$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/f9df92d2-48ff-3c2c-be10-872783452422.roa File: f9df92d2-48ff-3c2c-be10-872783452422.roa (raw, json) Hash identifier: b1Ndz90HQkv7Ab60Aea+ywIW0QkrC4aNcZzc4fIclxo= Subject key identifier: D0:72:34:07:21:5D:1F:3A:1D:2F:FB:EA:98:E9:A7:5A:04:A3:98:35 Certificate issuer: /CN=71e39e17-6ca1-4b9f-86ab-2db7eb8384e8 Certificate serial: 010D0C9F4328584EA795C469C7417C04F3D49740 Authority key identifier: B6:C3:55:ED:41:0C:E9:C0:7E:52:F2:31:C5:08:22:28:56:A8:E2:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/f9df92d2-48ff-3c2c-be10-872783452422.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33199 IP address blocks: 167.253.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:c4:69:c7:41:7c:04:f3:d4:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e39e17-6ca1-4b9f-86ab-2db7eb8384e8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=03b7a25d-28aa-41e6-9254-9df75620951b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2e:9b:fa:4d:ab:84:c7:c1:56:33:4e:ba:e8: ef:b7:8f:bc:0b:34:9d:02:06:e2:ee:32:76:69:fe: 91:50:a8:17:a0:d1:6a:5c:62:83:41:f1:bd:6a:fa: dc:6a:4e:65:80:f5:93:3b:27:1e:1b:b2:26:8c:33: 02:e9:51:7f:24:14:b5:99:64:a4:6a:0c:11:c0:2f: b1:bd:62:07:11:1a:03:11:96:22:35:b9:57:0d:79: e8:93:5f:c3:7d:d6:ee:a6:53:a9:59:a2:f2:3f:a8: 2a:cb:d8:63:8d:a0:c0:bd:4b:9f:3d:26:e1:c1:19: b9:86:7d:e0:94:b1:61:7b:ab:5e:74:af:0d:6c:4c: 16:17:67:a2:4d:bc:0d:b2:3c:7c:67:06:b4:ad:47: a8:da:d7:63:c9:60:48:ed:59:f3:6b:21:4e:04:df: de:44:de:78:94:10:82:3b:9e:0b:b9:e4:e1:46:ca: a5:4b:bc:83:19:e9:61:98:d3:31:88:ca:b0:57:cd: 87:81:3a:5f:85:67:3e:53:25:0e:44:08:4a:85:1d: 12:19:bc:40:ef:84:13:70:e9:6b:bf:dc:d7:a4:0b: e6:60:81:6a:0a:6c:d1:9c:d8:0c:ee:38:60:67:b8: c3:d5:3a:ef:4e:05:f1:5e:f9:42:c2:ba:e3:71:41: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:34:07:21:5D:1F:3A:1D:2F:FB:EA:98:E9:A7:5A:04:A3:98:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/f9df92d2-48ff-3c2c-be10-872783452422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.crl X509v3 Authority Key Identifier: keyid:B6:C3:55:ED:41:0C:E9:C0:7E:52:F2:31:C5:08:22:28:56:A8:E2:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/71e39e17-6ca1-4b9f-86ab-2db7eb8384e8.cer sbgp-ipAddrBlock: critical IPv4: 167.253.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4a:24:49:14:9e:a0:fd:db:22:11:c6:95:7b:0d:71:83:f0: 51:27:fe:c9:dc:f3:4f:08:31:a7:24:08:8b:d5:ac:dc:77:3b: 12:5a:84:57:53:a4:42:6c:48:e6:5c:59:bb:e4:7c:45:1b:e6: 3e:71:6f:bd:38:35:4e:cc:5a:3a:fa:0b:29:c7:fc:7e:ac:46: c5:fa:0f:a1:7f:ec:39:a9:af:e9:ab:62:b4:34:79:21:6c:33: 71:9a:c5:bb:c5:1e:37:7f:66:e0:b2:d5:0e:db:f5:6e:2e:4f: 31:4d:eb:d2:b9:d9:01:9d:30:54:3a:a8:15:0c:4f:76:8b:82: 96:ec:a0:2f:ee:f4:d8:7d:e9:9b:51:0d:89:1e:ac:80:99:bd: 2b:cc:8c:b9:ec:d4:c4:8c:89:09:a7:5c:84:08:50:fd:21:33: eb:3b:a4:6b:89:97:fe:74:3a:a2:07:39:16:6b:d0:31:79:e3: 1f:bd:47:62:7d:31:1e:d1:d9:63:d3:f8:e1:86:5d:75:26:20: 72:69:fd:ec:c2:fe:1f:31:4f:69:18:e3:f4:68:4b:db:c1:5a: 80:33:d6:43:fa:89:84:a5:08:21:e0:a9:d1:43:c2:c5:df:d2: 6e:60:e3:cc:f7:57:da:8e:a4:29:23:9d:ea:34:82:90:04:4c: 39:62:8c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlcRpx0F8BPPUl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlMzllMTctNmNhMS00YjlmLTg2YWItMmRiN2ViODM4 NGU4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDNiN2EyNWQtMjhhYS00MWU2LTkyNTQtOWRmNzU2MjA5NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y6b+k2rhMfBVjNOuujvt4+8CzSdAgbi7jJ2 af6RUKgXoNFqXGKDQfG9avrcak5lgPWTOyceG7ImjDMC6VF/JBS1mWSkagwRwC+x vWIHERoDEZYiNblXDXnok1/DfdbuplOpWaLyP6gqy9hjjaDAvUufPSbhwRm5hn3g lLFhe6tedK8NbEwWF2eiTbwNsjx8Zwa0rUeo2tdjyWBI7VnzayFOBN/eRN54lBCC O54LueThRsqlS7yDGelhmNMxiMqwV82HgTpfhWc+UyUORAhKhR0SGbxA74QTcOlr v9zXpAvmYIFqCmzRnNgM7jhgZ7jD1TrvTgXxXvlCwrrjcUGtOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNByNAchXR86HS/76pjpp1oEo5g1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MWUz OWUxNy02Y2ExLTRiOWYtODZhYi0yZGI3ZWI4Mzg0ZTgvZjlkZjkyZDItNDhmZi0z YzJjLWJlMTAtODcyNzgzNDUyNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzFlMzllMTctNmNhMS00YjlmLTg2 YWItMmRiN2ViODM4NGU4LzcxZTM5ZTE3LTZjYTEtNGI5Zi04NmFiLTJkYjdlYjgz ODRlOC5jcmwwHwYDVR0jBBgwFoAUtsNV7UEM6cB+UvIxxQgiKFao4lkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MWUzOWUxNy02Y2ExLTRiOWYtODZhYi0yZGI3 ZWI4Mzg0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpKJEkUnqD92yIRxpV7DXGD8FEn/snc808IMackCIvVrNx3OxJahFdT pEJsSOZcWbvkfEUb5j5xb704NU7MWjr6CynH/H6sRsX6D6F/7Dmpr+mrYrQ0eSFs M3GaxbvFHjd/ZuCy1Q7b9W4uTzFN69K52QGdMFQ6qBUMT3aLgpbsoC/u9Nh96ZtR DYkerICZvSvMjLns1MSMiQmnXIQIUP0hM+s7pGuJl/50OqIHORZr0DF54x+9R2J9 MR7R2WPT+OGGXXUmIHJp/ezC/h8xT2kY4/RoS9vBWoAz1kP6iYSlCCHgqdFDwsXf 0m5g48z3V9qOpCkjneo0gpAETDlijE4= -----END CERTIFICATE-----Generated at Wed Aug 26 04:55:45 2026 by rpki-client