$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa File: c367d924-e3c1-33d4-83e2-cb8162da53f8.roa (raw, json) Hash identifier: h50FD9MrA44DA8jg2nusxpTk5wYUn08G5TcfijK9TgY= Subject key identifier: 56:EE:8B:36:A1:4D:C8:52:96:80:F4:62:C0:5C:A1:64:47:46:40:A4 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F4328584CAE5EB2D39A970322D2C9E660 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 63150 IP address blocks: 167.253.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:b2:d3:9a:97:03:22:d2:c9:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4b9c155d-d099-4a01-8d95-5943bb45c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:40:93:fa:00:7f:e0:48:a8:77:07:64:6c: 6d:36:b6:a2:87:c2:fe:f4:2b:c9:7a:04:45:51:b1: c3:ea:76:95:ba:d3:83:74:3c:8b:2b:28:3a:d9:63: 10:eb:a1:d8:e5:d7:3a:1f:62:c4:1f:d5:73:1c:70: 22:0f:46:57:9f:e1:d4:2d:de:ef:5a:e3:d6:77:57: da:77:96:01:74:f6:b0:7a:5c:49:a7:97:2d:2b:b7: 20:df:65:f0:2a:fc:4e:2b:18:05:1e:6d:05:65:e2: 03:b1:dd:3c:7a:dc:f4:36:e2:ed:90:c3:5b:ed:a7: b3:81:ee:b1:f8:34:56:0a:21:85:05:ff:f9:06:e4: 32:61:b0:3b:17:06:c1:39:be:d9:d6:5e:f2:98:53: 44:b1:31:8a:90:b3:1a:a0:ba:4d:1f:93:5a:ae:a1: 35:6f:3d:e5:c1:2f:1f:59:1b:6e:b4:23:e4:55:ed: 94:22:3a:7c:6b:8a:e3:79:68:0b:d5:ec:d7:78:12: 91:e8:53:3f:eb:db:50:41:a2:4d:13:c3:5f:57:6b: 88:c8:ca:0a:a6:bb:ac:41:f5:9c:f8:e7:64:0d:0e: aa:65:07:03:ed:9f:32:58:25:d2:55:89:73:b6:c9: 04:76:84:78:0c:e3:6b:1a:c8:96:e7:de:12:ba:ef: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EE:8B:36:A1:4D:C8:52:96:80:F4:62:C0:5C:A1:64:47:46:40:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 167.253.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:49:76:44:09:ae:62:97:61:b2:f6:41:97:a3:06:f6:83:71: bc:17:a7:9b:9d:69:ce:5f:95:be:41:1a:5c:1b:47:a1:dc:20: 29:e5:3b:63:09:09:77:12:2a:b8:7d:76:f9:db:92:8e:c7:f7: 16:f9:6e:e7:7f:fc:90:64:da:6b:5d:b1:61:a1:5e:83:a3:66: 4d:e5:8b:eb:7c:33:39:12:39:d5:e0:0c:8e:52:93:a3:d1:6d: 6c:27:98:b0:c6:ea:3c:a6:4f:a4:b6:69:ad:af:4a:ea:35:ca: 4b:7d:2c:6f:8c:ce:c4:86:19:b3:0d:1a:8a:d0:3a:b7:eb:c2: 61:b5:14:ad:b2:24:a3:4e:f0:57:b2:81:e8:8e:a0:2e:98:58: 9e:a5:d1:3c:f3:98:f0:f7:47:36:9f:a3:50:33:93:94:de:08: 1f:73:f2:fa:30:a0:92:af:10:26:79:ce:ed:5d:48:11:7a:4a: c3:84:99:76:12:c2:0d:d7:e5:ff:59:08:11:76:ed:da:aa:a3: 7a:1b:64:f9:7e:ef:b9:f4:7b:c3:0b:a7:04:34:ef:48:d5:f3: dd:07:80:9f:cc:f9:de:a1:30:df:17:fa:24:fc:be:40:bb:51: 88:0b:95:d2:2e:d9:74:9a:71:0f:49:08:12:eb:13:6d:47:1f: f8:c0:3a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXrLTmpcDItLJ5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGI5YzE1NWQtZDA5OS00YTAxLThkOTUtNTk0M2JiNDVjNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUdAk/oAf+BIqHcHZGxtNraih8L+9CvJegRF UbHD6naVutODdDyLKyg62WMQ66HY5dc6H2LEH9VzHHAiD0ZXn+HULd7vWuPWd1fa d5YBdPawelxJp5ctK7cg32XwKvxOKxgFHm0FZeIDsd08etz0NuLtkMNb7aezge6x +DRWCiGFBf/5BuQyYbA7FwbBOb7Z1l7ymFNEsTGKkLMaoLpNH5NarqE1bz3lwS8f WRtutCPkVe2UIjp8a4rjeWgL1ezXeBKR6FM/69tQQaJNE8NfV2uIyMoKprusQfWc +OdkDQ6qZQcD7Z8yWCXSVYlztskEdoR4DONrGsiW594Suu+EYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbuizahTchSloD0YsBcoWRHRkCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvYzM2N2Q5MjQtZTNjMS0z M2Q0LTgzZTItY2I4MTYyZGE1M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBJdkQJrmKXYbL2QZejBvaDcbwXp5udac5flb5BGlwbR6HcICnlO2MJ CXcSKrh9dvnbko7H9xb5bud//JBk2mtdsWGhXoOjZk3li+t8MzkSOdXgDI5Sk6PR bWwnmLDG6jymT6S2aa2vSuo1ykt9LG+MzsSGGbMNGorQOrfrwmG1FK2yJKNO8Fey geiOoC6YWJ6l0TzzmPD3Rzafo1Azk5TeCB9z8vowoJKvECZ5zu1dSBF6SsOEmXYS wg3X5f9ZCBF27dqqo3obZPl+77n0e8MLpwQ070jV890HgJ/M+d6hMN8X+iT8vkC7 UYgLldIu2XSacQ9JCBLrE21HH/jAOl0= -----END CERTIFICATE-----Generated at Thu Feb 26 07:28:01 2026 by rpki-client