$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json) Hash identifier: mrxKj2uRdqx6cFbKKjE9hEYOw0V7ig7TsVI37KwZMyM= Subject key identifier: 6F:6C:D0:2D:E3:A2:DC:19:F3:15:23:42:DA:46:39:ED:B7:37:CE:64 Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584BBFA5A9FEBCE5232384D5A880 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 59253 IP address blocks: 167.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a9:fe:bc:e5:23:23:84:d5:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=ebc84f0b-e8de-4a49-b6de-90b7c4f567fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:74:e4:b2:38:86:90:0c:2c:14:e4:b9:c8: 80:0b:09:6f:bb:66:22:7c:78:51:e1:a4:a8:0e:4c: 68:dd:85:ec:4c:a1:fd:f1:c8:b2:79:17:4a:3c:32: d0:75:5e:55:74:d8:44:c9:7d:0e:ec:98:91:fa:d1: fe:ad:bc:b1:0d:91:ff:f9:35:1b:aa:66:a9:7a:31: 2c:8c:f2:13:0f:db:64:01:d0:70:1a:3d:93:af:b0: a0:50:f9:cc:9b:b5:fb:0a:51:84:43:ee:4f:cc:46: 18:19:73:cc:75:21:41:55:cf:a1:c4:04:c6:80:2d: 24:f8:cc:3a:c3:25:af:02:2f:60:e1:c0:e4:7a:24: 2a:83:53:7e:39:ee:92:5d:23:9a:ab:5a:3b:38:67: a1:48:00:b5:ab:7f:d4:29:be:d8:5e:b5:f2:04:f0: 57:8a:b2:bd:17:c7:f3:eb:ba:e0:b0:9d:9d:eb:df: 2e:7f:82:ae:ec:b4:93:a6:f4:81:80:62:8b:7f:88: 7e:b6:e2:29:21:00:0b:cc:63:10:40:96:f5:dd:16: cf:86:85:9a:ba:43:5e:70:57:85:be:b6:02:a9:f6: 84:77:51:91:14:d9:54:39:28:46:d5:b7:37:90:47: 66:ac:df:41:b9:7e:eb:18:52:0f:5d:36:b8:fa:76: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:D0:2D:E3:A2:DC:19:F3:15:23:42:DA:46:39:ED:B7:37:CE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:da:6d:21:2a:b6:4e:ea:4f:f0:3d:00:94:ac:b9:4d:a1:4d: f3:3e:d5:fe:d9:55:5a:b6:c4:9e:a7:a8:2b:d4:98:26:25:81: 2e:73:65:5e:49:6b:06:28:70:28:31:fd:32:5f:c4:3c:57:fc: 12:67:4a:f4:37:bc:8d:c3:7c:6a:eb:34:b7:be:2e:2b:93:47: e3:64:2a:11:43:89:de:d1:9e:44:ee:1b:f2:23:10:f0:8b:d2: db:30:8b:1e:40:5e:08:15:25:f6:e0:f3:c6:a8:a2:db:9b:55: 11:4b:7b:44:21:26:8a:78:f8:5f:3d:a6:7d:cc:11:bc:42:f1: 6f:64:d9:ea:19:1a:14:45:f9:c0:c2:b6:c2:0a:18:3e:5e:3f: 45:57:5c:cf:bc:97:17:10:c8:e4:35:75:b1:99:e1:01:0a:89: 2f:df:de:21:17:66:8c:b0:c2:3c:eb:e6:63:ae:9a:3d:bb:e7: b4:8d:10:25:e6:3f:93:d3:c9:0c:60:9a:1e:ad:4a:f4:45:56: 0e:95:d4:49:2c:d2:1d:2e:64:dd:63:28:7f:b6:18:c2:52:4c: 0c:bf:de:20:68:ff:7f:c3:29:68:7b:cc:aa:35:a9:c2:24:bd: 2f:3d:82:01:0f:c3:73:34:07:9c:7e:d2:1c:70:48:e9:19:fd: 66:74:98:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pan+vOUjI4TVqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZWJjODRmMGItZThkZS00YTQ5LWI2ZGUtOTBiN2M0ZjU2N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjud05LI4hpAMLBTkuciACwlvu2YifHhR4aSo Dkxo3YXsTKH98ciyeRdKPDLQdV5VdNhEyX0O7JiR+tH+rbyxDZH/+TUbqmapejEs jPITD9tkAdBwGj2Tr7CgUPnMm7X7ClGEQ+5PzEYYGXPMdSFBVc+hxATGgC0k+Mw6 wyWvAi9g4cDkeiQqg1N+Oe6SXSOaq1o7OGehSAC1q3/UKb7YXrXyBPBXirK9F8fz 67rgsJ2d698uf4Ku7LSTpvSBgGKLf4h+tuIpIQALzGMQQJb13RbPhoWaukNecFeF vrYCqfaEd1GRFNlUOShG1bc3kEdmrN9BuX7rGFIPXTa4+nZfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9s0C3jotwZ8xUjQtpGOe23N85kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjabSEqtk7qT/A9AJSsuU2hTfM+1f7ZVVq2xJ6nqCvUmCYlgS5zZV5J awYocCgx/TJfxDxX/BJnSvQ3vI3DfGrrNLe+LiuTR+NkKhFDid7RnkTuG/IjEPCL 0tswix5AXggVJfbg88aootubVRFLe0QhJop4+F89pn3MEbxC8W9k2eoZGhRF+cDC tsIKGD5eP0VXXM+8lxcQyOQ1dbGZ4QEKiS/f3iEXZoywwjzr5mOumj2757SNECXm P5PTyQxgmh6tSvRFVg6V1Eks0h0uZN1jKH+2GMJSTAy/3iBo/3/DKWh7zKo1qcIk vS89ggEPw3M0B5x+0hxwSOkZ/WZ0mPI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:59 2025 by rpki-client