$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa File: fd14e445-969e-3398-beb5-fd5d3cad75e3.roa (raw, json) Hash identifier: /4vRHDQKON87bUhvrIhfNvKpoirGpmD0CcLmYLcALIE= Subject key identifier: 4C:3F:D1:BF:28:81:B6:64:4F:52:81:AA:C6:80:2A:20:B4:8B:54:D4 Certificate issuer: /CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Certificate serial: 010D0C9F4328584D5FA8F6BAB691D74887A66B80 Authority key identifier: 4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa Signing time: Thu 02 Apr 2026 14:23:49 +0000 ROA not before: Thu 02 Apr 2026 14:23:49 +0000 ROA not after: Wed 01 Jul 2026 14:23:49 +0000 asID: 396982 IP address blocks: 167.254.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:a8:f6:ba:b6:91:d7:48:87:a6:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f023ce5d-7af8-4345-a2d9-d22e77efa68d Validity Not Before: Apr 2 14:23:49 2026 GMT Not After : Jul 1 14:23:49 2026 GMT Subject: CN=a46cb423-4928-41b0-bd12-6a970b77edd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:17:bd:b3:1a:4a:10:d8:11:dc:93:b7:51: d4:f9:34:04:54:6b:47:da:02:2f:ea:cc:65:96:1d: f1:e4:31:14:71:c0:03:f1:f2:1a:e9:5f:b9:8a:e0: 43:20:b0:66:f0:d6:ed:7a:83:6d:48:22:02:72:48: dd:0e:c7:13:1c:9e:9d:12:ce:d9:c1:a4:43:1e:b8: ba:cb:53:ef:2c:8c:da:ba:c9:bc:b9:30:75:fb:30: 73:eb:46:be:3d:25:de:a7:6a:40:48:c0:34:79:02: ae:0f:d3:88:55:24:09:be:09:58:1f:41:55:6e:d6: 01:96:cb:5e:75:ef:f5:42:71:d3:a7:46:ec:22:27: 6d:cf:02:5c:7a:25:19:ae:a5:e7:99:b8:f7:0a:67: 76:c8:55:bf:24:89:88:82:75:fd:67:ea:ab:65:40: 85:a3:02:df:78:1a:63:b9:60:83:d7:e9:ec:ff:06: 49:fe:3b:05:4f:1e:08:c5:ec:03:a9:55:ae:c8:c0: 5d:c4:05:43:fd:f1:ab:7d:50:d1:e7:fd:72:3f:3e: 97:f6:98:5d:82:20:e2:e3:fb:66:4f:9f:5d:2f:9e: 99:33:b8:5b:14:7b:49:e0:45:1a:14:84:b9:12:fc: e0:15:76:65:bf:85:57:53:db:d6:2f:8e:3a:29:21: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3F:D1:BF:28:81:B6:64:4F:52:81:AA:C6:80:2A:20:B4:8B:54:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/fd14e445-969e-3398-beb5-fd5d3cad75e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d/f023ce5d-7af8-4345-a2d9-d22e77efa68d.crl X509v3 Authority Key Identifier: keyid:4F:82:EE:E2:41:F4:98:B6:19:53:0F:BE:B2:00:7B:D1:9D:E6:E5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f023ce5d-7af8-4345-a2d9-d22e77efa68d.cer sbgp-ipAddrBlock: critical IPv4: 167.254.