$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa File: e6acc986-bd15-3041-b380-e9a3295ef802.roa (raw, json) Hash identifier: cSbMjFg6mR5ZL9Hv+kHWFX9umhfGkTiLamF2NvW6NIs= Subject key identifier: 89:A2:D5:02:27:CF:8D:08:51:22:B7:97:5D:E7:F5:BE:5F:44:DB:C8 Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Certificate serial: 010D0C9F4328584F17325373B6ECD5265F1A46F0 Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 12083 IP address blocks: 167.253.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:53:73:b6:ec:d5:26:5f:1a:46:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=09e7047a-9503-4a26-8787-212258767209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:15:ed:d8:1e:c8:44:a2:32:c8:d5:98:e9: 00:4a:5e:be:f4:d8:64:64:28:f6:8e:f7:7b:fb:17: 12:b8:25:9d:74:55:e4:55:25:d0:35:40:27:c9:e3: 7b:62:a7:a0:a9:21:50:b9:4a:e2:3b:46:bb:6c:d1: 17:e8:39:e7:18:7c:30:11:a2:9c:53:0c:f0:84:93: 1e:0d:dd:e0:53:e7:de:32:6d:79:34:00:84:7b:5f: 73:26:6b:28:03:28:93:bb:57:fa:e2:a3:7c:b0:f5: f2:75:a3:75:75:14:92:a6:8d:9f:6c:7f:aa:a9:8b: 0e:ba:de:53:4d:b4:86:6d:10:d3:c3:14:42:18:8c: 50:26:96:8e:67:26:bc:85:d5:c2:87:05:ad:7c:1e: 70:f2:e3:ac:65:fb:c1:7d:2e:3c:12:6f:68:3a:0a: e2:a4:e0:4f:4b:7e:27:1d:c8:09:7e:b5:d6:79:fe: 52:c3:0d:e1:15:d2:46:b5:b6:27:21:5c:cd:ce:9a: dd:fd:b1:d1:a0:fa:c1:65:61:e9:49:38:1a:8f:37: cb:d4:be:e7:12:60:8b:c7:12:a7:49:68:cc:3b:ec: e4:e6:57:56:c1:72:09:36:aa:f6:18:bb:36:23:16: 65:a5:58:dd:3a:6e:ff:5e:f1:ee:fa:5c:a6:9d:d4: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A2:D5:02:27:CF:8D:08:51:22:B7:97:5D:E7:F5:BE:5F:44:DB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl X509v3 Authority Key Identifier: keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:86:72:32:be:50:ec:c3:3b:cf:82:a7:60:19:88:66:11:5a: 28:d6:8b:1b:54:ae:d4:83:da:a9:22:30:ff:52:7a:99:a1:e6: 55:88:61:c0:ac:dc:92:c9:47:30:27:3b:97:db:c6:57:99:58: dc:c8:17:a2:c9:6f:86:59:a5:4c:ee:05:e9:d0:66:ba:c9:4e: d1:93:68:60:d3:8f:20:75:61:ea:47:83:cc:35:95:82:9f:5b: e3:70:01:7d:52:df:5e:36:16:f4:33:b6:09:42:97:7a:da:21: 3d:bb:76:11:34:34:94:14:7c:46:a7:c1:10:11:d3:95:e6:94: 1f:4c:25:e6:bd:bd:7d:93:ab:42:c7:f3:f4:12:93:0c:ed:5f: 93:20:ae:10:67:59:fe:b0:2e:15:a5:b1:5d:c4:f1:ce:78:d7: 53:2a:63:fb:48:b4:ef:eb:e2:c7:ae:9f:4e:65:52:1c:38:5c: 5e:da:7a:e7:ae:a5:c4:e3:52:5b:a3:bc:33:a4:8a:26:2b:f6: 13:72:25:f0:dd:e8:d9:21:f7:49:74:d0:15:2c:b8:c5:42:a9: 57:b7:0f:ea:96:90:5b:39:88:6b:7a:df:fe:98:51:a0:6b:de: 6b:e3:08:cb:c1:18:d3:80:46:c2:d8:41:f0:1a:92:a7:5a:37: 7b:65:1c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMlNztuzVJl8aRvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh M2IyMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDllNzA0N2EtOTUwMy00YTI2LTg3ODctMjEyMjU4NzY3MjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiogV7dgeyESiMsjVmOkASl6+9NhkZCj2jvd7 +xcSuCWddFXkVSXQNUAnyeN7YqegqSFQuUriO0a7bNEX6DnnGHwwEaKcUwzwhJMe Dd3gU+feMm15NACEe19zJmsoAyiTu1f64qN8sPXydaN1dRSSpo2fbH+qqYsOut5T TbSGbRDTwxRCGIxQJpaOZya8hdXChwWtfB5w8uOsZfvBfS48Em9oOgripOBPS34n HcgJfrXWef5Sww3hFdJGtbYnIVzNzprd/bHRoPrBZWHpSTgajzfL1L7nEmCLxxKn SWjMO+zk5ldWwXIJNqr2GLs2IxZlpVjdOm7/XvHu+lymndQteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImi1QInz40IUSK3l13n9b5fRNvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2 NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvZTZhY2M5ODYtYmQxNS0z MDQxLWIzODAtZTlhMzI5NWVmODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2 YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuGcjK+UOzDO8+Cp2AZiGYRWijWixtUrtSD2qkiMP9Sepmh5lWIYcCs 3JLJRzAnO5fbxleZWNzIF6LJb4ZZpUzuBenQZrrJTtGTaGDTjyB1YepHg8w1lYKf W+NwAX1S3142FvQztglCl3raIT27dhE0NJQUfEanwRAR05XmlB9MJea9vX2Tq0LH 8/QSkwztX5MgrhBnWf6wLhWlsV3E8c5411MqY/tItO/r4seun05lUhw4XF7aeueu pcTjUlujvDOkiiYr9hNyJfDd6Nkh90l00BUsuMVCqVe3D+qWkFs5iGt63/6YUaBr 3mvjCMvBGNOARsLYQfAakqdaN3tlHG8= -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:48 2026 by rpki-client