$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/c30bd76a-0d08-391d-b6ed-a5a81b177bc2.roa File: c30bd76a-0d08-391d-b6ed-a5a81b177bc2.roa (raw, json) Hash identifier: V7pEG4legw0vSBs0LWa//1mBaycUnIsl8A2k3a+ai+o= Subject key identifier: 8B:95:BD:D4:66:CA:56:9A:D2:EB:84:3C:8E:D9:AE:24:C1:B6:90:4B Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Certificate serial: 010D0C9F4328584B2FC1BB0B4BC08C3DE6F4DD00 Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/c30bd76a-0d08-391d-b6ed-a5a81b177bc2.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 167.253.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:bb:0b:4b:c0:8c:3d:e6:f4:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=2f450b65-34f4-4d4f-8743-38c2226661d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:38:8a:d9:de:d1:b7:81:c2:66:9c:29:f5: da:20:c4:27:2c:b7:8b:e1:a2:95:80:c0:52:73:40: 30:81:41:76:42:98:f5:a0:58:17:97:ff:5e:6c:95: 0e:6b:24:34:4c:bf:27:a2:b8:3b:98:3c:81:33:dc: ad:ca:30:56:6f:55:4c:49:3e:63:eb:14:17:ba:68: 05:cf:31:95:04:b0:cd:68:35:cc:29:c9:e5:2b:8c: 46:fd:8d:41:30:e0:fa:15:6e:5c:25:2f:a0:96:65: be:3c:55:42:95:47:e7:17:65:d5:35:f6:25:72:93: af:31:73:da:64:7b:9c:b3:ac:f9:2c:5e:6d:5e:32: a6:03:04:ca:5d:30:0f:c4:fa:e1:ec:b2:3f:77:27: 52:aa:f5:93:08:9b:45:0a:24:c2:ce:ed:b5:ae:9c: da:dc:78:d3:0d:51:08:f2:23:b4:df:3a:e1:2b:24: 1d:0e:32:c1:b6:d6:50:36:ab:4b:47:6b:aa:71:0b: 80:91:8a:e6:96:83:3d:a3:b2:bd:8a:0f:9c:32:fc: 72:5c:4f:bc:04:3e:de:a8:0e:fc:db:13:a3:09:6b: 47:87:20:91:0f:4d:26:eb:2a:db:2a:76:b1:a5:c7: 49:35:c2:48:cd:11:42:52:93:11:e2:b6:f8:a6:c4: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:95:BD:D4:66:CA:56:9A:D2:EB:84:3C:8E:D9:AE:24:C1:B6:90:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/c30bd76a-0d08-391d-b6ed-a5a81b177bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl X509v3 Authority Key Identifier: keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:dd:85:bc:33:7a:1e:83:22:81:bc:e2:b0:9f:e5:6a:31:13: 58:64:96:af:95:f7:b8:26:23:5b:1b:90:64:7d:68:e0:2f:6c: 65:8f:f9:1e:73:0d:72:82:57:24:a7:6c:58:92:b4:84:1d:2b: c4:1f:80:85:5a:ed:f6:c8:9c:59:d7:1b:8f:62:39:ad:14:cc: 50:5f:62:90:c1:de:bb:20:59:8a:f2:4e:86:12:c4:03:c8:31: 6d:93:09:f5:1c:94:ac:7e:61:de:ee:bc:8c:8a:42:59:08:40: 4e:05:6b:03:75:8d:6e:06:62:08:4b:9d:91:3b:2c:b9:ca:19: 5b:b9:08:12:cb:10:c5:ec:b6:c1:8e:37:3d:75:b7:44:d8:d5: 43:e9:16:37:3b:75:fd:0a:4f:3f:27:70:22:82:79:03:55:da: 88:fa:66:b4:59:de:9e:8c:ec:90:ba:db:5a:01:b4:d2:4b:67: db:81:4a:2c:28:73:3c:41:40:19:27:c8:54:6c:fb:8f:85:49: d3:1e:0c:cb:46:1e:9f:9d:16:2b:e9:a0:5a:dc:83:9e:7b:96: 23:ef:50:5d:e5:cf:03:8e:7e:c6:48:3b:59:75:71:f4:7e:21: 7d:ed:86:e8:99:e2:04:bd:28:73:fe:17:b8:af:af:a7:fa:5b: a7:ba:db:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbsLS8CMPeb03QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh M2IyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MmY0NTBiNjUtMzRmNC00ZDRmLTg3NDMtMzhjMjIyNjY2MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3E4itne0beBwmacKfXaIMQnLLeL4aKVgMBS c0AwgUF2Qpj1oFgXl/9ebJUOayQ0TL8norg7mDyBM9ytyjBWb1VMST5j6xQXumgF zzGVBLDNaDXMKcnlK4xG/Y1BMOD6FW5cJS+glmW+PFVClUfnF2XVNfYlcpOvMXPa ZHucs6z5LF5tXjKmAwTKXTAPxPrh7LI/dydSqvWTCJtFCiTCzu21rpza3HjTDVEI 8iO03zrhKyQdDjLBttZQNqtLR2uqcQuAkYrmloM9o7K9ig+cMvxyXE+8BD7eqA78 2xOjCWtHhyCRD00m6yrbKnaxpcdJNcJIzRFCUpMR4rb4psRuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuVvdRmylaa0uuEPI7ZriTBtpBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2 NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvYzMwYmQ3NmEtMGQwOC0z OTFkLWI2ZWQtYTVhODFiMTc3YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2 YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTdhbwzeh6DIoG84rCf5WoxE1hklq+V97gmI1sbkGR9aOAvbGWP+R5z DXKCVySnbFiStIQdK8QfgIVa7fbInFnXG49iOa0UzFBfYpDB3rsgWYryToYSxAPI MW2TCfUclKx+Yd7uvIyKQlkIQE4FawN1jW4GYghLnZE7LLnKGVu5CBLLEMXstsGO Nz11t0TY1UPpFjc7df0KTz8ncCKCeQNV2oj6ZrRZ3p6M7JC621oBtNJLZ9uBSiwo czxBQBknyFRs+4+FSdMeDMtGHp+dFivpoFrcg557liPvUF3lzwOOfsZIO1l1cfR+ IX3thuiZ4gS9KHP+F7ivr6f6W6e625s= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:34 2025 by rpki-client