$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa File: 09ca4d21-e90d-39be-924e-66f0e9c839b3.roa (raw, json) Hash identifier: QikbzyWLLw5mWJlve4hv+Ew4Y6Ytu9YJCO1RrqBNssE= Subject key identifier: 68:C9:6A:41:A0:A1:D6:F6:5B:31:EC:C3:52:40:E4:F9:D9:BD:22:E6 Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Certificate serial: 010D0C9F4328584D0BDD0B1E2FAD655B8F844B80 Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 6453 IP address blocks: 167.253.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:0b:1e:2f:ad:65:5b:8f:84:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=ea8b054c-ab59-4eca-b4af-e9722f6b57d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:ad:5f:f5:d3:16:59:42:6d:e8:30:c0:b0: b0:2f:5f:5e:2f:71:1a:12:8b:46:13:47:54:bc:38: f8:d3:42:c8:e3:3c:19:75:21:d4:c1:ff:19:84:66: a1:67:16:b4:dc:4b:77:61:cf:3f:24:13:83:45:63: 43:d1:ca:28:c3:ac:1a:84:ba:8d:32:f2:41:2b:8d: 21:45:8b:28:15:24:e8:14:a9:53:db:52:c9:8e:db: 37:73:15:24:a9:a4:68:4b:08:4c:b2:07:c6:4c:16: b5:08:14:c8:17:8b:b3:68:e5:6d:1d:5e:1e:d5:a1: 2d:c8:68:81:80:45:34:39:26:20:14:88:27:84:09: 67:5e:34:48:af:ea:03:17:67:2f:47:c5:72:93:ce: fa:15:5b:16:e8:b4:68:02:f2:f4:51:e6:06:8b:35: 27:83:52:dd:07:f3:0f:66:45:34:48:ba:56:75:b7: ff:72:8d:97:79:33:cb:0c:1d:89:41:5c:64:af:ed: 9f:cc:da:8c:c1:5f:b7:45:b8:45:01:8d:c6:1f:c9: db:36:b6:86:bd:54:45:ea:5d:f3:28:de:2a:4a:21: 66:bf:e5:68:33:1f:a8:66:88:50:11:70:41:a8:f6: c7:67:97:a7:df:29:bf:9f:09:35:63:d4:bb:d4:d0: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:6A:41:A0:A1:D6:F6:5B:31:EC:C3:52:40:E4:F9:D9:BD:22:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl X509v3 Authority Key Identifier: keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer sbgp-ipAddrBlock: critical IPv4: 167.253.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:eb:7e:62:1f:72:89:19:d5:cb:f4:e6:23:dc:dd:f2:f3:3d: 25:3a:2d:8d:7c:5d:31:62:d7:f7:ce:d9:85:f4:21:d2:cf:3e: 67:24:f7:e3:c1:b2:9b:f9:44:05:93:b3:39:e3:51:a3:b2:6e: 5e:23:2d:1e:21:50:8b:6b:d6:0a:e0:f3:3a:de:1c:ad:da:50: ab:42:32:f1:9d:d2:0a:8b:3d:2d:0d:39:eb:68:b0:06:33:c1: 44:f8:4f:3c:db:39:3d:31:e1:0e:ca:24:fc:40:f6:ef:01:d5: cf:0f:b9:aa:29:4c:47:b8:e2:7d:27:f5:82:06:a4:44:43:87: 54:84:2e:ec:a5:bc:2a:0c:a6:87:e9:f8:68:9d:4f:f9:9f:f2: 86:ae:d4:42:aa:3d:db:2d:92:70:bf:76:21:22:a9:cf:ac:2f: 87:5a:c0:67:30:97:9b:a5:96:b2:13:73:3d:3e:d8:59:f1:5c: a5:75:24:14:87:93:27:08:98:74:b4:d5:84:87:e5:02:59:33: aa:96:0a:fa:ce:0d:21:fd:01:0d:00:e6:1d:9b:80:cf:05:bc: b1:dd:2b:de:f9:b8:a8:19:99:ad:6d:39:b8:a5:9c:92:93:16: e1:31:c0:e8:50:4b:68:3e:ca:3f:16:aa:30:e8:2b:4e:90:af: f0:2f:ac:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QseL61lW4+ES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNmI2ZjktYTA1Ni00NzFjLWJmOTYtZjJmZDUzMzBk YWM0MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWE4YjA1NGMtYWI1OS00ZWNhLWI0YWYtZTk3MjJmNmI1N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknStX/XTFllCbegwwLCwL19eL3EaEotGE0dU vDj400LI4zwZdSHUwf8ZhGahZxa03Et3Yc8/JBODRWND0coow6wahLqNMvJBK40h RYsoFSToFKlT21LJjts3cxUkqaRoSwhMsgfGTBa1CBTIF4uzaOVtHV4e1aEtyGiB gEU0OSYgFIgnhAlnXjRIr+oDF2cvR8Vyk876FVsW6LRoAvL0UeYGizUng1LdB/MP ZkU0SLpWdbf/co2XeTPLDB2JQVxkr+2fzNqMwV+3RbhFAY3GH8nbNraGvVRF6l3z KN4qSiFmv+VoMx+oZohQEXBBqPbHZ5en3ym/nwk1Y9S71NDIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjJakGgodb2WzHsw1JA5PnZvSLmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yY2E2 YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZkNTMzMGRhYzQvMDljYTRkMjEtZTkwZC0z OWJlLTkyNGUtNjZmMGU5YzgzOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmNhNmI2ZjktYTA1Ni00NzFjLWJm OTYtZjJmZDUzMzBkYWM0LzJjYTZiNmY5LWEwNTYtNDcxYy1iZjk2LWYyZmQ1MzMw ZGFjNC5jcmwwHwYDVR0jBBgwFoAU0Gj22st2u5o08zsvhIvODS5JlDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yY2E2YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZk NTMzMGRhYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnrfmIfcokZ1cv05iPc3fLzPSU6LY18XTFi1/fO2YX0IdLPPmck9+PB spv5RAWTsznjUaOybl4jLR4hUItr1grg8zreHK3aUKtCMvGd0gqLPS0NOetosAYz wUT4TzzbOT0x4Q7KJPxA9u8B1c8PuaopTEe44n0n9YIGpERDh1SELuylvCoMpofp +GidT/mf8oau1EKqPdstknC/diEiqc+sL4dawGcwl5ullrITcz0+2FnxXKV1JBSH kycImHS01YSH5QJZM6qWCvrODSH9AQ0A5h2bgM8FvLHdK975uKgZma1tObilnJKT FuExwOhQS2g+yj8WqjDoK06Qr/AvrHw= -----END CERTIFICATE-----Generated at Sat Mar 7 15:14:28 2026 by rpki-client