$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa File: d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json) Hash identifier: 86YqXoJgTjTV37bHX7rB/++S9sNwXJH2lHTAML3JZTY= Subject key identifier: E5:00:8E:F0:45:A8:79:20:10:7B:44:11:70:DF:ED:54:26:DE:42:74 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584ECD372A2F1E8AD2CAC85E18C8 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 397666 IP address blocks: 167.253.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:2f:1e:8a:d2:ca:c8:5e:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=fb48cfbd-04bf-4dda-aa9d-61a894485ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:ed:d9:59:70:30:6f:e7:e2:cc:4f:62:9d: 57:64:dc:64:09:ea:a0:b2:eb:04:fe:41:ae:d8:7c: 57:1c:16:a0:f7:8f:af:7e:9b:12:a0:fe:e4:33:11: 7b:6f:d2:c3:16:d7:86:e8:86:91:48:7f:d6:55:9e: cf:4c:a9:09:6c:c7:c1:76:01:35:e6:26:21:2d:87: bb:c8:71:ac:de:f7:a8:84:a7:55:bf:d0:b8:42:78: 8b:e4:80:75:88:c2:ba:56:04:5d:52:78:70:7b:82: 4b:15:14:3f:66:12:4b:76:11:d6:f3:26:06:24:d6: 4b:a1:99:b9:a5:65:1e:af:94:c4:ed:64:df:f5:fc: b9:90:93:7d:66:31:b7:47:86:e8:00:ab:e3:e4:6f: 12:d8:8c:24:c2:79:42:4d:4b:0c:71:eb:d8:0a:2f: 29:ea:75:94:6f:21:53:61:42:ea:f1:87:4d:34:c7: b4:d7:9a:66:29:c1:6b:50:a6:d2:4b:f4:1a:65:c2: 4d:8b:9b:fd:12:b8:c5:c8:df:9a:59:ac:f9:2e:20: 67:db:2b:7f:db:96:00:e7:e7:86:01:e7:94:15:ba: 9c:bf:88:0f:aa:cc:fd:04:64:02:9b:e8:22:ea:ab: e7:7d:1a:fe:60:21:e2:e4:f3:dc:64:0e:c1:c5:7b: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:00:8E:F0:45:A8:79:20:10:7B:44:11:70:DF:ED:54:26:DE:42:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:39:79:be:92:77:81:56:e0:4d:9b:9a:bd:f2:65:01:fe: 73:7e:8c:3f:22:14:e2:e1:13:71:05:3b:2d:41:22:a3:53:b5: ef:92:bd:b1:f5:dd:47:2f:d0:e8:35:1c:0a:30:49:cf:e6:30: 81:90:c7:03:5f:c7:61:56:fb:69:1b:be:b1:8a:24:2d:00:31: 8f:5d:7a:f8:5c:d2:03:db:5c:43:08:f1:c1:37:3e:91:59:b9: da:bd:d6:54:3a:48:f0:d6:96:d4:d8:5c:3d:0e:6e:a0:3a:23: 4e:14:86:e9:22:25:6d:66:c2:58:bd:66:d8:2e:af:0a:2f:df: 9a:95:45:1a:48:0f:e1:c0:19:62:ef:5e:a2:82:37:81:cd:f0: b0:d8:17:24:5a:49:05:8b:2f:72:30:46:46:82:21:93:34:d7: 25:79:d7:39:20:96:1c:f8:f9:4a:c5:b1:b5:13:51:22:36:2c: f1:ec:5e:2c:e9:e2:24:b7:9c:e9:45:22:f2:8b:b4:4c:17:9b: 1c:f1:00:e1:0c:c7:a0:8d:6d:43:b2:90:c3:27:ab:3f:77:a5: fa:cb:63:bc:f5:41:01:50:6e:e9:4e:25:c1:64:f0:c6:cc:0b: 52:24:66:0a:1f:2e:32:4f:c2:60:4b:e6:82:66:f6:01:d8:b6: ba:13:9a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyovHorSysheGMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZmI0OGNmYmQtMDRiZi00ZGRhLWFhOWQtNjFhODk0NDg1YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE/t2VlwMG/n4sxPYp1XZNxkCeqgsusE/kGu 2HxXHBag94+vfpsSoP7kMxF7b9LDFteG6IaRSH/WVZ7PTKkJbMfBdgE15iYhLYe7 yHGs3veohKdVv9C4QniL5IB1iMK6VgRdUnhwe4JLFRQ/ZhJLdhHW8yYGJNZLoZm5 pWUer5TE7WTf9fy5kJN9ZjG3R4boAKvj5G8S2IwkwnlCTUsMcevYCi8p6nWUbyFT YULq8YdNNMe015pmKcFrUKbSS/QaZcJNi5v9ErjFyN+aWaz5LiBn2yt/25YA5+eG AeeUFbqcv4gPqsz9BGQCm+gi6qvnfRr+YCHi5PPcZA7BxXsjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUAjvBFqHkgEHtEEXDf7VQm3kJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDJmMjYxMGEtYTYyYy0z YjAzLTk5ZjktMTM4MjE0NTMzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHdOXm+kneBVuBNm5q98mUB/nN+jD8iFOLhE3EFOy1BIqNTte+SvbH1 3Ucv0Og1HAowSc/mMIGQxwNfx2FW+2kbvrGKJC0AMY9devhc0gPbXEMI8cE3PpFZ udq91lQ6SPDWltTYXD0ObqA6I04UhukiJW1mwli9Ztgurwov35qVRRpID+HAGWLv XqKCN4HN8LDYFyRaSQWLL3IwRkaCIZM01yV51zkglhz4+UrFsbUTUSI2LPHsXizp 4iS3nOlFIvKLtEwXmxzxAOEMx6CNbUOykMMnqz93pfrLY7z1QQFQbulOJcFk8MbM C1IkZgofLjJPwmBL5oJm9gHYtroTmv8= -----END CERTIFICATE-----Generated at Mon Aug 24 14:56:58 2026 by rpki-client