$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/b76d1a39-6401-35fa-be74-f194cedb8829.roa File: b76d1a39-6401-35fa-be74-f194cedb8829.roa (raw, json) Hash identifier: JqeGAJudPXJMFcf+g3MxK9usugI3F2mcoAX6PuS9YKU= Subject key identifier: 32:CA:E8:CC:A5:89:C7:D8:27:77:AE:A2:1A:98:B4:CF:CC:0E:81:3C Certificate issuer: /CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30 Certificate serial: 010D0C9F4328584B434C6BA090C068BF878DDB80 Authority key identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/b76d1a39-6401-35fa-be74-f194cedb8829.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 395648 IP address blocks: 167.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6b:a0:90:c0:68:bf:87:8d:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=4f382e90-1494-43ad-bcc8-d9a1e06a28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:96:be:7d:ee:a4:f3:42:1b:da:76:4d:ad: cb:ae:a7:c6:76:70:cd:31:72:45:3d:b4:97:1a:cf: 9d:aa:ba:09:67:73:a0:bb:2f:2a:ac:90:9f:3d:3a: d7:17:9b:ce:9c:b0:c6:3e:22:83:05:a7:33:d7:d1: 22:61:bd:5d:1f:6d:46:c7:36:0e:a9:6a:9b:a7:83: cb:26:6a:f1:4e:70:70:dd:4f:0d:7f:5a:0d:59:95: be:2c:b3:df:cc:60:09:bf:8f:45:52:b0:96:68:6a: ed:63:82:57:e3:16:3d:7f:c8:50:8c:6e:15:c5:e3: bd:13:45:9a:c0:3b:62:fc:35:2b:c1:e6:09:7d:a1: 75:32:a6:16:60:28:e4:45:fc:f3:58:d0:91:43:bc: 99:82:4d:de:82:e2:56:34:a3:ed:d0:19:6b:84:a3: 72:7c:bc:79:84:92:99:7f:48:25:fe:f7:18:a4:3d: 1a:21:69:27:1c:85:dc:4a:62:7f:b0:c8:15:d6:4d: ce:f2:e7:37:61:a5:cb:c9:e5:78:1e:55:35:5a:c2: d2:11:e6:4a:e0:1b:d3:df:c6:c6:33:d3:0e:ff:89: 7a:59:86:a6:ab:bd:a2:00:c8:59:0b:c7:5a:88:81: d5:b1:d0:be:de:07:c0:a6:62:36:43:6a:39:14:4b: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CA:E8:CC:A5:89:C7:D8:27:77:AE:A2:1A:98:B4:CF:CC:0E:81:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/b76d1a39-6401-35fa-be74-f194cedb8829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.crl X509v3 Authority Key Identifier: keyid:C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer sbgp-ipAddrBlock: critical IPv4: 167.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d0:57:48:2c:4f:3d:91:3e:00:26:d1:20:90:57:2c:22:7b: ab:cb:8f:e3:b9:b1:88:e1:f8:6a:00:b7:db:1a:50:c9:1b:a4: 9c:eb:bb:c2:9d:90:d1:5f:fd:11:99:57:83:94:af:88:18:71: da:b7:df:ee:23:61:8e:5e:0e:0a:8d:08:5a:9a:25:6e:d1:bf: 0e:46:13:44:e4:bf:38:c4:49:82:6e:29:25:4d:8d:75:7f:1c: 1f:eb:70:ae:16:16:b2:e7:9d:16:1f:a6:34:0f:ed:18:18:6b: e5:e4:2f:ce:cc:84:a5:87:74:d0:d7:c2:5a:3d:5b:a1:6a:1b: fc:cc:b7:5c:a0:da:b7:d4:e8:e3:b4:3b:07:71:7c:8d:1b:a1: c8:5b:7e:b3:73:a5:47:ea:44:22:5f:65:93:f8:c4:96:c5:33: 8f:d8:fc:bf:c7:d3:1b:64:28:82:af:0a:62:b5:f3:bc:f6:0c: c2:07:e9:c7:51:79:7d:a1:1b:1d:c7:41:49:47:d9:d0:db:af: 49:c5:51:3d:ec:8e:4d:35:9d:0a:d8:8e:17:4f:e7:82:b0:c7: 2b:9a:c6:7d:48:36:94:dd:1b:8b:5d:92:84:5c:4f:18:79:97: 75:1e:aa:b6:81:bb:51:21:ee:e4:21:91:24:74:03:3d:ef:ab: 7d:7e:ca:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGugkMBov4eN24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM1MGUzZDYtMDkwMi00NzdiLTg1ZmUtMzdkMmQ3Yzk3 ZTMwMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NGYzODJlOTAtMTQ5NC00M2FkLWJjYzgtZDlhMWUwNmEyOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkICWvn3upPNCG9p2Ta3LrqfGdnDNMXJFPbSX Gs+dqroJZ3Oguy8qrJCfPTrXF5vOnLDGPiKDBacz19EiYb1dH21GxzYOqWqbp4PL JmrxTnBw3U8Nf1oNWZW+LLPfzGAJv49FUrCWaGrtY4JX4xY9f8hQjG4VxeO9E0Wa wDti/DUrweYJfaF1MqYWYCjkRfzzWNCRQ7yZgk3eguJWNKPt0BlrhKNyfLx5hJKZ f0gl/vcYpD0aIWknHIXcSmJ/sMgV1k3O8uc3YaXLyeV4HlU1WsLSEeZK4BvT38bG M9MO/4l6WYamq72iAMhZC8daiIHVsdC+3gfApmI2Q2o5FEs8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLK6MylicfYJ3euohqYtM/MDoE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzUw ZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2QyZDdjOTdlMzAvYjc2ZDFhMzktNjQwMS0z NWZhLWJlNzQtZjE5NGNlZGI4ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM1MGUzZDYtMDkwMi00NzdiLTg1 ZmUtMzdkMmQ3Yzk3ZTMwLzBjNTBlM2Q2LTA5MDItNDc3Yi04NWZlLTM3ZDJkN2M5 N2UzMC5jcmwwHwYDVR0jBBgwFoAUwTbpPNADSHrsVLbLkBokfD7Y7acwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzUwZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2Qy ZDdjOTdlMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjQV0gsTz2RPgAm0SCQVywie6vLj+O5sYjh+GoAt9saUMkbpJzru8Kd kNFf/RGZV4OUr4gYcdq33+4jYY5eDgqNCFqaJW7Rvw5GE0TkvzjESYJuKSVNjXV/ HB/rcK4WFrLnnRYfpjQP7RgYa+XkL87MhKWHdNDXwlo9W6FqG/zMt1yg2rfU6OO0 OwdxfI0bochbfrNzpUfqRCJfZZP4xJbFM4/Y/L/H0xtkKIKvCmK187z2DMIH6cdR eX2hGx3HQUlH2dDbr0nFUT3sjk01nQrYjhdP54Kwxyuaxn1INpTdG4tdkoRcTxh5 l3UeqraBu1Eh7uQhkSR0Az3vq31+yiA= -----END CERTIFICATE-----Generated at Sat Oct 11 12:35:20 2025 by rpki-client