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4e:20:63:fd:4f:a6:4c:64:1f:be:89:40:c0:48:60:e6:15: 92:16:79:da:b1:ae:f1:94:13:ae:1a:40:e5:c3:81:2f:5c:1c: 8f:2b:01:26:ef:85:1c:b1:b8:61:5d:37:de:55:9f:65:17:44: c3:d1:09:5e:42:b4:25:71:c1:12:ac:90:f6:41:27:e5:d6:c3: 27:ab:dc:bd:5a:63:00:73:af:60:0a:f9:da:52:43:6d:6d:e5: 2d:c7:7a:6c:c3:e7:13:70:67:b1:2a:7b:68:d6:62:21:1d:3b: 3f:41:50:4c:dd:f9:12:a7:b8:ca:1d:6b:b6:5c:6f:be:a2:c4: b4:f2:3a:ad:51:19:93:9e:f1:ac:b6:0a:c8:d6:4a:12:b5:bf: b4:bd:07:b1:3c:6d:87:0e:54:f6:eb:3d:70:06:a5:5d:7d:61: 39:03:f3:56:54:53:1f:c5:da:77:87:7a:1a:45:f6:0a:99:0c: d6:5d:fb:43:ad:15:ed:1c:1f:da:a0:20:b9:84:8b:54:8a:a3: e4:d6:51:8e:a2:13:f4:68:ff:b4:c3:a0:91:76:f3:36:dd:f0: 16:eb:dc:35:66:6b:67:f2:50:4e:03:5f:b3:ab:1e:73:e3:6f: 5a:96:5b:a0:53:9e:db:3d:47:d9:75:e2:89:b3:f0:99:93:35: d1:8d:fe:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fqPa6tpHXSIema4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAyM2NlNWQtN2FmOC00MzQ1LWEyZDktZDIyZTc3ZWZh NjhkMB4XDTI2MDQwMjE0MjM0OVoXDTI2MDcwMTE0MjM0OVowLzEtMCsGA1UEAxMk YTQ2Y2I0MjMtNDkyOC00MWIwLWJkMTItNmE5NzBiNzdlZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSEXvbMaShDYEdyTt1HU+TQEVGtH2gIv6sxl lh3x5DEUccAD8fIa6V+5iuBDILBm8NbteoNtSCICckjdDscTHJ6dEs7ZwaRDHri6 y1PvLIzausm8uTB1+zBz60a+PSXep2pASMA0eQKuD9OIVSQJvglYH0FVbtYBlste de/1QnHTp0bsIidtzwJceiUZrqXnmbj3Cmd2yFW/JImIgnX9Z+qrZUCFowLfeBpj uWCD1+ns/wZJ/jsFTx4IxewDqVWuyMBdxAVD/fGrfVDR5/1yPz6X9phdgiDi4/tm T59dL56ZM7hbFHtJ4EUaFIS5EvzgFXZlv4VXU9vWL446KSE8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw/0b8ogbZkT1KBqsaAKiC0i1TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMDIz Y2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJlNzdlZmE2OGQvZmQxNGU0NDUtOTY5ZS0z Mzk4LWJlYjUtZmQ1ZDNjYWQ3NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjAyM2NlNWQtN2FmOC00MzQ1LWEy ZDktZDIyZTc3ZWZhNjhkL2YwMjNjZTVkLTdhZjgtNDM0NS1hMmQ5LWQyMmU3N2Vm YTY4ZC5jcmwwHwYDVR0jBBgwFoAUT4Lu4kH0mLYZUw++sgB70Z3m5YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMDIzY2U1ZC03YWY4LTQzNDUtYTJkOS1kMjJl NzdlZmE2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/6yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFOIGP9T6ZMZB++iUDASGDmFZIWedqxrvGUE64aQOXDgS9cHI8rASbv hRyxuGFdN95Vn2UXRMPRCV5CtCVxwRKskPZBJ+XWwyer3L1aYwBzr2AK+dpSQ21t 5S3HemzD5xNwZ7Eqe2jWYiEdOz9BUEzd+RKnuModa7Zcb76ixLTyOq1RGZOe8ay2 CsjWShK1v7S9B7E8bYcOVPbrPXAGpV19YTkD81ZUUx/F2neHehpF9gqZDNZd+0Ot Fe0cH9qgILmEi1SKo+TWUY6iE/Ro/7TDoJF28zbd8Bbr3DVma2fyUE4DX7OrHnPj b1qWW6BTnts9R9l14omz8JmTNdGN/o8= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:20 2026 by rpki-client