$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa File: b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa (raw, json) Hash identifier: KbzVa/kFjxE8v1CBL5380NQuPY+lWvX9Sbw+Q+6/KKo= Subject key identifier: 63:79:84:02:17:5F:B7:08:7A:90:CA:BC:CD:E8:A7:33:1B:43:35:38 Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Certificate serial: 010D0C9F4328584D0BDD0B0536AD38B5F087F460 Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 5650 IP address blocks: 167.253.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:0b:05:36:ad:38:b5:f0:87:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=aa5515d4-afe6-402e-bd50-f0a8b583b707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:ec:b6:5e:ba:64:70:0f:4a:ce:60:7a:42: 3a:f4:49:36:2b:4b:07:34:87:0f:b2:8d:ba:64:14: 82:62:fd:c8:04:57:66:32:36:44:2b:e0:a0:8e:4f: b0:67:cf:cf:4d:70:0d:0d:95:e8:ac:5a:8b:51:3d: c9:4f:be:52:c8:dd:b4:a0:34:bb:31:9b:bf:8e:ea: 45:15:b5:5f:46:54:61:f7:c0:31:2e:33:39:ca:45: 3d:4d:c7:9e:f1:f2:79:59:1c:4a:f0:a0:01:f1:02: 10:8a:e6:57:ab:ba:35:a1:e8:29:84:ec:fe:31:19: b3:88:0f:30:ad:9e:91:77:bf:11:03:7d:24:4d:f3: 51:32:18:ec:53:ce:05:97:15:16:7b:32:d0:41:d1: 06:09:3d:a5:81:3d:ba:2d:7f:61:1b:e5:a7:ff:26: 66:70:6c:50:39:7a:0d:a8:b0:d8:35:6f:0e:6f:6b: ff:42:37:48:96:f4:2d:ff:a7:2c:fd:7a:7c:61:a0: 6f:52:a4:3a:7d:49:f5:80:0c:6b:2c:10:e2:49:41: d7:a9:70:26:c1:58:08:79:7a:6c:e8:21:fc:d5:1b: 80:ca:c4:1e:70:74:ad:4a:51:ec:f6:40:7a:b6:05: 59:b2:75:d5:6a:3e:fc:cd:7b:bc:b1:8a:ca:e4:99: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:79:84:02:17:5F:B7:08:7A:90:CA:BC:CD:E8:A7:33:1B:43:35:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/b104a5e2-e68c-3cbf-94bb-3a6131d11d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl X509v3 Authority Key Identifier: keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer sbgp-ipAddrBlock: critical IPv4: 167.253.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2e:4c:b1:35:56:65:fc:e0:73:fb:a7:4a:ed:37:e2:07:c4: ac:c2:96:7f:e5:b2:c3:33:e1:56:c8:57:80:f3:60:22:99:d2: 65:36:9e:80:9e:de:fa:2c:b2:23:78:fe:39:12:17:9e:e5:d6: 3a:a5:69:0c:d3:36:83:a3:40:73:18:d2:bb:45:95:41:43:e4: 62:98:dc:df:21:4f:f1:d8:f1:15:82:3a:e0:84:d4:14:b7:91: 1d:b8:de:6c:9c:8d:18:97:95:2e:1a:64:0e:d2:a2:32:a5:71: 49:5f:55:57:9e:79:ca:e4:14:0d:e5:27:9a:3e:cd:14:ce:c9: f1:5b:d9:a1:16:23:63:77:78:9d:83:cd:83:8e:eb:d7:19:6c: bd:64:1c:17:c1:66:5b:64:db:12:33:9f:62:88:2f:e9:46:b2: d6:3f:57:89:46:fa:74:7d:3d:7a:be:98:56:98:45:99:33:73: 80:52:ba:15:4a:b1:7e:af:8a:c2:c7:e6:8d:e8:5a:6b:46:60: 36:59:f8:ef:65:d3:30:85:89:55:6f:a7:c0:1e:4a:1a:1f:f8: 07:c7:49:bd:8b:f2:f7:a4:b1:0b:4f:96:e0:52:50:45:e7:6e: 2b:99:36:4f:d5:37:47:c0:1c:4c:ab:ab:f4:19:0a:03:fb:29: 5d:d6:dd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QsFNq04tfCH9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNhNmI2ZjktYTA1Ni00NzFjLWJmOTYtZjJmZDUzMzBk YWM0MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YWE1NTE1ZDQtYWZlNi00MDJlLWJkNTAtZjBhOGI1ODNiNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbLstl66ZHAPSs5gekI69Ek2K0sHNIcPso26 ZBSCYv3IBFdmMjZEK+Cgjk+wZ8/PTXANDZXorFqLUT3JT75SyN20oDS7MZu/jupF FbVfRlRh98AxLjM5ykU9Tcee8fJ5WRxK8KAB8QIQiuZXq7o1oegphOz+MRmziA8w rZ6Rd78RA30kTfNRMhjsU84FlxUWezLQQdEGCT2lgT26LX9hG+Wn/yZmcGxQOXoN qLDYNW8Ob2v/QjdIlvQt/6cs/Xp8YaBvUqQ6fUn1gAxrLBDiSUHXqXAmwVgIeXps 6CH81RuAysQecHStSlHs9kB6tgVZsnXVaj78zXu8sYrK5JnnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN5hAIXX7cIepDKvM3opzMbQzU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yY2E2 YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZkNTMzMGRhYzQvYjEwNGE1ZTItZTY4Yy0z Y2JmLTk0YmItM2E2MTMxZDExZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmNhNmI2ZjktYTA1Ni00NzFjLWJm OTYtZjJmZDUzMzBkYWM0LzJjYTZiNmY5LWEwNTYtNDcxYy1iZjk2LWYyZmQ1MzMw ZGFjNC5jcmwwHwYDVR0jBBgwFoAU0Gj22st2u5o08zsvhIvODS5JlDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yY2E2YjZmOS1hMDU2LTQ3MWMtYmY5Ni1mMmZk NTMzMGRhYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0uTLE1VmX84HP7p0rtN+IHxKzCln/lssMz4VbIV4DzYCKZ0mU2noCe 3vossiN4/jkSF57l1jqlaQzTNoOjQHMY0rtFlUFD5GKY3N8hT/HY8RWCOuCE1BS3 kR243mycjRiXlS4aZA7SojKlcUlfVVeeecrkFA3lJ5o+zRTOyfFb2aEWI2N3eJ2D zYOO69cZbL1kHBfBZltk2xIzn2KIL+lGstY/V4lG+nR9PXq+mFaYRZkzc4BSuhVK sX6visLH5o3oWmtGYDZZ+O9l0zCFiVVvp8AeShof+AfHSb2L8veksQtPluBSUEXn biuZNk/VN0fAHEyrq/QZCgP7KV3W3VM= -----END CERTIFICATE-----Generated at Wed Mar 4 19:17:34 2026 by rpki-client