$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa File: 7531577c-052a-335e-b81a-b93ea9025e27.roa (raw, json) Hash identifier: 4LxN3+EcFqt/fGh7YP3gce0xu0wc7LG/GsqvhJ6Nfbs= Subject key identifier: 76:3B:66:BA:A6:EC:8C:98:13:CF:E4:C2:2F:35:1F:13:02:9E:8E:4A Certificate issuer: /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5 Certificate serial: 010D0C9F4328584BB02D193452DEF61AAAD665F4 Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 26548 IP address blocks: 167.253.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:19:34:52:de:f6:1a:aa:d6:65:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=d3b06839-ad31-4680-940d-38c742d6944c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:9f:f0:97:4b:4f:c9:2c:15:40:ec:ed:3a: 06:28:fe:c6:c5:ca:f7:75:bb:ed:08:b3:05:4d:b4: 27:5a:8e:61:8c:b3:cb:56:db:16:6e:40:47:f8:fb: be:21:53:e5:30:ef:09:04:83:c2:f1:cd:8f:2d:6e: f9:7d:b8:c0:b0:2b:e3:da:39:a8:14:f0:9c:a1:fa: 9f:6d:aa:56:3b:6d:ec:aa:05:68:ae:f0:de:f3:2a: ad:96:59:9f:fb:38:d3:95:1d:b6:69:82:07:cc:2a: e4:1a:91:60:7b:24:ce:93:6d:1a:72:fb:7e:8a:99: 47:e7:dc:5e:f0:fb:0d:0b:9c:c1:1a:63:f5:7c:dc: 0c:55:0a:54:bd:9f:15:61:6a:f5:67:91:99:cf:c4: c7:75:22:c8:37:5d:a0:06:56:a3:ea:3f:e5:1f:c5: a9:f6:59:a7:6a:0f:2c:ec:78:70:ab:53:09:59:b6: 9d:34:79:31:ed:f1:51:c8:0e:4d:7c:81:5a:3b:2a: ac:13:ab:50:bc:1a:03:99:e0:01:f7:97:9b:8c:1f: 97:2b:24:09:a6:fd:7c:78:af:a9:da:d3:5e:78:ac: 2d:4f:3f:04:e3:26:a4:59:d8:df:aa:44:57:cb:61: 18:77:96:ab:66:9a:8c:ef:d0:d1:33:41:4f:75:ae: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3B:66:BA:A6:EC:8C:98:13:CF:E4:C2:2F:35:1F:13:02:9E:8E:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/7531577c-052a-335e-b81a-b93ea9025e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl X509v3 Authority Key Identifier: keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer sbgp-ipAddrBlock: critical IPv4: 167.253.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:2e:f8:46:c5:68:ef:8c:e0:22:fe:32:65:42:ae:92:5a:8d: 0f:82:93:47:24:84:12:20:48:81:3d:84:eb:3d:47:66:fd:0b: 1b:92:98:d0:4a:1a:51:12:8c:a5:0d:c3:0e:5e:9b:f5:c6:62: 20:fd:11:5a:44:30:7b:7e:9e:c4:b2:9a:43:71:b7:21:09:0c: 07:f9:b9:7f:ea:fa:a1:b6:16:f0:4f:72:e3:a4:c2:8b:72:fa: f8:46:00:76:20:4d:9a:21:db:f2:98:d4:c8:95:f3:47:77:7d: d3:11:c3:80:94:68:b4:ea:b8:e9:b5:82:ce:17:d9:ef:bf:c0: 1e:42:ae:e5:37:09:ba:98:44:ae:cf:a6:d5:61:b5:e3:bd:b6: 0f:2a:19:c5:29:32:56:fc:6e:45:58:04:42:7a:31:28:cc:f6: 3c:b8:17:8a:c3:e1:dd:a1:79:e0:d1:0d:ff:69:76:a6:67:a0: 58:8d:fc:29:95:fe:4b:48:c2:96:7d:3c:91:02:26:e2:ee:12: 45:42:64:50:58:a3:ed:8f:28:45:01:6c:fe:67:da:d8:08:97: 73:f9:de:08:de:3f:23:e3:78:ff:4c:ec:4e:9f:45:5e:26:a6: 15:92:fd:6b:4b:ba:d4:d5:72:46:6c:37:e9:55:70:e7:64:eb: 6e:6d:5e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRk0Ut72GqrWZfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRmYzUxZDYtN2UxZS00OGM0LWFjOWItZGJjMDAyNTIw M2I1MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZDNiMDY4MzktYWQzMS00NjgwLTk0MGQtMzhjNzQyZDY5NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYqf8JdLT8ksFUDs7ToGKP7Gxcr3dbvtCLMF TbQnWo5hjLPLVtsWbkBH+Pu+IVPlMO8JBIPC8c2PLW75fbjAsCvj2jmoFPCcofqf bapWO23sqgVorvDe8yqtllmf+zjTlR22aYIHzCrkGpFgeyTOk20acvt+iplH59xe 8PsNC5zBGmP1fNwMVQpUvZ8VYWr1Z5GZz8THdSLIN12gBlaj6j/lH8Wp9lmnag8s 7Hhwq1MJWbadNHkx7fFRyA5NfIFaOyqsE6tQvBoDmeAB95ebjB+XKyQJpv18eK+p 2tNeeKwtTz8E4yakWdjfqkRXy2EYd5arZpqM79DRM0FPda5GEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY7Zrqm7IyYE8/kwi81HxMCno5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZGZj NTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1MjAzYjUvNzUzMTU3N2MtMDUyYS0z MzVlLWI4MWEtYjkzZWE5MDI1ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGRmYzUxZDYtN2UxZS00OGM0LWFj OWItZGJjMDAyNTIwM2I1LzRkZmM1MWQ2LTdlMWUtNDhjNC1hYzliLWRiYzAwMjUy MDNiNS5jcmwwHwYDVR0jBBgwFoAUPcyS7aqI3hpkRBX27EGuDv9dhGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMw MDI1MjAzYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4u+EbFaO+M4CL+MmVCrpJajQ+Ck0ckhBIgSIE9hOs9R2b9CxuSmNBK GlESjKUNww5em/XGYiD9EVpEMHt+nsSymkNxtyEJDAf5uX/q+qG2FvBPcuOkwoty +vhGAHYgTZoh2/KY1MiV80d3fdMRw4CUaLTquOm1gs4X2e+/wB5CruU3CbqYRK7P ptVhteO9tg8qGcUpMlb8bkVYBEJ6MSjM9jy4F4rD4d2heeDRDf9pdqZnoFiN/CmV /ktIwpZ9PJECJuLuEkVCZFBYo+2PKEUBbP5n2tgIl3P53gjePyPjeP9M7E6fRV4m phWS/WtLutTVckZsN+lVcOdk625tXv4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:51:31 2025 by rpki-client