$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa File: 4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa (raw, json) Hash identifier: GUwGlLeTxznGvBXxPtUzE+IXqE8CnOSO7dJJmCSxmS8= Subject key identifier: C4:07:CD:11:0B:B6:D1:BB:77:D3:3F:8E:7F:BE:02:0C:E9:17:40:A5 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584B25FC47864A8B352E0D3C3EC0 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 16570 IP address blocks: 164.153.167.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:47:86:4a:8b:35:2e:0d:3c:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=e06d8c90-c587-4641-b92a-0f8387edb183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:ab:f4:a7:99:61:23:1d:9f:e2:1f:eb:4b: a3:6d:4d:e4:d2:6e:49:06:74:13:dc:b7:f7:9f:29: 42:f6:75:00:4e:5c:d6:c6:f0:9b:12:c9:1e:5a:7f: f8:69:2e:0e:49:35:f9:21:57:ba:00:b7:de:18:86: 02:d3:9b:be:88:6d:b3:83:29:57:6b:43:72:70:3d: c6:a7:94:d9:e1:4a:35:ef:38:01:a3:34:da:73:ae: 7a:2e:53:5a:61:17:aa:5d:f7:4c:ea:68:a5:7d:3e: 2d:59:f3:2d:9e:aa:d3:54:7f:3e:9c:01:b5:52:e6: 83:8d:d2:83:ea:b8:32:e0:c3:86:1e:f8:3a:4d:58: d0:77:41:86:a1:0e:7b:0b:a9:8f:d5:65:2f:f8:ee: 8f:5c:54:4a:b0:a2:5e:8a:89:a9:43:26:cd:1f:33: d7:e7:98:72:93:3e:f5:04:c1:ea:9b:f6:9a:4b:82: 1f:16:92:34:43:61:f9:81:25:5e:eb:e9:6a:cd:f8: 39:b8:50:da:50:d7:c3:0e:24:3e:ad:ae:64:9e:26: c0:24:60:81:4c:e3:68:90:42:44:15:b8:11:43:65: 64:d1:78:2b:25:59:37:6a:30:2b:c8:3d:5a:20:b8: d9:4e:de:28:9e:eb:75:57:bf:cd:bb:0d:9b:23:ff: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:07:CD:11:0B:B6:D1:BB:77:D3:3F:8E:7F:BE:02:0C:E9:17:40:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/4b521b1c-9bf8-3296-9442-0e36f1f5cb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:6d:19:c4:ac:dc:24:58:27:1b:b5:83:79:db:c3:10:70: ea:30:da:a7:e4:b7:15:ce:25:70:91:f2:61:58:f0:f0:30:88: 24:68:21:c9:f6:b3:4d:e9:72:a1:2c:d1:d8:39:df:2f:37:d1: 26:66:95:9a:75:8a:ff:b4:74:15:27:a2:4e:6d:57:b5:e7:1b: 94:93:fe:3a:2a:9e:e4:64:4e:17:c0:13:83:14:be:8b:5d:33: 8e:56:a6:35:f5:c8:84:ef:ad:40:a8:89:8c:d0:72:75:11:b0: 13:ac:dd:b7:d3:b1:e8:ff:50:b4:d1:e5:d1:b4:1b:3b:e4:e7: 9d:ed:b5:29:27:09:76:9e:a0:91:05:25:ff:8d:29:9b:3f:9b: 3a:88:26:7d:71:f7:36:29:51:c4:99:b2:cf:23:4f:b2:b6:67: 0a:a3:56:32:5f:d2:47:4d:ff:7f:c6:19:78:fc:18:85:bd:f7: 0c:99:cf:4e:70:f3:e0:d3:f8:7a:de:69:24:0d:c8:7f:73:6c: d2:cd:96:8f:32:3e:9f:96:9c:ae:5f:3e:0f:71:35:b1:7d:fa: 4b:62:91:ec:bf:a9:8b:0a:d4:06:2c:ed:2f:e7:a5:bc:a6:1a: 80:42:b4:39:4f:0e:84:38:ae:d5:25:2b:a3:17:b4:5c:ab:c3: e2:21:8f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EeGSos1Lg08PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTA2ZDhjOTAtYzU4Ny00NjQxLWI5MmEtMGY4Mzg3ZWRiMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszar9KeZYSMdn+If60ujbU3k0m5JBnQT3Lf3 nylC9nUATlzWxvCbEskeWn/4aS4OSTX5IVe6ALfeGIYC05u+iG2zgylXa0NycD3G p5TZ4Uo17zgBozTac656LlNaYReqXfdM6milfT4tWfMtnqrTVH8+nAG1UuaDjdKD 6rgy4MOGHvg6TVjQd0GGoQ57C6mP1WUv+O6PXFRKsKJeiompQybNHzPX55hykz71 BMHqm/aaS4IfFpI0Q2H5gSVe6+lqzfg5uFDaUNfDDiQ+ra5knibAJGCBTONokEJE FbgRQ2Vk0XgrJVk3ajAryD1aILjZTt4onut1V7/Nuw2bI/+zzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQHzRELttG7d9M/jn++AgzpF0ClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvNGI1MjFiMWMtOWJmOC0z Mjk2LTk0NDItMGUzNmYxZjVjYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgibRnErNwkWCcbtYN528MQcOow2qfktxXOJXCR8mFY8PAwiCRoIcn2 s03pcqEs0dg53y830SZmlZp1iv+0dBUnok5tV7XnG5ST/joqnuRkThfAE4MUvotd M45WpjX1yITvrUCoiYzQcnURsBOs3bfTsej/ULTR5dG0Gzvk553ttSknCXaeoJEF Jf+NKZs/mzqIJn1x9zYpUcSZss8jT7K2ZwqjVjJf0kdN/3/GGXj8GIW99wyZz05w 8+DT+HreaSQNyH9zbNLNlo8yPp+WnK5fPg9xNbF9+ktikey/qYsK1AYs7S/npbym GoBCtDlPDoQ4rtUlK6MXtFyrw+Ihj+g= -----END CERTIFICATE-----Generated at Thu Nov 6 00:24:03 2025 by rpki-client