$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa File: d5c5e304-938b-3145-b72c-bc916e50e0c5.roa (raw, json) Hash identifier: U6BOeqcqA+fNn+Ig+Rk8ix2FaZ0W5O2LoeXym2TL5gg= Subject key identifier: 91:DA:BC:2B:80:78:B6:70:E0:E5:98:54:27:34:82:83:70:A6:17:E1 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584ECD372A22A924C114F68F0FE0 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 397666 IP address blocks: 167.253.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:22:a9:24:c1:14:f6:8f:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=1997b2eb-132e-4022-9203-b609443b00c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:27:cc:cf:33:08:23:5a:03:d4:b6:51:a5: fc:32:d2:53:4c:bf:d4:64:17:8a:0b:86:f5:eb:3c: 1c:7b:9c:66:96:7d:c0:dd:c1:a8:16:4c:27:9b:01: 82:0c:cb:19:ad:52:6b:74:cf:27:6d:5c:9b:fc:dc: 64:8f:5d:88:a0:84:5b:f7:5b:44:24:e7:2a:ad:77: 1b:32:78:f8:7b:91:55:41:ee:bb:fc:2b:12:39:86: d6:e9:28:c1:de:5c:5b:06:9c:2a:22:fb:46:11:e4: 30:64:05:fc:46:7f:f5:3d:ca:8f:45:9f:89:62:eb: 7e:d8:4d:bc:17:e9:df:63:f7:2e:51:5e:92:1b:7f: 81:b9:03:2b:53:63:6d:78:82:85:41:30:5b:b0:7f: 26:18:0a:ae:ad:3f:58:7d:37:0f:99:e2:d1:de:50: be:94:4a:39:bc:1b:15:0d:57:84:7e:10:0d:81:eb: 2f:2a:10:3b:07:b8:33:af:eb:4c:3a:32:31:00:d9: d3:cb:bf:e2:54:c7:21:e6:ba:88:fd:9d:a5:37:63: 6d:46:27:70:30:7a:39:72:4c:39:10:4f:88:03:ad: 75:1d:d2:e0:1b:34:19:87:f3:f0:9a:8d:20:0f:1a: 1f:6c:56:d7:1d:31:65:00:de:57:bd:2b:90:aa:31: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:BC:2B:80:78:B6:70:E0:E5:98:54:27:34:82:83:70:A6:17:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d5c5e304-938b-3145-b72c-bc916e50e0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:40:56:95:4a:30:ef:04:1a:31:dc:29:16:8d:fb:5b:72:c3: cd:fd:a1:9b:09:e2:32:b7:35:ae:9b:09:05:a3:a7:fd:18:6b: bc:46:40:68:d2:93:20:13:61:4c:d6:10:c8:df:f7:40:58:69: 0d:84:7b:1e:af:c3:e4:3a:d6:ff:0c:0e:d2:44:4b:80:1c:d8: 39:81:17:22:c3:c7:df:6b:89:b7:22:55:48:7a:42:84:3a:f9: d7:b7:30:77:23:0f:52:d5:72:0b:12:65:e0:e2:00:5f:53:06: c6:c2:c7:78:e2:c2:13:b3:26:51:a9:f1:ef:e4:3d:9a:a0:53: 2d:53:0c:73:a5:a6:0a:54:ac:d6:ce:68:d3:0c:0e:47:27:8e: 2a:23:d5:0c:38:71:8e:17:ca:2a:5e:02:d8:68:a0:80:88:70: fb:58:17:bf:b2:17:dc:8a:6d:f1:79:50:6f:90:bf:32:bf:c0: a8:bd:bb:ab:aa:9f:06:89:5e:df:b3:0e:a0:c8:a2:a3:4f:ad: e2:90:6c:bb:55:5f:d8:5b:1b:0b:f1:92:00:5b:0f:5a:50:e6: b0:33:ff:a4:70:53:e0:c9:4e:86:de:26:2a:24:64:80:cf:6c: e6:78:43:72:a1:48:10:5a:c1:16:58:ea:a6:5c:13:35:eb:9f: 83:eb:f0:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyoiqSTBFPaPD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MTk5N2IyZWItMTMyZS00MDIyLTkyMDMtYjYwOTQ0M2IwMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnsnzM8zCCNaA9S2UaX8MtJTTL/UZBeKC4b1 6zwce5xmln3A3cGoFkwnmwGCDMsZrVJrdM8nbVyb/Nxkj12IoIRb91tEJOcqrXcb Mnj4e5FVQe67/CsSOYbW6SjB3lxbBpwqIvtGEeQwZAX8Rn/1PcqPRZ+JYut+2E28 F+nfY/cuUV6SG3+BuQMrU2NteIKFQTBbsH8mGAqurT9YfTcPmeLR3lC+lEo5vBsV DVeEfhANgesvKhA7B7gzr+tMOjIxANnTy7/iVMch5rqI/Z2lN2NtRidwMHo5ckw5 EE+IA611HdLgGzQZh/Pwmo0gDxofbFbXHTFlAN5XvSuQqjGfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHavCuAeLZw4OWYVCc0goNwphfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDVjNWUzMDQtOTM4Yi0z MTQ1LWI3MmMtYmM5MTZlNTBlMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtAVpVKMO8EGjHcKRaN+1tyw839oZsJ4jK3Na6bCQWjp/0Ya7xGQGjS kyATYUzWEMjf90BYaQ2Eex6vw+Q61v8MDtJES4Ac2DmBFyLDx99ribciVUh6QoQ6 +de3MHcjD1LVcgsSZeDiAF9TBsbCx3jiwhOzJlGp8e/kPZqgUy1TDHOlpgpUrNbO aNMMDkcnjioj1Qw4cY4XyipeAthooICIcPtYF7+yF9yKbfF5UG+QvzK/wKi9u6uq nwaJXt+zDqDIoqNPreKQbLtVX9hbGwvxkgBbD1pQ5rAz/6RwU+DJTobeJiokZIDP bOZ4Q3KhSBBawRZY6qZcEzXrn4Pr8AY= -----END CERTIFICATE-----Generated at Mon Aug 24 16:25:44 2026 by rpki-client