$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa File: 366115b5-c36e-3002-98be-5414f7a238fe.roa (raw, json) Hash identifier: Yyxi0tvXnZ6CkAhh/2ioVnWXAX7Px+V654v3jxyoO1Q= Subject key identifier: BF:D6:CD:6C:AC:8A:E2:EF:B2:EE:FE:45:89:93:20:9C:42:74:4F:C7 Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F4328584BB2F7AED4EC1FD6A5279CB8C0 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ae:d4:ec:1f:d6:a5:27:9c:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=8e8b5726-ba5f-43cc-8bd6-93d5d2f694d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:db:cd:03:ef:a4:94:df:a3:00:83:fc:9f: 69:13:ff:c1:c7:c8:9f:c7:e9:26:3a:78:7b:26:70: a0:c5:2e:98:7c:48:ea:e6:a2:f8:81:ab:0a:4b:70: 08:95:c2:76:97:96:e9:70:bb:f2:3d:ca:b9:16:54: 6d:b2:f7:0d:27:a9:35:75:71:74:2e:fa:9f:ae:32: c7:79:4c:e2:46:d0:17:17:c5:f0:92:4e:2b:82:97: 37:30:8e:f4:d8:74:1f:8d:c9:3b:f5:4b:35:ba:e4: ba:2b:10:82:b9:a4:d1:bb:32:5b:aa:8e:e9:5e:75: 11:33:f0:c7:60:5d:d0:33:f4:02:77:99:c2:33:c1: f9:5f:62:50:9c:45:23:83:9c:02:2b:ab:07:b8:e4: 00:35:83:22:b3:fc:dc:be:2b:f5:f1:94:a5:76:92: 30:d2:f0:83:19:97:42:7f:b8:dc:1f:46:0b:f8:bb: fa:2c:8c:d6:ab:64:b2:d2:b2:22:a6:a9:b0:b8:e3: 28:43:f6:04:ed:eb:91:42:1c:df:b2:58:9f:93:1f: a6:c5:2e:99:70:50:4f:58:88:6a:97:8d:e2:70:32: 58:69:0e:66:2c:ee:a2:1a:a8:0a:a0:cb:0e:69:b7: 92:d1:9b:32:78:cd:b2:38:a1:89:ae:b8:eb:d7:e8: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:CD:6C:AC:8A:E2:EF:B2:EE:FE:45:89:93:20:9C:42:74:4F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:cb:8a:90:dd:e5:bf:99:a3:b7:58:79:b6:63:91:a8:df:af: bb:ca:3d:fc:c2:99:30:1a:a7:15:99:03:ed:9a:ac:b0:ac:9d: 49:e1:bb:0e:2c:86:fc:9a:72:01:41:18:06:c5:81:07:26:59: 8c:44:90:0f:58:06:9d:5f:38:ea:dd:17:88:78:be:fb:8b:47: 8d:9f:c2:55:cc:f8:58:0a:60:d1:44:31:f9:8c:24:fd:ec:c5: f4:b0:93:ba:d3:c3:70:1c:b5:01:4c:21:37:08:0b:a7:92:a1: 53:a3:e8:ea:b4:86:08:fa:bd:55:ed:17:1e:bb:b3:a5:ee:c5: 76:73:4f:dc:92:ea:01:19:50:34:16:9b:87:91:a3:40:d2:4e: 41:13:73:ac:5d:76:28:0a:a5:45:07:bd:1a:8d:fd:29:4d:4a: 82:61:dd:29:fe:66:de:7f:0d:a1:b0:e1:cf:f5:f1:6d:10:7f: 56:9e:36:8b:3e:5a:51:f8:bf:48:b7:4f:e1:51:c2:73:6f:be: 7e:93:e1:80:02:51:ba:d7:a9:8e:92:2b:76:96:21:82:50:cc: ec:a8:1e:6c:f6:42:53:c9:0f:2f:ea:d1:3a:dc:ae:5c:b6:bc: 39:9d:10:06:ca:12:44:56:13:f7:8a:ea:35:e0:19:b4:50:db: c7:30:69:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy967U7B/WpSecuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OGU4YjU3MjYtYmE1Zi00M2NjLThiZDYtOTNkNWQyZjY5NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7bzQPvpJTfowCD/J9pE//Bx8ifx+kmOnh7 JnCgxS6YfEjq5qL4gasKS3AIlcJ2l5bpcLvyPcq5FlRtsvcNJ6k1dXF0LvqfrjLH eUziRtAXF8Xwkk4rgpc3MI702HQfjck79Us1uuS6KxCCuaTRuzJbqo7pXnURM/DH YF3QM/QCd5nCM8H5X2JQnEUjg5wCK6sHuOQANYMis/zcviv18ZSldpIw0vCDGZdC f7jcH0YL+Lv6LIzWq2Sy0rIipqmwuOMoQ/YE7euRQhzfslifkx+mxS6ZcFBPWIhq l43icDJYaQ5mLO6iGqgKoMsOabeS0ZsyeM2yOKGJrrjr1+gz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/WzWysiuLvsu7+RYmTIJxCdE/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvMzY2MTE1YjUtYzM2ZS0z MDAyLTk4YmUtNTQxNGY3YTIzOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzLipDd5b+Zo7dYebZjkajfr7vKPfzCmTAapxWZA+2arLCsnUnhuw4s hvyacgFBGAbFgQcmWYxEkA9YBp1fOOrdF4h4vvuLR42fwlXM+FgKYNFEMfmMJP3s xfSwk7rTw3ActQFMITcIC6eSoVOj6Oq0hgj6vVXtFx67s6XuxXZzT9yS6gEZUDQW m4eRo0DSTkETc6xddigKpUUHvRqN/SlNSoJh3Sn+Zt5/DaGw4c/18W0Qf1aeNos+ WlH4v0i3T+FRwnNvvn6T4YACUbrXqY6SK3aWIYJQzOyoHmz2QlPJDy/q0Trcrly2 vDmdEAbKEkRWE/eK6jXgGbRQ28cwadw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:03:11 2025 by rpki-client