fe:d7:31:70:b9:ce:91:fa:2e:ef:1e:16:13:8a:a4:23:18:a5: 40:e8:af:27:c1:6f:37:a7:9e:06:a7:ef:49:ea:bb:eb:a9:1a: 14:54:7c:1a:3c:e3:07:c3:fe:e1:63:63:a2:20:d4:88:a2:aa: 65:e1:34:12:65:f2:42:85:ed:7c:e9:70:0f:b6:19:37:77:76: 37:66:f0:16:d4:2b:09:68:85:a2:c2:85:30:85:f5:b4:24:2e: 70:7b:60:41:87:79:4d:0c:b0:3f:e8:03:20:80:c4:cc:d8:9c: f3:15:7a:08:ba:d0:b4:ac:ba:c1:77:ca:7d:65:a5:39:5b:ce: 6b:b7:4c:38:f3:a3:c0:80:64:bb:52:71:cc:90:0a:53:09:67: 87:69:64:44:1a:da:e2:03:8f:e4:5e:40:69:94:6d:a5:72:20: e5:d3:a8:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1F+R6mNrns8MIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk OWE3NGFhYzgtN2M0Ni00ODU3LWI0MDgtMWZiMzQ5NDZjOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKDkvcGS6/qINaKl9a6MZs9r4VNqYNPWbxIt fl7uG3bl8PUfF6x0Qp1FDnssRmdkDiD7qFBdyQuTH/ooRPAavYx01V8O8aBvw3LD ssQGX/QOtIudsJrRFXiTXBEwvuY8wcJw0letcEvj6mV4kS5RAv8+uEPKgOn4kzHf rBHmxshkTl9LHzBaoROQ8WmmQyaIwvoMTUuwYehGI4DEmX858XRJqaiapu5XRRZp 8bQFIvokv6F7j4jFleT0kFLtJrpDCm7dykJcB9vpQtc9HkAXiEszlIM47PV0AejI ML9h+3dGpEKT03FG3Po5ePVPWKHWAygwIGeErmqaFvNORwCgUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWbZHmdLjx1zVGLbxz6gXEg5x71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2NmM2JiZDgtZjEzYy0z MjEwLWEzMWYtZTYyYTI5MTdlYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJErjjsNJ0x1/IpGukjv1gpch07dMryth95Lw65nZ3yVwxPm2aIoCSf5 /9kk9MefysR1qoC6DKPmZWGpQnIypfML3dunpaJ2RZSGeyQ2vMwmVBq6SQaUKpSo ov7XMXC5zpH6Lu8eFhOKpCMYpUDoryfBbzenngan70nqu+upGhRUfBo84wfD/uFj Y6Ig1IiiqmXhNBJl8kKF7XzpcA+2GTd3djdm8BbUKwlohaLChTCF9bQkLnB7YEGH eU0MsD/oAyCAxMzYnPMVegi60LSsusF3yn1lpTlbzmu3TDjzo8CAZLtSccyQClMJ Z4dpZEQa2uIDj+ReQGmUbaVyIOXTqL8= -----END CERTIFICATE-----Generated at Thu Jul 9 10:27:08 2026 by rpki-client