$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa File: f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa (raw, json) Hash identifier: ciNobiq5Snh+kSr1jIE3FXd8w0cVmYDWHFdXaxJm5/Y= Subject key identifier: 9B:93:DA:98:D6:BF:41:3B:19:8F:6C:A3:E5:F9:14:0D:98:AD:3E:18 Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584BB2F7C132901366410BE1DB00 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 35847 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c1:32:90:13:66:41:0b:e1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1a771a77-92d7-473e-91bc-51f2504c16ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:ae:bd:ec:bc:5c:d6:2e:06:68:de:a9:27: ba:aa:80:51:83:78:fe:bc:4c:eb:63:27:e7:fb:c6: e2:83:67:6f:f1:49:3f:6c:c8:2a:8e:62:6f:db:98: 54:45:97:b3:42:c4:40:a3:3a:7b:d1:a4:3f:db:4c: a4:1a:7d:53:5e:51:12:08:ed:6f:3c:f6:ec:46:c2: 47:ff:42:c5:eb:16:ab:c7:f3:cf:23:da:09:43:a7: 6a:d6:33:64:1e:b1:83:de:36:81:8c:92:ad:72:64: 5a:f1:23:1e:88:09:ca:7c:19:bd:d4:dd:f0:84:fc: 0a:e6:30:4f:61:af:e9:3f:83:d5:8c:8e:5e:01:02: 56:54:1d:e8:93:53:f2:d8:6b:d4:14:e0:d3:ae:79: 21:e0:85:ea:09:39:2e:a6:ec:a9:83:79:4e:3a:b1: 59:6f:3b:1b:35:e6:0c:34:ca:7e:10:be:47:32:ac: 0f:da:a6:d1:b6:58:e2:df:a1:3c:f9:65:5e:87:19: 01:2a:6e:56:df:63:f1:9c:34:06:ba:db:40:94:eb: 37:0f:18:64:ef:5e:16:ab:e8:b7:c1:47:35:73:f2: e7:d3:97:a2:68:aa:03:29:dd:1f:cf:3b:d2:ca:ec: f2:02:34:74:cc:33:2b:2e:1d:37:e1:f3:0d:a7:82: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:DA:98:D6:BF:41:3B:19:8F:6C:A3:E5:F9:14:0D:98:AD:3E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:01:23:fd:0c:16:5c:9d:e7:5e:0d:58:d8:65:2e:61:03:ff: 43:90:2b:a5:ed:db:e8:88:c7:6a:20:ee:80:78:2c:c7:d0:6c: 39:36:d0:41:43:3b:c0:17:90:0f:e3:18:84:b8:44:76:cd:b8: 8a:4b:90:76:af:b4:5e:07:b6:3b:f1:ec:70:5b:8d:86:65:75: 25:9e:b3:48:8e:b5:d0:8b:b6:95:5e:f7:1a:a4:2d:40:3e:5e: 6a:b2:09:25:35:f9:fc:cd:32:fc:43:29:0d:1a:d5:9f:de:b1: 44:48:47:79:57:6a:98:48:b4:37:b4:a6:1c:cd:ec:6e:ac:8f: 7e:88:16:f3:94:31:87:a7:0f:62:cf:b5:e6:4d:86:04:39:3d: d4:6d:be:8d:e6:a5:1b:29:d6:bd:32:eb:5b:65:69:53:73:ec: ba:f9:b0:eb:10:f7:ca:87:63:3e:9a:83:10:4d:f1:70:6c:76: d0:1e:da:3c:36:6c:6b:3b:23:2f:77:d9:cf:ce:40:fa:b4:52: ac:d0:ee:4f:44:24:86:8d:73:b5:28:d5:ac:0c:bc:be:ab:80: 80:64:2a:25:ca:a9:17:12:c3:70:07:57:1d:26:8e:72:1d:01: e6:bc:e0:b3:be:8e:72:3a:87:3b:0a:fe:67:32:78:f6:da:6d: d6:bf:84:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98EykBNmQQvh2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWE3NzFhNzctOTJkNy00NzNlLTkxYmMtNTFmMjUwNGMxNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsiuvey8XNYuBmjeqSe6qoBRg3j+vEzrYyfn +8big2dv8Uk/bMgqjmJv25hURZezQsRAozp70aQ/20ykGn1TXlESCO1vPPbsRsJH /0LF6xarx/PPI9oJQ6dq1jNkHrGD3jaBjJKtcmRa8SMeiAnKfBm91N3whPwK5jBP Ya/pP4PVjI5eAQJWVB3ok1Py2GvUFODTrnkh4IXqCTkupuypg3lOOrFZbzsbNeYM NMp+EL5HMqwP2qbRtlji36E8+WVehxkBKm5W32PxnDQGuttAlOs3Dxhk714Wq+i3 wUc1c/Ln05eiaKoDKd0fzzvSyuzyAjR0zDMrLh034fMNp4JC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuT2pjWv0E7GY9so+X5FA2YrT4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvZjZiM2Y2YTYtM2E4Yy0z ZTA3LTgwYWItMjhhOGY0MzI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYBI/0MFlyd514NWNhlLmED/0OQK6Xt2+iIx2og7oB4LMfQbDk20EFD O8AXkA/jGIS4RHbNuIpLkHavtF4Htjvx7HBbjYZldSWes0iOtdCLtpVe9xqkLUA+ XmqyCSU1+fzNMvxDKQ0a1Z/esURIR3lXaphItDe0phzN7G6sj36IFvOUMYenD2LP teZNhgQ5PdRtvo3mpRsp1r0y61tlaVNz7Lr5sOsQ98qHYz6agxBN8XBsdtAe2jw2 bGs7Iy932c/OQPq0UqzQ7k9EJIaNc7Uo1awMvL6rgIBkKiXKqRcSw3AHVx0mjnId Aea84LO+jnI6hzsK/mcyePbabda/hN4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:30 2025 by rpki-client