$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json) Hash identifier: 81D2hGhbBycSy/6KL6A6d2dnmnS8VSe94fpEZUYADbI= Subject key identifier: D6:7C:88:54:02:4E:91:72:BF:AD:7C:37:70:2A:8E:6E:26:80:62:A7 Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584E6144BB4694FD2CC73DF36600 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 59253 IP address blocks: 167.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:bb:46:94:fd:2c:c7:3d:f3:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=3709b1aa-1207-4bfe-8fe9-b7eb86034d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:58:3f:5d:2d:bc:bc:b9:46:57:7c:92:ad: 9a:31:fb:ae:d7:77:8a:93:8c:68:0d:99:db:0a:77: d8:1d:d5:c8:e5:9c:06:98:5f:a9:72:53:27:89:09: 87:af:26:bb:75:14:1a:f5:f7:71:f1:f7:4f:db:55: 73:03:b3:7e:ee:c2:71:fa:c3:74:85:3e:4c:16:89: c7:7f:4c:6a:94:29:3f:c0:e3:2d:e8:2a:41:01:53: 8d:2c:fb:87:3f:61:ac:a6:69:74:ca:49:92:33:ca: a8:d5:03:74:e4:0a:4b:42:8e:64:a0:8a:ab:26:06: 4b:e5:49:14:9a:fd:b9:50:bd:02:26:93:38:3e:28: 2d:43:59:4f:ed:e3:1b:71:88:ac:9c:5e:8d:5d:5d: ed:83:33:12:c4:a1:59:39:07:96:db:06:45:0e:e3: fa:c3:5c:df:66:34:eb:2d:7f:dd:37:26:06:58:ab: da:ed:ea:99:89:3c:7b:a6:b2:39:85:d1:da:fc:23: 9e:19:92:f1:ba:f4:65:94:3e:c4:07:b4:3f:26:9e: 65:48:0d:62:46:40:e6:56:38:df:fd:55:0f:ee:32: 86:26:2d:09:7e:48:87:2a:9a:2c:55:75:82:9e:4b: ed:d6:db:05:a1:ad:94:ad:3a:7e:46:b9:59:d8:90: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:88:54:02:4E:91:72:BF:AD:7C:37:70:2A:8E:6E:26:80:62:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f3:d2:aa:7b:d3:f3:10:02:e8:6e:6c:a9:94:68:0c:8f:ec: 3a:c3:5e:e6:da:f7:15:a8:56:57:b3:2d:23:3f:c3:8f:59:27: c2:6e:3a:3b:8c:af:f9:16:12:18:59:ca:9f:87:67:df:ab:94: a9:ed:f1:5b:00:6a:1b:32:c7:80:23:7c:a5:35:ec:85:4d:de: 5b:5d:59:6d:5d:ed:98:73:91:e9:3c:5f:d9:bc:1a:5e:57:74: a8:39:90:8e:0d:ae:41:c4:54:80:9b:a4:85:42:05:d5:86:f3: 91:75:35:88:3c:95:5b:af:74:e6:a7:c2:21:d8:06:58:3e:3f: cd:21:bf:00:bc:2c:dc:20:6f:6a:a1:48:7a:a2:a1:02:12:11: 25:33:9d:45:2c:f9:d3:a8:e9:54:57:ef:f0:26:9e:d5:72:26: c9:dd:1a:8c:75:b4:d9:ee:d7:70:8a:d1:06:4a:8b:3c:ad:ab: 46:f9:b8:10:d3:7d:bf:f9:09:4e:2e:bb:08:9c:1f:56:10:98: 2c:9e:4e:39:d7:3c:8a:e6:a2:36:4a:be:75:93:e9:f2:c5:b3: 76:50:97:d5:d5:f2:d2:e5:d8:a7:ee:e4:e1:66:99:67:f0:df: 35:2c:2a:00:34:0d:0b:e9:67:1a:61:0d:4e:65:9c:bd:58:e6: e5:e0:e9:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLtGlP0sxz3zZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MzcwOWIxYWEtMTIwNy00YmZlLThmZTktYjdlYjg2MDM0ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghtYP10tvLy5Rld8kq2aMfuu13eKk4xoDZnb CnfYHdXI5ZwGmF+pclMniQmHrya7dRQa9fdx8fdP21VzA7N+7sJx+sN0hT5MFonH f0xqlCk/wOMt6CpBAVONLPuHP2Gspml0ykmSM8qo1QN05ApLQo5koIqrJgZL5UkU mv25UL0CJpM4PigtQ1lP7eMbcYisnF6NXV3tgzMSxKFZOQeW2wZFDuP6w1zfZjTr LX/dNyYGWKva7eqZiTx7prI5hdHa/COeGZLxuvRllD7EB7Q/Jp5lSA1iRkDmVjjf /VUP7jKGJi0JfkiHKposVXWCnkvt1tsFoa2UrTp+RrlZ2JDhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ8iFQCTpFyv618N3Aqjm4mgGKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLz0qp70/MQAuhubKmUaAyP7DrDXuba9xWoVlezLSM/w49ZJ8JuOjuM r/kWEhhZyp+HZ9+rlKnt8VsAahsyx4AjfKU17IVN3ltdWW1d7Zhzkek8X9m8Gl5X dKg5kI4NrkHEVICbpIVCBdWG85F1NYg8lVuvdOanwiHYBlg+P80hvwC8LNwgb2qh SHqioQISESUznUUs+dOo6VRX7/AmntVyJsndGox1tNnu13CK0QZKizytq0b5uBDT fb/5CU4uuwicH1YQmCyeTjnXPIrmojZKvnWT6fLFs3ZQl9XV8tLl2Kfu5OFmmWfw 3zUsKgA0DQvpZxphDU5lnL1Y5uXg6Xo= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:04 2026 by rpki-client