$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa File: cc14649a-e604-33da-b145-eed98529505d.roa (raw, json) Hash identifier: YRPMiiSddmP9Mw1onY1CuLkFirD5qYoMHSDyA8hb0ok= Subject key identifier: 9D:E5:75:C4:BE:65:D1:21:7D:AB:12:C2:46:17:D8:05:34:A2:CA:03 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584B4A471F7F7C58F3A38996A880 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 395494 IP address blocks: 167.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:1f:7f:7c:58:f3:a3:89:96:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=20d3499f-aedf-47e5-a653-a7fa778ec2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:5b:76:d6:85:e4:15:62:e7:aa:ea:aa:80: 15:42:54:09:85:86:a4:53:e4:62:2a:4a:d1:32:1c: 3d:7f:22:78:df:57:ca:2f:8f:68:0a:2b:24:1e:4b: 9e:4f:0e:62:81:de:6d:32:c8:0b:d5:74:12:0e:7a: ba:e4:a6:b1:71:15:f2:ea:47:97:77:e1:be:af:45: 67:dc:55:2e:35:36:85:b6:2e:e6:e9:f7:82:c7:b7: b5:44:75:92:2b:6c:14:b6:25:42:ff:63:7b:0f:4c: b0:03:ab:04:6f:37:4f:f3:18:bb:0b:04:e2:a7:47: e6:31:6c:6c:1a:ee:06:95:01:9a:e9:0c:ee:62:32: 53:37:08:dc:f7:e7:17:9d:ba:9e:e4:34:3b:b6:29: d9:ac:7b:10:c3:be:45:d6:61:38:34:7f:bb:91:b2: d9:99:99:0e:8e:22:b6:81:22:6b:af:40:b4:49:97: 39:de:04:64:c0:8e:e8:d7:0e:9f:de:13:a5:c8:87: 6b:1b:8e:9c:c2:e1:c9:80:1e:ba:81:ee:34:84:74: 4d:26:c4:3a:d4:53:17:b1:64:5f:71:19:da:a9:51: 99:7a:9d:c8:d6:28:74:25:c0:a3:35:4e:64:75:e7: c5:4a:08:64:5a:a5:2f:fb:c0:94:9a:9e:1d:bb:29: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:75:C4:BE:65:D1:21:7D:AB:12:C2:46:17:D8:05:34:A2:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 167.253.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:bf:83:ed:ab:aa:b4:19:25:ad:2f:c1:1c:b3:70:fb:a9:04: 2d:44:03:d2:94:40:d2:15:5c:e5:b5:ac:8c:2f:59:bb:43:42: ec:80:e9:e9:f6:6d:c1:f7:23:e6:a4:30:23:c3:1b:3f:80:26: e8:c5:8f:c9:1c:5f:7e:52:d0:fc:cf:a5:9d:e7:33:03:df:64: d9:e8:d4:83:41:85:b2:6f:d9:1e:ea:d7:c7:47:45:9a:74:ce: 27:46:f8:4e:12:e8:9d:f7:5e:e4:15:e7:35:a2:f4:c4:fc:da: 04:ae:a6:18:14:84:7b:02:98:a1:a7:00:7f:e9:34:fb:1c:15: 0e:92:82:2b:f8:8e:16:04:0f:e5:62:62:fc:66:68:65:b5:18: 38:e9:72:84:6d:b9:ff:10:12:02:6b:dc:71:89:fe:9d:e0:fc: ce:b1:4e:dd:31:ca:15:ea:b9:57:b2:d0:03:7f:e6:6c:30:6a: d8:ed:c9:2c:5d:6b:14:1d:5f:93:bb:6a:d0:0c:f1:2f:a4:1d: aa:e4:dd:3e:6f:3f:2c:eb:ab:2d:be:52:a6:3a:8f:b8:64:79: 65:f1:71:da:90:36:a0:d8:35:db:ac:3b:91:c6:0b:75:4c:d8: 90:5b:a1:37:80:7f:e2:86:d7:e8:0c:24:93:05:7d:ee:b8:57: 53:60:a5:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRx9/fFjzo4mWqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MjBkMzQ5OWYtYWVkZi00N2U1LWE2NTMtYTdmYTc3OGVjMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQNbdtaF5BVi56rqqoAVQlQJhYakU+RiKkrR Mhw9fyJ431fKL49oCiskHkueTw5igd5tMsgL1XQSDnq65KaxcRXy6keXd+G+r0Vn 3FUuNTaFti7m6feCx7e1RHWSK2wUtiVC/2N7D0ywA6sEbzdP8xi7CwTip0fmMWxs Gu4GlQGa6QzuYjJTNwjc9+cXnbqe5DQ7tinZrHsQw75F1mE4NH+7kbLZmZkOjiK2 gSJrr0C0SZc53gRkwI7o1w6f3hOlyIdrG46cwuHJgB66ge40hHRNJsQ61FMXsWRf cRnaqVGZep3I1ih0JcCjNU5kdefFSghkWqUv+8CUmp4duymQpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3ldcS+ZdEhfasSwkYX2AU0osoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvY2MxNDY0OWEtZTYwNC0z M2RhLWIxNDUtZWVkOTg1Mjk1MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6/g+2rqrQZJa0vwRyzcPupBC1EA9KUQNIVXOW1rIwvWbtDQuyA6en2 bcH3I+akMCPDGz+AJujFj8kcX35S0PzPpZ3nMwPfZNno1INBhbJv2R7q18dHRZp0 zidG+E4S6J33XuQV5zWi9MT82gSuphgUhHsCmKGnAH/pNPscFQ6Sgiv4jhYED+Vi YvxmaGW1GDjpcoRtuf8QEgJr3HGJ/p3g/M6xTt0xyhXquVey0AN/5mwwatjtySxd axQdX5O7atAM8S+kHark3T5vPyzrqy2+UqY6j7hkeWXxcdqQNqDYNdusO5HGC3VM 2JBboTeAf+KG1+gMJJMFfe64V1NgpUk= -----END CERTIFICATE-----Generated at Thu Oct 9 20:02:14 2025 by rpki-client