$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/b1d871f5-ecfb-3acd-af2c-dc78e7ef357a.roa File: b1d871f5-ecfb-3acd-af2c-dc78e7ef357a.roa (raw, json) Hash identifier: i2SYG0y7OvBTMOe+LIJ/BFuw7Nxir8NOAypJhyH1wTk= Subject key identifier: 9A:DD:72:47:A6:2C:1F:E9:95:3D:DF:03:34:95:39:29:5B:BF:BC:85 Certificate issuer: /CN=d299d638-1be5-4c36-a747-2f40fe8a23d5 Certificate serial: 010D0C9F4328584F5F24A1AB8A84EAC402CC6020 Authority key identifier: F6:7A:45:BA:B8:D6:F8:A3:CD:4B:E1:2D:8D:FB:3A:08:AC:22:18:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/b1d871f5-ecfb-3acd-af2c-dc78e7ef357a.roa Signing time: Fri 02 Oct 2026 19:31:03 +0000 ROA not before: Fri 02 Oct 2026 19:31:03 +0000 ROA not after: Thu 31 Dec 2026 20:31:03 +0000 asID: 62044 IP address blocks: 167.83.2.0/24 maxlen: 24 167.83.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/d299d638-1be5-4c36-a747-2f40fe8a23d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/d299d638-1be5-4c36-a747-2f40fe8a23d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:24:a1:ab:8a:84:ea:c4:02:cc:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d299d638-1be5-4c36-a747-2f40fe8a23d5 Validity Not Before: Oct 2 19:31:03 2026 GMT Not After : Dec 31 20:31:03 2026 GMT Subject: CN=7bd2a953-187b-4da4-85b1-730df733ed08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:2e:b6:27:6c:f2:4a:e9:c2:ac:e4:4e:24: 76:c7:c7:20:28:36:da:c8:25:72:2b:53:fa:96:aa: 29:27:b3:58:3a:57:2d:cc:89:60:ea:b7:1b:09:f5: de:80:a5:47:f9:74:b5:f0:7a:bc:4e:53:6a:db:46: 49:3b:02:be:27:a6:d4:55:a0:2f:ee:7e:ee:45:c6: eb:44:49:bd:a2:34:1c:60:e5:51:3e:3b:dd:f6:cb: 74:14:2f:7b:ed:25:c8:41:dc:26:7a:94:27:ef:42: 4b:4c:12:44:62:bf:24:0d:16:f9:f8:e0:31:2c:3e: 5e:ca:df:14:06:42:c5:d9:b8:6b:73:1d:9b:9d:76: 9a:39:7f:6e:c9:47:00:a5:40:8a:f9:53:1f:59:cd: 9b:38:90:3b:0b:31:a1:54:b9:c7:12:58:a1:e3:6d: 41:ce:62:68:85:bc:ea:20:15:f1:07:e7:6d:c1:49: 62:87:5e:5e:3b:da:10:63:2d:e8:b9:50:cf:9d:14: 2a:35:95:bb:76:7e:7e:40:26:21:9f:52:d4:2f:b3: 60:22:ed:c8:98:fc:02:9e:73:80:a7:e8:3e:02:77: a0:0b:c9:0d:c7:60:fe:cb:37:dc:d5:3c:20:20:a0: 3d:d7:f5:00:89:26:09:59:f3:74:17:c4:da:0f:b2: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DD:72:47:A6:2C:1F:E9:95:3D:DF:03:34:95:39:29:5B:BF:BC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/b1d871f5-ecfb-3acd-af2c-dc78e7ef357a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5/d299d638-1be5-4c36-a747-2f40fe8a23d5.crl X509v3 Authority Key Identifier: keyid:F6:7A:45:BA:B8:D6:F8:A3:CD:4B:E1:2D:8D:FB:3A:08:AC:22:18:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d299d638-1be5-4c36-a747-2f40fe8a23d5.cer sbgp-ipAddrBlock: critical IPv4: 167.83.