$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa File: 7f3b3a74-84e9-3559-9aff-71be26cc7983.roa (raw, json) Hash identifier: psFfV6cAnl7oSkGdkPoGBCKgxqDxa9LTcoutmOT1+1w= Subject key identifier: 3B:5E:71:9E:00:BC:06:09:4E:7A:C0:DD:6C:3B:20:EE:24:78:A1:21 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584D3F64CF79C418765F19752E00 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 62943 IP address blocks: 67.221.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:cf:79:c4:18:76:5f:19:75:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=d66239d4-2a29-48d3-8eb1-8366f760d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:3f:59:e8:d2:d8:75:a6:54:f7:9b:aa:07: 02:0b:fe:ba:3c:e9:02:45:8c:0a:95:ce:24:58:d1: c8:22:0e:de:d7:d5:28:a1:e9:24:48:49:fb:f1:b1: 8e:5f:fa:44:a4:bf:58:3b:f3:11:49:3e:64:35:8d: 6e:e4:f3:ed:e6:af:6d:b9:78:94:96:2f:da:49:9c: 78:3a:7c:92:87:cf:cf:37:bb:86:9f:4a:d9:f9:e8: 07:bf:37:56:57:1b:03:ab:e7:0f:17:a5:73:99:5c: 31:be:f2:fa:6b:23:8e:a7:a6:9a:93:60:7d:f8:28: 1b:f3:ff:e0:bd:3e:dc:3c:09:bd:6b:f1:dc:04:b4: 92:38:54:ca:2a:9d:37:60:3e:d4:3f:a5:de:ad:c4: 52:e1:e8:86:a1:e9:43:34:bc:08:35:77:15:6e:e5: e2:d9:a6:3a:74:ec:06:6b:94:cd:97:52:d5:87:04: 1c:d6:35:cb:f0:66:2d:29:50:19:83:9c:6d:9f:6f: f5:73:35:12:4d:e4:04:ee:c1:9e:09:4b:ae:9b:ae: 54:66:72:88:c1:c3:92:fd:b4:4a:f1:66:f3:e5:97: a4:74:48:b7:bf:41:3f:af:25:58:9b:c7:e1:29:70: 0c:d0:09:63:e6:0b:57:df:68:6b:02:46:77:ab:ee: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5E:71:9E:00:BC:06:09:4E:7A:C0:DD:6C:3B:20:EE:24:78:A1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/7f3b3a74-84e9-3559-9aff-71be26cc7983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:91:01:19:9f:1b:9e:ea:23:61:70:75:bd:f1:98:e4:e3:c7: c2:3c:98:a9:e5:1b:0a:a3:4a:c8:c6:8b:e6:32:77:68:4a:55: 74:e6:d2:f4:d3:8b:a5:d6:3d:a9:c6:6a:6d:a2:96:36:14:e4: 5a:7d:8f:31:e5:fb:87:63:8d:5b:99:b9:f9:36:e9:40:de:bd: a4:18:61:15:dc:c2:59:89:c7:de:77:c7:f4:0b:52:3d:2f:6f: d6:cb:ca:8d:f2:d2:a8:e7:dd:2c:5d:44:1b:25:23:5c:35:5a: 3d:c2:d8:7c:97:06:d1:ab:7e:dd:97:54:c9:bc:2b:6f:4b:b3: 87:91:05:43:f5:a1:bd:40:ba:f6:dd:85:83:e1:55:d5:e7:75: eb:94:c5:30:85:6b:72:1a:76:79:23:8c:ac:f7:8d:ea:32:98: 63:45:83:fb:14:ef:0a:da:b5:2b:b2:5a:c2:7c:21:e4:cd:bb: c6:1b:42:8c:55:5a:73:5c:88:33:e4:0c:95:3b:15:c1:8e:c2: 54:36:0d:6a:d8:dd:76:f8:2d:e8:1d:aa:9b:e0:a7:b4:4d:f5: ec:32:b0:b1:e3:e3:4d:fe:23:e6:f6:3d:47:09:09:60:a2:73: 90:3f:ad:95:08:98:a2:be:b3:af:37:2c:8c:7a:0d:e9:cd:1d: dc:3c:2b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM95xBh2Xxl1LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDY2MjM5ZDQtMmEyOS00OGQzLThlYjEtODM2NmY3NjBkNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFs/WejS2HWmVPebqgcCC/66POkCRYwKlc4k WNHIIg7e19UooekkSEn78bGOX/pEpL9YO/MRST5kNY1u5PPt5q9tuXiUli/aSZx4 OnySh8/PN7uGn0rZ+egHvzdWVxsDq+cPF6VzmVwxvvL6ayOOp6aak2B9+Cgb8//g vT7cPAm9a/HcBLSSOFTKKp03YD7UP6XercRS4eiGoelDNLwINXcVbuXi2aY6dOwG a5TNl1LVhwQc1jXL8GYtKVAZg5xtn2/1czUSTeQE7sGeCUuum65UZnKIwcOS/bRK 8Wbz5ZekdEi3v0E/ryVYm8fhKXAM0Alj5gtX32hrAkZ3q+7gmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtecZ4AvAYJTnrA3Ww7IO4keKEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvN2YzYjNhNzQtODRlOS0z NTU5LTlhZmYtNzFiZTI2Y2M3OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ93bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+RARmfG57qI2Fwdb3xmOTjx8I8mKnlGwqjSsjGi+Yyd2hKVXTm0vTT i6XWPanGam2iljYU5Fp9jzHl+4djjVuZufk26UDevaQYYRXcwlmJx953x/QLUj0v b9bLyo3y0qjn3SxdRBslI1w1Wj3C2HyXBtGrft2XVMm8K29Ls4eRBUP1ob1Auvbd hYPhVdXndeuUxTCFa3IadnkjjKz3jeoymGNFg/sU7wratSuyWsJ8IeTNu8YbQoxV WnNciDPkDJU7FcGOwlQ2DWrY3Xb4Legdqpvgp7RN9ewysLHj403+I+b2PUcJCWCi c5A/rZUImKK+s683LIx6DenNHdw8KyE= -----END CERTIFICATE-----Generated at Fri Mar 27 08:48:41 2026 by rpki-client