$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa File: 9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json) Hash identifier: szvoFFzQ/jSt/Qkh8KzH6wljEfG8bMT+N5Bnj9FTflo= Subject key identifier: 47:70:D6:FB:E3:B3:F0:AB:90:C9:F3:59:4E:A6:41:97:ED:2C:EF:D0 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584ECD372A3B172BF6853A4E2700 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 397666 IP address blocks: 167.253.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:3b:17:2b:f6:85:3a:4e:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=38d024e2-7ebe-480a-bafa-fd3a4a1abd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:84:0b:0e:05:29:79:9f:42:12:77:8b:cc: 57:23:1e:ab:87:67:54:af:16:7c:5e:e9:53:f1:45: 5c:2d:a9:56:e1:f8:17:c0:34:32:e7:4e:ca:de:44: ae:56:84:6e:6f:09:c9:fb:99:e6:55:e1:1c:17:a4: 99:8d:43:82:87:ac:49:a6:38:8c:01:f4:aa:3d:25: 6b:c4:85:05:d7:78:59:14:0d:55:5f:9e:30:c5:27: c9:2d:70:72:19:89:31:03:c7:49:52:f6:91:60:4f: dc:80:4a:3c:f5:f4:36:0a:eb:d6:8e:ab:d7:9c:90: 2b:f4:c3:b1:55:cb:bd:3e:4a:bd:16:29:60:b4:27: 69:62:ea:2f:54:72:59:86:45:0b:5c:be:bc:e5:3a: ca:83:40:50:ed:05:8c:2d:9a:a1:62:59:59:d2:63: e9:f7:e8:44:fb:d4:22:55:14:10:c6:e2:9a:26:d5: fe:28:58:0d:21:6f:7a:76:10:00:fd:4d:4a:cf:a1: ad:82:10:32:ee:58:93:43:f6:70:90:70:06:34:42: 66:17:09:76:4c:4b:f4:fc:ff:02:21:0e:69:16:83: 67:0b:a0:a4:a8:cc:04:aa:85:c9:f1:40:83:58:d7: 82:98:5d:40:ec:88:df:91:48:35:eb:9f:b8:a6:31: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:D6:FB:E3:B3:F0:AB:90:C9:F3:59:4E:A6:41:97:ED:2C:EF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:03:86:81:24:4a:0c:7d:0a:9b:20:84:ca:05:5b:96:ee:2f: 87:bd:2d:c0:5c:b3:1d:dd:28:00:e2:13:3d:d9:bc:9d:71:00: 1f:5a:4c:97:86:35:8f:8c:c9:e5:0e:d4:b5:d7:95:4e:78:f1: 39:ec:e6:ed:15:6b:12:50:de:ae:ad:b1:dd:be:fd:09:df:a4: c7:f3:c3:ec:44:9a:32:3b:2d:42:27:19:de:b3:5a:4a:cc:f5: a9:08:02:d4:05:1b:91:bd:cb:94:fb:04:03:af:90:ae:0f:63: 74:e0:6a:e7:16:70:32:e4:7c:6f:71:5e:9f:68:12:83:9c:c7: 05:ab:90:5d:35:4b:08:d0:7a:80:c5:6c:61:2e:c4:0e:f0:73: 34:35:a6:3b:ba:a1:d6:f2:52:c5:91:8e:df:88:42:90:bf:74: 58:d0:f4:6c:ef:18:5d:78:54:4d:21:b2:90:60:c2:45:53:91: 5b:4c:8d:0d:1e:f0:3e:b0:fb:b4:69:3b:d0:d7:00:e6:3b:0e: fe:c4:a3:29:7c:5f:00:ad:47:9e:fe:56:06:a9:8e:9e:a6:03: d0:03:61:09:cb:89:9a:52:ad:b5:2c:7d:64:bb:89:66:f4:ef: a5:5f:d3:04:b4:3d:00:a2:e1:4a:0a:be:9f:02:48:27:44:46: db:07:13:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyo7Fyv2hTpOJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MzhkMDI0ZTItN2ViZS00ODBhLWJhZmEtZmQzYTRhMWFiZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyteECw4FKXmfQhJ3i8xXIx6rh2dUrxZ8XulT 8UVcLalW4fgXwDQy507K3kSuVoRubwnJ+5nmVeEcF6SZjUOCh6xJpjiMAfSqPSVr xIUF13hZFA1VX54wxSfJLXByGYkxA8dJUvaRYE/cgEo89fQ2CuvWjqvXnJAr9MOx Vcu9Pkq9FilgtCdpYuovVHJZhkULXL685TrKg0BQ7QWMLZqhYllZ0mPp9+hE+9Qi VRQQxuKaJtX+KFgNIW96dhAA/U1Kz6GtghAy7liTQ/ZwkHAGNEJmFwl2TEv0/P8C IQ5pFoNnC6CkqMwEqoXJ8UCDWNeCmF1A7IjfkUg165+4pjGiOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdw1vvjs/CrkMnzWU6mQZftLO/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQDhoEkSgx9CpsghMoFW5buL4e9LcBcsx3dKADiEz3ZvJ1xAB9aTJeG NY+MyeUO1LXXlU548Tns5u0VaxJQ3q6tsd2+/QnfpMfzw+xEmjI7LUInGd6zWkrM 9akIAtQFG5G9y5T7BAOvkK4PY3TgaucWcDLkfG9xXp9oEoOcxwWrkF01SwjQeoDF bGEuxA7wczQ1pju6odbyUsWRjt+IQpC/dFjQ9GzvGF14VE0hspBgwkVTkVtMjQ0e 8D6w+7RpO9DXAOY7Dv7Eoyl8XwCtR57+Vgapjp6mA9ADYQnLiZpSrbUsfWS7iWb0 76Vf0wS0PQCi4UoKvp8CSCdERtsHE/U= -----END CERTIFICATE-----Generated at Mon Aug 24 17:15:38 2026 by rpki-client