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:7d:59:a8:95:f9:1d:e3:c7:15:43:41:6d:be:0f:a0:53:5f: e1:fc:89:9e:12:d7:11:43:b6:e9:64:a8:56:d5:da:af:ca:47: de:f8:af:12:66:7f:cc:47:84:ea:ed:8d:01:9f:0c:54:f7:88: 07:0b:50:37:af:51:d9:77:51:88:a7:d8:b3:cc:13:72:69:22: cd:42:d5:3f:ca:05:ea:7d:de:27:e8:38:04:ff:de:11:ce:4b: 34:0d:38:1e:d0:2a:89:32:b7:e5:3d:94:20:b4:9e:b8:e5:81: 44:da:28:cc:f0:9b:a1:8a:04:4f:d1:dc:fc:92:f6:85:81:22: 2c:a3:d8:4f:0d:19:76:3c:0e:ea:22:fe:a5:04:49:9a:4e:c9: 9e:e7:ed:76:37:26:19:90:75:c4:66:c0:ab:5d:1e:4e:17:24: 67:ec:cd:bc:60:52:55:75:94:4d:c7:e8:91:cb:f8:57:4a:fb: cb:d9:44:74:d9:6e:55:13:d2:c8:bb:e3:e6:fa:a3:4f:2c:03: 6a:dc:0c:83:77:74:87:be:69:f5:15:ee:c5:7f:39:23:ad:86: 58:40:f5:7e:b5:94:65:ed:5e:41:c1:44:13:2f:7d:50:aa:5b: 52:b0:6c:6f:ed:d8:ff:1a:bc:b0:76:51:17:cc:a2:09:2a:34: ec:7c:2c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fJKGrioTqxALMYCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI5OWQ2MzgtMWJlNS00YzM2LWE3NDctMmY0MGZlOGEy M2Q1MB4XDTI2MTAwMjE5MzEwM1oXDTI2MTIzMTIwMzEwM1owLzEtMCsGA1UEAxMk N2JkMmE5NTMtMTg3Yi00ZGE0LTg1YjEtNzMwZGY3MzNlZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndUutids8krpwqzkTiR2x8cgKDbayCVyK1P6 lqopJ7NYOlctzIlg6rcbCfXegKVH+XS18Hq8TlNq20ZJOwK+J6bUVaAv7n7uRcbr REm9ojQcYOVRPjvd9st0FC977SXIQdwmepQn70JLTBJEYr8kDRb5+OAxLD5eyt8U BkLF2bhrcx2bnXaaOX9uyUcApUCK+VMfWc2bOJA7CzGhVLnHElih421BzmJohbzq IBXxB+dtwUlih15eO9oQYy3ouVDPnRQqNZW7dn5+QCYhn1LUL7NgIu3ImPwCnnOA p+g+AnegC8kNx2D+yzfc1TwgIKA91/UAiSYJWfN0F8TaD7InhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrdckemLB/plT3fAzSVOSlbv7yFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9kMjk5 ZDYzOC0xYmU1LTRjMzYtYTc0Ny0yZjQwZmU4YTIzZDUvYjFkODcxZjUtZWNmYi0z YWNkLWFmMmMtZGM3OGU3ZWYzNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZDI5OWQ2MzgtMWJlNS00YzM2LWE3 NDctMmY0MGZlOGEyM2Q1L2QyOTlkNjM4LTFiZTUtNGMzNi1hNzQ3LTJmNDBmZThh MjNkNS5jcmwwHwYDVR0jBBgwFoAU9npFurjW+KPNS+Etjfs6CKwiGDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9kMjk5ZDYzOC0xYmU1LTRjMzYtYTc0Ny0yZjQw ZmU4YTIzZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp1MCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALl9WaiV+R3jxxVDQW2+D6BTX+H8iZ4S1xFDtulkqFbV2q/KR974rxJm f8xHhOrtjQGfDFT3iAcLUDevUdl3UYin2LPME3JpIs1C1T/KBep93ifoOAT/3hHO SzQNOB7QKokyt+U9lCC0nrjlgUTaKMzwm6GKBE/R3PyS9oWBIiyj2E8NGXY8Duoi /qUESZpOyZ7n7XY3JhmQdcRmwKtdHk4XJGfszbxgUlV1lE3H6JHL+FdK+8vZRHTZ blUT0si74+b6o08sA2rcDIN3dIe+afUV7sV/OSOthlhA9X61lGXtXkHBRBMvfVCq W1KwbG/t2P8avLB2URfMogkqNOx8LAc= -----END CERTIFICATE-----Generated at Fri Oct 9 01:00:56 2026 by rpki-client