$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa File: d611f183-fce4-35e3-8186-2b1b64150e12.roa (raw, json) Hash identifier: /zSNpjoT60OUzrSNOAK6LRdj6GiBDe6DInQgyutsYAo= Subject key identifier: 18:59:91:83:DC:28:FB:DB:C5:5F:69:8C:92:34:01:FC:B7:E3:05:68 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F6292DD89E31D86B22A512F00 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 399275 IP address blocks: 167.253.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:dd:89:e3:1d:86:b2:2a:51:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=997eebeb-22cb-4549-a622-780ea82db76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:da:3f:ee:38:f2:19:ee:4e:70:7c:b6:45: 4d:c9:2a:e6:0f:04:4b:87:83:bb:22:fa:e8:7e:db: cb:0f:d0:88:d8:f9:9d:88:49:2c:5d:18:0a:96:c0: b9:92:83:e3:88:c2:04:ec:a0:4b:e5:bf:93:63:34: 4e:5c:c2:ae:11:8b:54:49:cf:9d:f7:c0:cc:dd:fb: 44:18:cc:f6:41:35:03:1b:d5:ca:2d:2f:ea:61:0b: f1:c9:4a:a5:ab:ef:8d:a4:78:b1:e4:ff:03:b9:d6: be:a8:97:46:7e:22:74:45:62:16:be:88:80:01:36: 36:c6:f9:ab:60:0b:9d:21:80:d7:2b:6f:3b:70:46: b3:a1:5b:66:bd:58:0d:bd:27:44:7d:7d:47:c7:01: 36:73:6b:82:d7:3c:13:0c:85:0c:ef:a7:4f:97:db: 64:a5:1e:6c:53:f1:7b:aa:7d:e3:3b:db:8a:7f:d2: dc:67:82:fc:8d:a3:4d:d5:ff:38:62:df:5c:25:a1: 68:b0:9a:b4:15:25:98:1a:9c:25:0d:d3:4b:2a:19: e7:04:ab:7d:1a:7b:70:f7:04:73:62:56:02:2a:3c: ec:7c:f3:10:59:03:05:01:3b:e4:fb:9c:11:9d:35: cd:3f:f6:a1:60:57:50:f2:37:36:ac:80:82:0c:a0: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:91:83:DC:28:FB:DB:C5:5F:69:8C:92:34:01:FC:B7:E3:05:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/d611f183-fce4-35e3-8186-2b1b64150e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:26:ce:63:ac:e5:66:1c:e1:46:af:59:5e:f8:52:ef:7c:4f: 90:1a:75:f9:b7:72:9f:21:26:9a:5d:87:c5:4a:c2:f9:81:85: 1c:4a:29:82:19:d0:66:34:6e:b2:a4:84:97:a6:e9:0d:80:2d: 06:ca:ba:4c:9e:a3:6a:e0:69:8b:2a:e5:8a:f4:53:0f:cc:dd: 86:21:81:32:50:e8:f3:1b:8e:dc:e3:8b:30:84:dd:48:4a:e2: 97:ec:fd:b3:48:f5:63:0c:3e:54:ef:62:64:61:af:2e:3d:1c: fe:c5:b0:bf:40:db:94:7b:ce:a4:d5:57:0b:c3:0a:e5:57:7d: d7:ac:3f:0d:d5:94:79:f3:4c:94:2e:86:3e:f2:ef:76:cd:47: 01:c3:77:34:84:7f:98:2a:6a:a7:ef:53:8a:a7:d9:da:0e:e9: 34:9a:3b:89:22:90:3f:bb:98:94:9c:ec:c2:55:8d:59:db:cd: 24:d4:69:42:46:08:c0:5f:42:75:a7:1e:25:f5:9a:f9:1e:da: db:9d:c8:b8:e9:47:16:00:c6:b6:ed:84:ad:63:ce:24:8d:ca: f0:ca:72:7d:c4:17:0b:af:b2:5e:e7:6a:9f:4d:17:ee:26:3a: 50:0e:73:8c:4c:33:0e:93:ac:4f:96:01:7a:b9:2c:f0:ee:a6: df:22:cc:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikt2J4x2GsipRLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OTk3ZWViZWItMjJjYi00NTQ5LWE2MjItNzgwZWE4MmRiNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDLaP+448hnuTnB8tkVNySrmDwRLh4O7Ivro ftvLD9CI2PmdiEksXRgKlsC5koPjiMIE7KBL5b+TYzROXMKuEYtUSc+d98DM3ftE GMz2QTUDG9XKLS/qYQvxyUqlq++NpHix5P8Duda+qJdGfiJ0RWIWvoiAATY2xvmr YAudIYDXK287cEazoVtmvVgNvSdEfX1HxwE2c2uC1zwTDIUM76dPl9tkpR5sU/F7 qn3jO9uKf9LcZ4L8jaNN1f84Yt9cJaFosJq0FSWYGpwlDdNLKhnnBKt9Gntw9wRz YlYCKjzsfPMQWQMFATvk+5wRnTXNP/ahYFdQ8jc2rICCDKA29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhZkYPcKPvbxV9pjJI0Afy34wVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZDYxMWYxODMtZmNlNC0z NWUzLTgxODYtMmIxYjY0MTUwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADomzmOs5WYc4UavWV74Uu98T5Aadfm3cp8hJppdh8VKwvmBhRxKKYIZ 0GY0brKkhJem6Q2ALQbKukyeo2rgaYsq5Yr0Uw/M3YYhgTJQ6PMbjtzjizCE3UhK 4pfs/bNI9WMMPlTvYmRhry49HP7FsL9A25R7zqTVVwvDCuVXfdesPw3VlHnzTJQu hj7y73bNRwHDdzSEf5gqaqfvU4qn2doO6TSaO4kikD+7mJSc7MJVjVnbzSTUaUJG CMBfQnWnHiX1mvke2tudyLjpRxYAxrbthK1jziSNyvDKcn3EFwuvsl7nap9NF+4m OlAOc4xMMw6TrE+WAXq5LPDupt8izFk= -----END CERTIFICATE-----Generated at Sat Oct 10 22:27:21 2026 by rpki-client