$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: Lx7mOCq0oDctzIeO0PuO9v0SDvEE7fSm5K1YRAwWBMA= Subject key identifier: F9:8C:21:D9:21:21:13:44:6E:56:66:C0:C3:76:9A:14:98:30:EA:22 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F4328584E0C1EDD57A5AD0C2ADBF1DEA0 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:dd:57:a5:ad:0c:2a:db:f1:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=fde6dc2d-e2b2-443d-8e4e-ab0d15b2460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:8f:2d:fd:e9:59:2a:dd:a1:48:9e:5a:cd: 6e:f8:8e:ca:bc:5f:36:e7:be:58:d7:09:d9:58:1e: ad:31:9f:be:98:6a:71:bd:db:aa:01:e0:da:88:2b: 45:5a:72:41:77:ba:11:ed:1b:7b:8a:b6:06:f3:af: 28:94:f0:a4:9e:82:e0:a4:97:61:72:4c:98:8b:c9: de:64:38:1c:80:23:d4:9d:5f:1d:68:7f:95:2c:04: b1:08:5f:d1:1a:8d:dd:a3:af:af:a6:e8:f0:e7:34: d0:df:4e:99:32:84:fd:25:8a:41:f6:bb:de:ef:cd: 26:68:04:d3:36:e2:d4:b7:7b:b8:39:27:be:60:d4: 0c:24:8b:9c:a5:77:a7:a5:1c:5a:21:40:62:c0:74: ca:f1:a5:a2:7f:d1:2b:86:af:16:44:23:81:f8:33: c8:b7:d1:66:fb:e6:b0:88:61:9d:f3:82:98:b9:88: d0:e2:d5:33:f7:f6:59:d2:bf:96:c1:d8:e1:f1:c5: 9e:e8:51:47:14:2a:5d:ad:28:4f:b7:e3:27:af:11: 1c:42:21:e0:5e:07:62:93:f2:7f:2e:38:01:c8:f4: 44:0c:d8:0a:2b:ac:2d:4c:82:77:5c:ca:d5:1d:fc: c0:60:a0:84:52:b3:74:0f:41:35:18:6d:e8:a7:fb: 02:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:21:D9:21:21:13:44:6E:56:66:C0:C3:76:9A:14:98:30:EA:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f5:1d:21:d2:59:46:8d:36:b8:d2:a3:fe:05:d2:c0:60:5e: 6f:c8:eb:01:58:e6:32:a6:81:b4:10:0d:72:fd:da:41:f5:5d: dd:fb:66:97:c4:8f:61:48:a8:e3:22:d5:24:91:8d:a1:7d:e7: 06:fe:96:ed:1f:fd:e7:12:63:89:05:9a:2c:a3:cc:71:78:91: 16:6d:c7:59:4f:8b:fc:3d:80:c0:13:72:dc:f5:6a:c1:da:67: d3:1f:89:57:db:6d:8c:d1:7c:0a:ee:ac:7a:42:06:37:7d:dc: ce:f9:ab:61:e4:69:fb:16:50:1a:c6:49:30:11:18:d0:d3:46: 27:85:25:67:eb:00:5e:36:01:3f:4a:bf:ce:45:c8:fa:b8:cf: 20:2e:ab:99:3b:df:3c:42:44:92:55:71:d2:8e:ad:32:47:49: 23:0e:0b:c0:55:dd:c7:0e:ac:39:13:89:71:19:a1:7e:54:6c: 3c:40:90:4b:65:1c:8a:aa:70:e9:f0:c0:b0:3a:83:90:26:43: 37:e7:2c:17:0f:fc:7f:42:2a:38:2f:e0:91:d9:63:ba:cf:cd: ac:73:f4:57:f4:b5:12:bb:f8:96:16:3a:3e:7d:0a:97:cc:82: f1:27:5d:7d:eb:14:cb:06:ca:f2:64:00:71:51:cd:66:03:87: 73:82:f1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHt1Xpa0MKtvx3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZmRlNmRjMmQtZTJiMi00NDNkLThlNGUtYWIwZDE1YjI0NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC6PLf3pWSrdoUieWs1u+I7KvF82575Y1wnZ WB6tMZ++mGpxvduqAeDaiCtFWnJBd7oR7Rt7irYG868olPCknoLgpJdhckyYi8ne ZDgcgCPUnV8daH+VLASxCF/RGo3do6+vpujw5zTQ306ZMoT9JYpB9rve780maATT NuLUt3u4OSe+YNQMJIucpXenpRxaIUBiwHTK8aWif9Erhq8WRCOB+DPIt9Fm++aw iGGd84KYuYjQ4tUz9/ZZ0r+Wwdjh8cWe6FFHFCpdrShPt+MnrxEcQiHgXgdik/J/ LjgByPREDNgKK6wtTIJ3XMrVHfzAYKCEUrN0D0E1GG3op/sC9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmMIdkhIRNEblZmwMN2mhSYMOoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/1HSHSWUaNNrjSo/4F0sBgXm/I6wFY5jKmgbQQDXL92kH1Xd37ZpfE j2FIqOMi1SSRjaF95wb+lu0f/ecSY4kFmiyjzHF4kRZtx1lPi/w9gMATctz1asHa Z9MfiVfbbYzRfArurHpCBjd93M75q2HkafsWUBrGSTARGNDTRieFJWfrAF42AT9K v85FyPq4zyAuq5k73zxCRJJVcdKOrTJHSSMOC8BV3ccOrDkTiXEZoX5UbDxAkEtl HIqqcOnwwLA6g5AmQzfnLBcP/H9CKjgv4JHZY7rPzaxz9Ff0tRK7+JYWOj59CpfM gvEnXX3rFMsGyvJkAHFRzWYDh3OC8Vw= -----END CERTIFICATE-----Generated at Wed Jun 3 19:47:59 2026 by rpki-client