$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa File: 710444b4-47b7-328c-9870-a8d92c70f4cf.roa (raw, json) Hash identifier: C44cVJ3GobJLv8yT9wmCo8EqbUntugdY0RM1aTWenO0= Subject key identifier: 7E:61:16:32:C8:BA:61:AD:4A:58:A1:F8:39:32:32:1D:35:09:1F:6C Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Certificate serial: 010D0C9F4328584B2FC1BB2DF745CD52433588C0 Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 13347 IP address blocks: 167.253.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:bb:2d:f7:45:cd:52:43:35:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=0290860b-f042-4b76-afba-448cc2fee56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:03:9f:43:4f:00:f8:db:f6:45:01:ce:75: bb:0a:b2:97:e3:04:99:68:05:e3:00:4b:fc:c9:12: 53:e4:38:ae:4a:3b:7d:37:51:56:69:a1:da:61:83: 04:d1:49:86:57:77:ee:02:bc:f5:2f:46:36:ea:7e: 4f:16:60:0c:ab:46:de:d6:ad:9f:22:2c:90:11:16: 73:10:d2:46:01:57:46:f5:b1:e0:17:40:5f:cd:26: 0f:46:45:15:3b:23:97:1c:1e:34:96:8e:9b:f3:4c: ef:b2:4b:5c:b1:27:9d:b5:d8:1b:7c:a9:72:d3:3d: ab:7d:c4:39:59:ec:db:08:41:0c:3b:81:ad:e9:25: df:8e:8b:a4:ed:52:d3:41:35:a3:51:89:09:31:f6: 04:f8:1c:f4:c0:44:a9:52:05:b7:ce:2f:ec:41:e9: 77:1a:b9:22:6d:fc:54:28:9a:63:15:3f:49:ea:45: 63:b2:8e:d3:70:74:c7:4c:9f:56:21:c3:94:13:4d: a5:0d:4b:d8:3a:52:62:2a:55:93:01:05:c5:50:2d: c2:40:93:fb:b8:e6:d6:f8:a1:d9:67:a8:01:62:49: a6:08:12:02:46:30:51:5a:9a:21:ce:6b:e3:63:dc: be:ce:e7:f4:58:97:99:a8:68:1c:f8:57:fa:17:ed: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:61:16:32:C8:BA:61:AD:4A:58:A1:F8:39:32:32:1D:35:09:1F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/710444b4-47b7-328c-9870-a8d92c70f4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl X509v3 Authority Key Identifier: keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fb:35:2e:60:2d:1e:1a:5e:5a:33:0f:51:63:90:0d:d9:3a: 1e:fb:bc:4b:c8:fb:ad:54:13:9d:c1:83:9c:f7:d7:74:d0:a4: 4e:b1:6c:a3:2f:03:81:4f:b2:8e:bd:02:e2:f1:56:ed:a3:03: 32:e0:1b:3f:70:4f:d7:cd:ea:e0:d3:33:d3:13:62:8b:26:f2: 55:5f:f5:d7:c2:45:b3:22:a3:02:4f:dc:8b:75:4e:d7:20:98: 0a:84:10:c4:92:d0:0b:3b:9b:a1:4e:70:5e:c6:d1:bb:0f:dd: 98:03:18:77:cf:6e:f5:53:c3:63:4e:2b:fc:d9:84:d2:0e:6c: 51:44:5c:c3:10:15:1d:34:79:16:06:41:51:c5:f9:50:bf:cd: 8b:ef:74:19:14:5d:49:bf:be:b9:27:06:bf:60:43:cd:6c:ad: 77:72:9f:4c:2e:a8:d2:54:1c:b0:71:0b:63:b6:46:f2:57:17: e5:df:20:e6:24:77:9f:cf:4c:64:75:1c:28:24:bd:78:b4:84: aa:ce:ab:aa:90:b1:b7:dc:18:c1:b8:e3:92:1e:f8:90:dc:7a: e8:47:98:55:52:01:12:89:11:45:49:f8:d7:48:21:3b:39:2f: 03:ed:85:c2:b5:e8:cf:8d:bc:ae:ca:0c:89:df:7b:9a:fa:9a: 8f:6c:18:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbst90XNUkM1iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh M2IyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MDI5MDg2MGItZjA0Mi00Yjc2LWFmYmEtNDQ4Y2MyZmVlNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz8Dn0NPAPjb9kUBznW7CrKX4wSZaAXjAEv8 yRJT5DiuSjt9N1FWaaHaYYME0UmGV3fuArz1L0Y26n5PFmAMq0be1q2fIiyQERZz ENJGAVdG9bHgF0BfzSYPRkUVOyOXHB40lo6b80zvsktcsSedtdgbfKly0z2rfcQ5 WezbCEEMO4Gt6SXfjouk7VLTQTWjUYkJMfYE+Bz0wESpUgW3zi/sQel3GrkibfxU KJpjFT9J6kVjso7TcHTHTJ9WIcOUE02lDUvYOlJiKlWTAQXFUC3CQJP7uObW+KHZ Z6gBYkmmCBICRjBRWpohzmvjY9y+zuf0WJeZqGgc+Ff6F+3+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5hFjLIumGtSlih+DkyMh01CR9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2 NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvNzEwNDQ0YjQtNDdiNy0z MjhjLTk4NzAtYThkOTJjNzBmNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2 YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH7NS5gLR4aXlozD1FjkA3ZOh77vEvI+61UE53Bg5z313TQpE6xbKMv A4FPso69AuLxVu2jAzLgGz9wT9fN6uDTM9MTYosm8lVf9dfCRbMiowJP3It1Ttcg mAqEEMSS0As7m6FOcF7G0bsP3ZgDGHfPbvVTw2NOK/zZhNIObFFEXMMQFR00eRYG QVHF+VC/zYvvdBkUXUm/vrknBr9gQ81srXdyn0wuqNJUHLBxC2O2RvJXF+XfIOYk d5/PTGR1HCgkvXi0hKrOq6qQsbfcGMG445Ie+JDceuhHmFVSARKJEUVJ+NdIITs5 LwPthcK16M+NvK7KDInfe5r6mo9sGPQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:09 2025 by rpki-client