$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa File: 2a1f5a03-eb95-3489-80d4-971a6ad53336.roa (raw, json) Hash identifier: UDvdyTC0kYsLeYld603hJPfDb0SdZaBgysu0JGN1QaE= Subject key identifier: 08:BE:C3:D7:8D:D0:35:C8:EB:05:84:66:67:C9:21:0A:95:BB:93:9D Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584EED523EBCB9EACD4511F31C00 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 46887 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3e:bc:b9:ea:cd:45:11:f3:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=690ebaa3-ae98-4e12-bdcc-227c4cd48780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:a4:5f:ef:26:3f:db:7a:fd:da:83:ca:e4: 6e:dc:e8:1e:78:68:9c:fa:68:ca:5d:67:3e:b8:8b: 77:4d:45:6b:58:bb:5f:12:13:40:de:f6:e9:16:3e: d3:e3:18:ba:5c:d4:b7:47:cb:cc:e2:06:bd:84:ed: 3f:55:83:b9:a8:c8:1a:2d:7e:62:91:cf:8c:5f:f1: c4:fb:ff:cb:3e:41:a1:3f:ad:09:29:92:70:7b:e2: 88:a9:a0:ee:29:58:d9:46:79:03:b4:1e:b5:2a:27: 63:15:96:8b:65:f2:63:4e:46:59:bb:f8:0d:3c:b1: e6:43:df:89:19:da:94:7b:fd:7a:71:dc:d4:8c:53: c3:20:5f:41:3e:8d:89:2f:ba:a4:c4:52:dc:dd:31: b2:9b:fd:d2:b6:02:26:e0:62:63:77:da:21:4a:46: e1:62:c7:b4:bb:42:22:c3:a3:cc:b6:9c:e3:7e:e1: 74:0a:9a:57:55:54:ce:ca:1a:b8:a7:59:21:20:69: 0d:a4:89:5b:b4:97:4d:4a:3b:6a:21:3d:8a:a0:87: 46:5e:77:23:c1:01:e7:d9:2f:05:f4:a0:64:3c:0e: fb:0f:25:25:c9:f5:ed:11:1a:85:71:fc:62:ab:e2: d7:dd:70:1c:a0:0d:2b:54:06:5f:c0:08:df:16:e3: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BE:C3:D7:8D:D0:35:C8:EB:05:84:66:67:C9:21:0A:95:BB:93:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:63:b8:c7:a7:0f:1a:35:71:2e:e1:69:a5:b4:ce:d2:b6:90: da:6e:19:ad:92:0a:33:af:e5:9b:0b:1e:6e:bc:fa:8d:b6:8a: 58:6d:e1:da:a6:c0:58:84:cc:ab:cb:9a:5b:bb:50:22:47:27: 8a:ae:9c:7d:61:42:a8:41:67:5f:ad:6e:c8:68:5d:c1:71:a4: 1c:0a:8d:7c:45:5c:d0:be:c5:a5:fd:17:21:fc:c1:66:e9:52: b3:f8:f1:c9:e4:2a:e3:95:49:f1:fb:1c:28:34:00:48:fe:43: df:d9:ba:85:db:f0:02:5c:ac:80:12:78:06:03:11:98:e3:8d: 33:08:d5:5f:8f:04:3c:f7:8f:83:3e:0d:05:b2:37:1a:5d:dd: d2:7d:1d:6e:f8:c3:69:4d:a0:f7:94:ec:e7:17:86:59:0a:47: 71:d6:03:66:f4:62:26:88:43:8c:fa:66:87:7f:c6:23:26:35: 71:2c:3c:77:d4:41:86:1a:46:1f:93:b9:df:01:33:20:28:6a: 16:fc:e0:f3:5b:67:07:79:a5:5b:0c:73:87:69:eb:92:23:fa: d0:ec:08:3b:ec:c5:d6:35:2f:c7:2e:5b:c5:e3:27:ee:89:57: 6d:2f:e6:32:2a:77:6a:50:25:12:67:c1:57:99:6f:63:c5:5c: 16:5c:fb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUj68uerNRRHzHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjkwZWJhYTMtYWU5OC00ZTEyLWJkY2MtMjI3YzRjZDQ4NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP2kX+8mP9t6/dqDyuRu3OgeeGic+mjKXWc+ uIt3TUVrWLtfEhNA3vbpFj7T4xi6XNS3R8vM4ga9hO0/VYO5qMgaLX5ikc+MX/HE +//LPkGhP60JKZJwe+KIqaDuKVjZRnkDtB61KidjFZaLZfJjTkZZu/gNPLHmQ9+J GdqUe/16cdzUjFPDIF9BPo2JL7qkxFLc3TGym/3StgIm4GJjd9ohSkbhYse0u0Ii w6PMtpzjfuF0CppXVVTOyhq4p1khIGkNpIlbtJdNSjtqIT2KoIdGXncjwQHn2S8F 9KBkPA77DyUlyfXtERqFcfxiq+LX3XAcoA0rVAZfwAjfFuP8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi+w9eN0DXI6wWEZmfJIQqVu5OdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvMmExZjVhMDMtZWI5NS0z NDg5LTgwZDQtOTcxYTZhZDUzMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZjuMenDxo1cS7haaW0ztK2kNpuGa2SCjOv5ZsLHm68+o22ilht4dqm wFiEzKvLmlu7UCJHJ4qunH1hQqhBZ1+tbshoXcFxpBwKjXxFXNC+xaX9FyH8wWbp UrP48cnkKuOVSfH7HCg0AEj+Q9/ZuoXb8AJcrIASeAYDEZjjjTMI1V+PBDz3j4M+ DQWyNxpd3dJ9HW74w2lNoPeU7OcXhlkKR3HWA2b0YiaIQ4z6Zod/xiMmNXEsPHfU QYYaRh+Tud8BMyAoahb84PNbZwd5pVsMc4dp65Ij+tDsCDvsxdY1L8cuW8XjJ+6J V20v5jIqd2pQJRJnwVeZb2PFXBZc+0I= -----END CERTIFICATE-----Generated at Fri Sep 11 05:23:29 2026 by rpki-client