$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa File: 8810de1f-a392-3d60-8edb-e6eed27b2547.roa (raw, json) Hash identifier: nIIEVkZJsA5LK0NYFvnQOGKb67mhzMkKcuvikUaVtvo= Subject key identifier: AC:E8:9D:53:30:E6:70:D2:6C:3E:E2:89:4F:1C:90:D2:53:CA:BB:03 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584BBA104CB32B81E9BCE8CC6D88 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 398343 IP address blocks: 167.253.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4c:b3:2b:81:e9:bc:e8:cc:6d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=d985f74b-7f18-4b67-beaf-1a8bf1a1c787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:6a:eb:00:ef:58:39:3f:8b:e7:76:09:61: 63:1b:7c:42:b9:93:d9:7f:d6:61:ab:0c:b7:e3:92: 53:45:25:c6:1e:04:74:ad:47:80:7e:b5:d3:40:dd: aa:9e:93:7f:93:9e:8b:b1:2f:81:87:91:4c:4e:67: 59:e4:3a:67:4b:56:bf:15:72:19:6e:9b:77:b8:a4: c9:df:13:33:75:bd:a8:1d:41:cc:a0:db:56:45:a7: 7c:34:0a:dc:b4:c7:79:74:68:41:4d:76:01:0c:3f: fb:e9:03:4e:c6:9b:0b:dd:69:b4:76:64:5a:0f:c1: d5:ca:f3:b4:1c:fa:71:c0:7d:95:75:7d:93:b9:03: 2c:f7:e7:f8:e9:2b:7c:19:ee:7e:98:00:e1:50:25: 69:71:eb:4f:9a:30:4c:b3:b6:e6:21:6e:80:e4:49: c5:3d:0b:0d:2b:ba:e9:38:b0:23:dc:82:46:3a:af: 73:e6:5d:86:41:52:43:b1:b8:3e:c6:39:09:59:00: 87:bc:4a:eb:09:24:67:20:e9:83:82:04:5e:3d:9c: c7:af:65:18:48:d7:44:fb:41:bc:5f:8c:ee:94:83: db:e1:b5:d6:da:33:45:27:4f:8c:cc:cb:d3:7f:30: ad:6f:79:ce:61:84:fe:a4:4b:8e:15:6e:e6:94:1f: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:9D:53:30:E6:70:D2:6C:3E:E2:89:4F:1C:90:D2:53:CA:BB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/8810de1f-a392-3d60-8edb-e6eed27b2547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5b:93:f2:b3:dd:e2:f7:53:9b:0d:3e:cc:a4:93:3a:c4:4d: b4:33:56:a7:59:71:05:e0:02:3c:a8:0c:94:62:d1:58:df:55: 64:5a:fd:62:5b:9f:0e:a4:2e:20:0c:dd:6f:11:14:52:ad:5d: af:91:4f:19:04:4d:8b:0d:a4:53:02:99:fa:d6:fc:7d:cf:4a: ae:99:03:23:5f:db:ae:25:2b:c5:36:e4:1c:bb:a9:14:7c:11: 15:f9:7d:3f:a7:1b:ec:d4:4d:7c:d5:f2:9a:58:2c:0e:93:93: d2:06:6a:5c:50:b9:8a:1b:94:cf:fd:dd:45:e7:14:46:0b:7e: ac:1e:1a:1d:02:2a:33:75:65:f3:6b:d2:54:ac:80:6d:50:9f: bb:d4:ce:c8:07:f0:4b:77:0e:23:72:4b:0a:25:05:2b:84:db: a3:77:76:1a:f6:a6:78:69:ae:2a:93:56:5d:fc:26:26:6b:d1: e9:7d:c0:91:a5:6f:ac:8b:f6:41:ba:16:21:93:89:f4:f8:65: ea:ee:93:ba:c1:7b:74:4e:b7:64:18:d3:cb:0c:7f:b1:f3:97: 59:18:32:3f:c2:d2:38:69:b3:3b:e8:e7:af:ac:d5:c6:6e:b4: fc:42:f9:e9:c2:42:b9:42:54:66:cd:08:e7:d8:3f:0d:37:a4: d3:8d:21:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEyzK4HpvOjMbYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDk4NWY3NGItN2YxOC00YjY3LWJlYWYtMWE4YmYxYTFjNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPBq6wDvWDk/i+d2CWFjG3xCuZPZf9Zhqwy3 45JTRSXGHgR0rUeAfrXTQN2qnpN/k56LsS+Bh5FMTmdZ5DpnS1a/FXIZbpt3uKTJ 3xMzdb2oHUHMoNtWRad8NArctMd5dGhBTXYBDD/76QNOxpsL3Wm0dmRaD8HVyvO0 HPpxwH2VdX2TuQMs9+f46St8Ge5+mADhUCVpcetPmjBMs7bmIW6A5EnFPQsNK7rp OLAj3IJGOq9z5l2GQVJDsbg+xjkJWQCHvErrCSRnIOmDggRePZzHr2UYSNdE+0G8 X4zulIPb4bXW2jNFJ0+MzMvTfzCtb3nOYYT+pEuOFW7mlB/mQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzonVMw5nDSbD7iiU8ckNJTyrsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvODgxMGRlMWYtYTM5Mi0z ZDYwLThlZGItZTZlZWQyN2IyNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZbk/Kz3eL3U5sNPsykkzrETbQzVqdZcQXgAjyoDJRi0VjfVWRa/WJb nw6kLiAM3W8RFFKtXa+RTxkETYsNpFMCmfrW/H3PSq6ZAyNf264lK8U25By7qRR8 ERX5fT+nG+zUTXzV8ppYLA6Tk9IGalxQuYoblM/93UXnFEYLfqweGh0CKjN1ZfNr 0lSsgG1Qn7vUzsgH8Et3DiNySwolBSuE26N3dhr2pnhpriqTVl38JiZr0el9wJGl b6yL9kG6FiGTifT4Zeruk7rBe3ROt2QY08sMf7Hzl1kYMj/C0jhpszvo56+s1cZu tPxC+enCQrlCVGbNCOfYPw03pNONISY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:31 2025 by rpki-client