$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa File: 9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json) Hash identifier: tLv+hlvHToc/26PqgA+vj45nJA+legUga/gvg9GR4i4= Subject key identifier: D2:5F:1A:C9:D3:A8:0E:3D:47:54:34:53:DC:B8:DE:ED:3F:E1:5E:35 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584E2AD45F85F88F38A6CF9470C0 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 397666 IP address blocks: 167.253.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:5f:85:f8:8f:38:a6:cf:94:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=5356e7b7-4031-4d84-831a-af92e7c3dba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:1f:e9:b4:20:fe:eb:94:64:8f:94:ec:18: f2:08:86:36:ff:89:68:4c:36:f4:6e:ec:ec:ec:c4: 9c:ce:3d:f4:34:01:12:58:89:a5:6c:be:18:f7:be: 33:3d:68:cb:09:fd:ee:23:80:61:60:b5:1c:ee:34: 63:b2:c5:34:6c:35:75:07:1c:aa:15:3d:14:de:c0: 13:71:8d:1e:11:ae:64:f0:08:9c:1a:89:f4:7a:ac: 77:7a:0b:77:10:69:be:ba:a5:71:52:bb:72:30:ff: a9:7a:c8:a0:fb:19:56:a7:2f:e6:d0:74:ff:c3:5f: e1:ae:57:0d:72:61:ad:a9:1e:2b:2e:26:ab:e0:b7: 5d:df:96:b9:44:76:9c:c0:f4:93:89:18:46:a6:d3: 14:71:c9:4a:4a:fa:d9:23:bb:71:20:bc:31:e5:3d: 83:36:e7:3a:f4:1a:54:4e:80:e8:f5:ec:a5:a1:94: 45:4a:4d:0d:a6:35:00:db:7a:b6:46:d3:9b:b5:f5: c0:90:22:1a:25:31:8b:34:6a:b9:6f:55:18:53:9e: db:5a:5c:cc:6f:b2:51:77:61:75:8d:ab:8f:06:de: 38:08:9b:d0:03:a7:3d:1f:24:27:7c:a8:7b:5d:94: 7c:c3:0a:0d:10:0d:07:a3:a9:ca:d3:a0:f7:29:6f: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:1A:C9:D3:A8:0E:3D:47:54:34:53:DC:B8:DE:ED:3F:E1:5E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f3:aa:bf:d9:bc:40:ea:81:49:4b:6c:f0:c3:78:d2:c4:ae: b3:41:e3:46:ba:15:e1:17:83:b9:ce:ac:bb:c5:b4:7b:02:8f: a0:d1:c9:84:82:a3:f5:90:93:7c:d8:4e:1e:b3:e9:17:d6:82: 42:0a:99:a6:5c:db:ff:8b:09:14:6d:ee:5e:07:1c:d3:f1:11: 74:0b:13:6f:27:b3:ee:1c:ef:1f:b7:97:6b:88:7a:aa:e4:b7: 90:12:2b:2c:19:9f:de:ef:96:24:55:e1:bc:b2:50:79:9e:26: e6:71:37:00:19:a9:31:c0:09:77:ea:ba:d6:29:db:54:28:7b: e9:60:21:3c:4d:01:06:b3:0b:a7:5a:e0:f3:42:3d:b4:05:3d: df:1b:c2:4d:96:27:f9:a5:0f:a5:60:b6:65:00:d7:95:48:f7: f6:2f:95:14:63:32:f7:82:9c:11:55:88:12:c4:64:04:15:1c: e5:7f:a4:25:9e:0c:fa:9a:95:44:2f:a2:92:95:e9:15:08:56: 86:55:40:13:86:28:e4:ad:09:35:a2:59:62:5f:31:d9:55:22: 1b:d4:72:d4:30:d8:e0:be:59:53:7d:33:a9:49:f9:30:be:9f: 81:be:88:54:82:4b:16:4a:5d:64:b3:12:f9:a2:7a:55:12:03: 4d:37:73:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1F+F+I84ps+UcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk NTM1NmU3YjctNDAzMS00ZDg0LTgzMWEtYWY5MmU3YzNkYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0f6bQg/uuUZI+U7BjyCIY2/4loTDb0buzs 7MSczj30NAESWImlbL4Y974zPWjLCf3uI4BhYLUc7jRjssU0bDV1BxyqFT0U3sAT cY0eEa5k8AicGon0eqx3egt3EGm+uqVxUrtyMP+pesig+xlWpy/m0HT/w1/hrlcN cmGtqR4rLiar4Ldd35a5RHacwPSTiRhGptMUcclKSvrZI7txILwx5T2DNuc69BpU ToDo9eyloZRFSk0NpjUA23q2RtObtfXAkCIaJTGLNGq5b1UYU57bWlzMb7JRd2F1 jauPBt44CJvQA6c9HyQnfKh7XZR8wwoNEA0Ho6nK06D3KW8/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJfGsnTqA49R1Q0U9y43u0/4V41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHzqr/ZvEDqgUlLbPDDeNLErrNB40a6FeEXg7nOrLvFtHsCj6DRyYSC o/WQk3zYTh6z6RfWgkIKmaZc2/+LCRRt7l4HHNPxEXQLE28ns+4c7x+3l2uIeqrk t5ASKywZn97vliRV4byyUHmeJuZxNwAZqTHACXfqutYp21Qoe+lgITxNAQazC6da 4PNCPbQFPd8bwk2WJ/mlD6VgtmUA15VI9/YvlRRjMveCnBFViBLEZAQVHOV/pCWe DPqalUQvopKV6RUIVoZVQBOGKOStCTWiWWJfMdlVIhvUctQw2OC+WVN9M6lJ+TC+ n4G+iFSCSxZKXWSzEvmielUSA003c48= -----END CERTIFICATE-----Generated at Thu Jul 9 10:26:20 2026 by rpki-client