$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa File: 625871ee-8e0c-369e-9613-3dba49598174.roa (raw, json) Hash identifier: 1ffsHDVt0yuOl42+tAFth7b2lzk2a6qX+JAlRAJmlc4= Subject key identifier: B3:F6:AE:23:78:C5:BB:D7:CC:01:CC:B6:BB:9E:96:57:BF:35:55:A0 Certificate issuer: /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Certificate serial: 010D0C9F4328584D5FA7EF25BDEF1EA7856FCF00 Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa Signing time: Thu 02 Apr 2026 14:21:44 +0000 ROA not before: Thu 02 Apr 2026 14:21:44 +0000 ROA not after: Wed 01 Jul 2026 14:21:44 +0000 asID: 396982 IP address blocks: 167.254.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:a7:ef:25:bd:ef:1e:a7:85:6f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Validity Not Before: Apr 2 14:21:44 2026 GMT Not After : Jul 1 14:21:44 2026 GMT Subject: CN=8bf1f4ce-5401-4246-9362-cc8a2ac2d51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:8c:b0:c2:70:0c:65:0e:5f:3e:1a:eb:e4: ab:df:5f:cb:18:c7:c5:64:12:ec:7d:b9:21:be:44: ae:71:50:05:d6:91:80:87:b6:e3:32:89:9a:a5:41: 79:f3:47:81:54:24:6d:11:5d:69:c0:5a:2d:62:ef: 53:ef:58:23:81:43:f7:70:52:93:71:13:c0:35:f8: a6:ac:a4:c3:df:5e:7c:7b:af:1d:f2:64:fb:e2:53: 71:c7:77:e6:68:b5:63:1a:49:43:59:2c:75:e2:94: 47:05:ef:66:c4:60:d5:71:ef:d3:9a:d5:0d:d3:c6: 44:9a:8e:db:f4:12:a6:5f:d4:7a:73:f7:06:c0:f5: a5:6e:c3:b6:3d:9e:74:02:df:33:75:fd:54:5c:3b: 6d:a1:d3:ae:70:9b:77:34:b0:14:fd:6b:1e:3c:11: b7:14:c4:01:99:17:85:32:e3:a0:ac:c8:9a:1b:29: 35:6c:ef:67:64:f9:38:b3:56:12:ec:c8:78:4d:b8: 49:ec:ff:73:35:45:cb:1e:9f:31:57:d8:3c:60:2c: dc:54:bb:d2:12:cc:a4:43:77:16:e1:af:37:47:67: 31:e7:74:40:4f:af:f6:94:74:bc:ad:0b:a1:59:ae: 4a:dd:e9:e3:17:39:dc:11:be:94:e7:dd:f4:65:cb: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:AE:23:78:C5:BB:D7:CC:01:CC:B6:BB:9E:96:57:BF:35:55:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/625871ee-8e0c-369e-9613-3dba49598174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl X509v3 Authority Key Identifier: keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer sbgp-ipAddrBlock: critical IPv4: 167.254.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e1:a7:47:65:22:23:a5:11:48:c6:c8:e4:50:35:9d:c7:85: 83:ad:c8:ad:37:98:60:d1:2c:e0:02:98:85:99:67:a5:19:9b: 0a:2a:18:c3:a4:20:9b:a7:67:7c:5b:83:ce:df:01:02:5c:9f: 17:5a:b9:01:05:0a:52:59:60:e6:0d:c4:ff:27:ab:71:4f:a1: 21:79:7b:e4:d5:c3:31:23:fd:b8:b9:07:99:7d:91:33:9a:d1: 2b:19:97:12:9e:2f:62:00:e4:18:46:ef:32:ee:3c:26:13:40: 9b:1e:6b:be:55:e4:11:2d:14:13:1a:38:06:95:5e:65:d8:aa: 3b:37:bd:2d:86:0a:7e:ba:b7:62:65:5a:54:60:72:ce:ff:7b: 24:23:54:b6:53:a8:72:4b:01:c5:38:7c:55:41:a6:e0:5d:f4: 7b:32:0c:b4:ce:24:c8:cd:b3:16:ec:7f:be:89:e4:fd:d3:c7: 8d:e9:7a:67:b3:1d:b2:a2:d2:f5:30:c6:f4:60:db:7c:24:17: 4d:c4:12:6b:49:98:1e:23:07:71:ed:b0:da:eb:09:0d:3c:90: 0a:3e:db:c0:f3:13:7a:64:c7:bb:6f:ba:54:fa:4a:46:b3:fb: 4c:1b:6d:c4:70:41:1a:fc:48:2a:a0:ba:cb:41:49:ed:7e:8e: fa:24:10:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fp+8lve8ep4VvzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZh NjhkMB4XDTI2MDQwMjE0MjE0NFoXDTI2MDcwMTE0MjE0NFowLzEtMCsGA1UEAxMk OGJmMWY0Y2UtNTQwMS00MjQ2LTkzNjItY2M4YTJhYzJkNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYCMsMJwDGUOXz4a6+Sr31/LGMfFZBLsfbkh vkSucVAF1pGAh7bjMomapUF580eBVCRtEV1pwFotYu9T71gjgUP3cFKTcRPANfim rKTD3158e68d8mT74lNxx3fmaLVjGklDWSx14pRHBe9mxGDVce/TmtUN08ZEmo7b 9BKmX9R6c/cGwPWlbsO2PZ50At8zdf1UXDttodOucJt3NLAU/WsePBG3FMQBmReF MuOgrMiaGyk1bO9nZPk4s1YS7Mh4TbhJ7P9zNUXLHp8xV9g8YCzcVLvSEsykQ3cW 4a83R2cx53RAT6/2lHS8rQuhWa5K3enjFzncEb6U5930ZctK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP2riN4xbvXzAHMtruelle/NVWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMDIz Y2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvNjI1ODcxZWUtOGUwYy0z NjllLTk2MTMtM2RiYTQ5NTk4MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjAyM2NlNWQtN2FmOC00MzQ1LWEy ZDktZDIyZTc3ZWZhNjhkL2YwMjNjZTVkLTdhZjgtNDM0NS1hMmQ5LWQyMmU3N2Vm YTY4ZC5jcmwwHwYDVR0jBBgwFoAUT4Lu4kH0mLYZUw++sgB70Z3m5YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJl NzdlZmE2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfhp0dlIiOlEUjGyORQNZ3HhYOtyK03mGDRLOACmIWZZ6UZmwoqGMOk IJunZ3xbg87fAQJcnxdauQEFClJZYOYNxP8nq3FPoSF5e+TVwzEj/bi5B5l9kTOa 0SsZlxKeL2IA5BhG7zLuPCYTQJsea75V5BEtFBMaOAaVXmXYqjs3vS2GCn66t2Jl WlRgcs7/eyQjVLZTqHJLAcU4fFVBpuBd9HsyDLTOJMjNsxbsf76J5P3Tx43pemez HbKi0vUwxvRg23wkF03EEmtJmB4jB3HtsNrrCQ08kAo+28DzE3pkx7tvulT6Skaz +0wbbcRwQRr8SCqgustBSe1+jvokEBc= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:21 2026 by rpki-client