$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa File: c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa (raw, json) Hash identifier: E1Wqy5qKRSRjQcZQ/5yMZzISU37rq6eB+bB9rc+RQUk= Subject key identifier: 12:52:48:ED:43:A1:AE:10:14:31:24:A2:53:C5:9D:67:1A:0C:68:84 Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Certificate serial: 010D0C9F4328584DF21133223267E1E174976B00 Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa Signing time: Mon 25 May 2026 01:01:51 +0000 ROA not before: Mon 25 May 2026 01:01:51 +0000 ROA not after: Sun 23 Aug 2026 01:01:51 +0000 asID: 6079 IP address blocks: 167.253.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:11:33:22:32:67:e1:e1:74:97:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Validity Not Before: May 25 01:01:51 2026 GMT Not After : Aug 23 01:01:51 2026 GMT Subject: CN=f570efc2-7848-4b5a-b299-6cb6af40c900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:1c:1f:98:2f:c0:36:c7:b2:5e:bb:80:1e: a8:ef:b6:38:1b:bd:97:c5:5d:23:7b:33:95:62:36: 2e:16:80:8c:a9:c3:2f:84:b3:e4:7d:7a:7c:5e:7f: d6:5d:5b:93:b5:32:83:e5:c5:63:d0:7e:3f:70:e9: bc:34:cc:8a:b5:3a:00:0a:fd:cb:fc:c0:55:79:28: aa:14:a7:5c:94:63:13:8e:20:2d:fd:be:01:f7:68: c8:2c:fa:75:df:38:79:81:cf:fd:e4:53:f0:15:f3: e6:cd:47:e7:dc:bc:7e:4a:6d:51:50:a0:9f:11:04: a3:7e:f4:9e:22:b7:42:7c:51:f0:12:84:1d:34:ec: 53:44:b6:19:6d:72:39:da:42:73:cb:06:b2:65:41: 93:37:66:80:cc:37:be:10:de:41:0f:a9:ce:f6:d2: 9e:99:8d:be:9d:88:83:8a:92:3d:1e:1f:63:37:00: c1:7e:e9:9b:75:3c:b5:88:13:2a:22:9e:e6:97:b1: 78:14:d2:c4:df:33:59:24:e2:0f:b7:f8:03:9b:32: ae:d7:c3:64:12:a3:1f:ae:27:3e:7a:22:38:3c:88: 92:90:cc:de:c3:a8:32:0f:91:04:3e:34:8b:58:21: db:50:2c:90:04:fc:b4:ce:94:06:79:66:65:4c:7c: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:52:48:ED:43:A1:AE:10:14:31:24:A2:53:C5:9D:67:1A:0C:68:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl X509v3 Authority Key Identifier: keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:21:ee:d4:ae:b0:9f:9d:68:bf:25:a2:a4:23:29:2a:14:ab: bb:f5:31:da:b0:8a:46:b3:b9:e4:57:ac:da:e2:fc:6d:17:ff: 25:17:d5:3c:1d:87:8c:ef:48:84:30:f3:3c:a4:bd:27:bd:73: a9:0e:2a:6d:0a:43:88:b2:cf:4a:75:35:29:b3:76:79:15:ef: 9b:53:81:39:6b:87:60:68:f1:5a:2e:31:27:22:67:81:c5:28: 44:7a:af:32:c1:4b:b6:9e:cf:09:00:8b:de:0a:c1:48:3c:45: ca:b7:47:87:5e:d8:82:27:a0:cd:14:94:88:2b:85:0b:07:c7: 3d:80:01:81:3b:a2:15:b5:8b:76:33:00:00:f8:d8:cb:ab:33: 64:43:43:b5:53:48:96:f5:c0:89:bc:e6:af:53:1f:58:58:c9: 73:7e:17:11:ef:fa:96:a1:cd:e6:86:2d:ea:2b:5c:9e:e4:37: 57:e8:6a:df:88:b8:d8:81:74:70:08:6b:39:11:87:2f:f7:b7: 80:4a:57:48:88:0c:3e:f8:da:3a:e4:03:b3:00:3f:23:a2:5a: ac:84:74:59:f9:89:b1:1d:81:6d:bb:5f:1b:dc:44:c5:69:6d: fc:ca:ae:c8:3f:9b:06:f1:12:9c:e3:b9:0b:1b:50:9d:ca:2a: 83:89:00:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yETMiMmfh4XSXawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl ODRhMB4XDTI2MDUyNTAxMDE1MVoXDTI2MDgyMzAxMDE1MVowLzEtMCsGA1UEAxMk ZjU3MGVmYzItNzg0OC00YjVhLWIyOTktNmNiNmFmNDBjOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJscH5gvwDbHsl67gB6o77Y4G72XxV0jezOV YjYuFoCMqcMvhLPkfXp8Xn/WXVuTtTKD5cVj0H4/cOm8NMyKtToACv3L/MBVeSiq FKdclGMTjiAt/b4B92jILPp13zh5gc/95FPwFfPmzUfn3Lx+Sm1RUKCfEQSjfvSe IrdCfFHwEoQdNOxTRLYZbXI52kJzywayZUGTN2aAzDe+EN5BD6nO9tKemY2+nYiD ipI9Hh9jNwDBfumbdTy1iBMqIp7ml7F4FNLE3zNZJOIPt/gDmzKu18NkEqMfric+ eiI4PIiSkMzew6gyD5EEPjSLWCHbUCyQBPy0zpQGeWZlTHy70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJSSO1Doa4QFDEkolPFnWcaDGiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvYzBiOWZkMGItYzc1Mi0z MDliLTlkZTktNzczZDVmODJjMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4 ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGch7tSusJ+daL8loqQjKSoUq7v1MdqwikazueRXrNri/G0X/yUX1Twd h4zvSIQw8zykvSe9c6kOKm0KQ4iyz0p1NSmzdnkV75tTgTlrh2Bo8VouMSciZ4HF KER6rzLBS7aezwkAi94KwUg8Rcq3R4de2IInoM0UlIgrhQsHxz2AAYE7ohW1i3Yz AAD42MurM2RDQ7VTSJb1wIm85q9TH1hYyXN+FxHv+pahzeaGLeorXJ7kN1foat+I uNiBdHAIazkRhy/3t4BKV0iIDD742jrkA7MAPyOiWqyEdFn5ibEdgW27XxvcRMVp bfzKrsg/mwbxEpzjuQsbUJ3KKoOJAC0= -----END CERTIFICATE-----Generated at Tue Jun 2 21:39:35 2026 by rpki-client