$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa File: 502f559a-6adf-3a43-95b5-07df039f3802.roa (raw, json) Hash identifier: Yc5kp7JvpFBdNFavPnd8z/awu4SQupWpUrN0f0Tx0TY= Subject key identifier: C5:C8:54:FC:0B:D7:3C:2B:4E:E9:A7:53:9E:D1:BE:B1:F2:3F:F1:AA Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584F7BB303A939D77146150FCE00 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 23277 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:03:a9:39:d7:71:46:15:0f:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b7cb46ae-a2a6-45c5-8e9f-812100e892e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:45:40:c9:79:40:db:b3:59:57:4d:0b:da: d4:9f:27:17:c6:e4:4d:b5:b2:84:22:b2:9e:4a:ff: 03:18:70:70:e2:ae:7e:8e:92:40:e7:bd:fc:64:e9: 1e:59:49:ff:e8:7c:23:5d:e4:ed:b4:03:e8:c0:57: 4f:e3:57:47:02:2a:99:28:37:73:3d:0f:c5:12:3c: 0e:7d:34:66:ca:43:aa:27:81:ed:58:b1:ec:3f:b6: ea:b2:8d:f0:16:37:9c:d8:eb:67:d7:26:35:59:37: e6:41:1b:0a:68:4d:74:ba:0f:82:35:17:4b:ae:b9: 83:4f:a8:25:08:98:5d:10:f4:0b:a4:de:6c:06:18: 70:0a:70:8b:f2:1a:3a:84:1f:3d:36:2d:71:9a:e9: 81:2b:fa:79:61:8d:ff:96:69:8a:b5:d0:76:41:41: 6c:61:8e:33:27:c5:4a:da:54:3f:26:c7:fe:6f:46: 74:c8:93:4d:75:e6:74:42:d8:ad:f0:32:b8:be:16: 01:8d:a2:a6:8c:5e:9f:b2:8a:c4:28:1b:c8:87:7f: fa:d4:db:8c:86:7b:50:5f:30:4e:40:6e:d8:90:0f: 3e:c6:c0:13:d3:ac:54:c9:68:cc:41:1d:dc:83:6c: 9b:37:52:ce:2a:e7:be:c4:2d:ea:e9:2a:ea:ca:e6: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:54:FC:0B:D7:3C:2B:4E:E9:A7:53:9E:D1:BE:B1:F2:3F:F1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ef:e3:aa:64:27:8a:01:65:20:af:01:af:87:92:1f:b7:69: 97:37:c8:dc:ad:67:2f:ee:86:23:c5:67:70:b3:62:1f:19:23: 46:2a:ec:35:86:a3:c2:b6:dd:5a:2e:1c:5a:5c:26:83:7f:39: 79:f7:14:e9:95:77:4e:18:9d:b6:d8:e1:63:b7:87:a6:7d:46: a0:f5:23:d5:95:68:79:6a:b1:f8:fc:e2:09:16:81:a7:bd:66: f2:05:69:61:c7:96:a8:7f:3b:f6:9a:df:da:62:87:50:a3:39: 20:ae:6c:b2:a3:44:26:08:6d:3b:71:66:d6:55:e4:4e:da:ca: 05:3a:eb:18:6b:e2:6d:6f:51:0c:dd:73:5b:84:5f:01:f4:5b: 31:0d:8c:c8:4e:44:3e:af:7b:8a:64:be:03:c1:2b:16:28:6b: b8:cf:ef:1d:55:86:48:2c:87:ec:17:ec:94:bf:7d:ab:18:c0: 04:38:ec:ca:ed:ce:b9:29:9b:b2:c8:b1:c2:4c:b0:87:e4:f6: 39:b8:45:19:14:92:a8:fe:4a:1b:f6:b9:ab:ff:d2:1f:32:96: de:bb:47:db:d1:0b:c0:2f:02:81:31:78:ad:a9:3d:72:38:0e: 70:18:62:87:55:29:05:cc:89:e0:b4:71:03:c0:90:0e:5e:0a: 3d:e4:2d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swOpOddxRhUPzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjdjYjQ2YWUtYTJhNi00NWM1LThlOWYtODEyMTAwZTg5MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocBFQMl5QNuzWVdNC9rUnycXxuRNtbKEIrKe Sv8DGHBw4q5+jpJA5738ZOkeWUn/6HwjXeTttAPowFdP41dHAiqZKDdzPQ/FEjwO fTRmykOqJ4HtWLHsP7bqso3wFjec2Otn1yY1WTfmQRsKaE10ug+CNRdLrrmDT6gl CJhdEPQLpN5sBhhwCnCL8ho6hB89Ni1xmumBK/p5YY3/lmmKtdB2QUFsYY4zJ8VK 2lQ/Jsf+b0Z0yJNNdeZ0Qtit8DK4vhYBjaKmjF6fsorEKBvIh3/61NuMhntQXzBO QG7YkA8+xsAT06xUyWjMQR3cg2ybN1LOKue+xC3q6SrqyuaIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXIVPwL1zwrTumnU57RvrHyP/GqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvNTAyZjU1OWEtNmFkZi0z YTQzLTk1YjUtMDdkZjAzOWYzODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvv46pkJ4oBZSCvAa+Hkh+3aZc3yNytZy/uhiPFZ3CzYh8ZI0Yq7DWG o8K23VouHFpcJoN/OXn3FOmVd04YnbbY4WO3h6Z9RqD1I9WVaHlqsfj84gkWgae9 ZvIFaWHHlqh/O/aa39pih1CjOSCubLKjRCYIbTtxZtZV5E7aygU66xhr4m1vUQzd c1uEXwH0WzENjMhORD6ve4pkvgPBKxYoa7jP7x1Vhkgsh+wX7JS/fasYwAQ47Mrt zrkpm7LIscJMsIfk9jm4RRkUkqj+Shv2uav/0h8ylt67R9vRC8AvAoExeK2pPXI4 DnAYYodVKQXMieC0cQPAkA5eCj3kLbg= -----END CERTIFICATE-----Generated at Mon Oct 19 23:51:30 2026 by rpki-client