$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa File: 9a3837c1-ca21-39be-922b-e7adeab29c49.roa (raw, json) Hash identifier: jCN7hISK4z3qCuMpBPbZ5b4SmM5PB9RUdBslEW+ZzN0= Subject key identifier: 22:BC:6A:D1:A2:A7:FD:F9:A8:07:75:2C:AA:2A:AB:98:4E:D4:A2:FA Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584B8BE227DEF4040AAC1A05F180 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 397666 IP address blocks: 167.253.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:27:de:f4:04:0a:ac:1a:05:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=6a2e326e-f3d1-4db6-b983-bd3b6308ccb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:1f:58:d5:16:92:c2:89:1b:b7:46:b6:9d: 39:79:c6:54:60:60:3f:59:86:3b:f1:04:4e:12:e2: 00:97:82:e3:c7:55:65:e2:70:7e:50:18:66:38:bc: 1c:68:30:d6:cb:db:35:87:cf:3b:f2:f9:ca:c3:19: c1:62:3e:01:c0:df:57:e0:8d:90:8d:6c:32:30:59: 3d:fa:ac:f5:b6:30:06:58:db:4a:17:fc:0f:19:5f: f2:0a:f5:47:26:99:30:af:67:fd:4d:73:ff:b5:bb: 6b:d8:62:7d:2c:6b:20:87:04:0a:e1:97:3e:a4:69: a3:8c:c0:f3:13:e1:2d:64:81:59:97:4e:05:e5:fe: 5c:ce:f9:dc:8a:78:f5:a7:44:6a:8a:95:a0:f0:06: cf:2a:2e:93:f1:f9:39:6f:be:6c:da:5f:63:00:1c: b4:9c:40:05:67:e2:b0:f2:e2:01:68:e6:d1:62:ab: 41:08:ee:4f:bc:4f:3e:60:46:c6:da:67:9b:7d:56: 9c:fd:e7:00:69:3b:1a:ea:41:da:70:12:9f:32:15: 07:3b:5c:ae:07:6e:37:c9:24:51:d8:af:95:1f:9a: 9f:fe:ed:5f:38:a4:c1:bf:d3:ed:a4:56:dd:d7:ab: d6:ea:c5:67:d5:85:3c:b9:23:09:67:0d:28:4a:15: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:6A:D1:A2:A7:FD:F9:A8:07:75:2C:AA:2A:AB:98:4E:D4:A2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/9a3837c1-ca21-39be-922b-e7adeab29c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e3:d7:91:aa:56:80:45:25:5b:8d:12:76:1d:66:7b:e3:d8: f5:07:40:94:bf:eb:6a:a7:12:56:f5:62:d6:b0:4e:37:eb:27: c6:49:34:0c:c3:c8:d5:2f:6a:a9:21:c7:8c:fa:93:b0:ea:a8: 88:f4:9a:7c:f4:6f:eb:f0:a8:3a:c0:73:84:f4:1c:5e:40:6f: b4:4d:ad:b6:e3:3e:64:9d:86:17:fe:77:85:f5:ed:58:12:ad: 0d:dc:39:b6:f3:38:80:71:8d:b3:07:85:ec:c9:d1:27:66:12: 01:da:da:85:92:eb:a7:3e:f5:eb:9f:cd:1a:6d:7a:bc:45:76: 89:e8:f5:41:7d:50:8c:ed:09:e5:8c:89:6c:dc:ef:b9:a6:90: 8b:e3:a6:16:44:9b:35:8e:8f:0b:5b:28:e7:5d:0d:30:c0:f0: ee:f2:11:6c:3f:9f:c9:c9:8b:05:f9:04:85:d6:e7:ec:13:9c: 21:41:3b:12:da:20:bb:17:98:7a:84:bc:2c:87:3a:bd:94:7f: 2c:14:40:c7:31:c9:8d:fd:03:4e:f1:cf:43:04:d2:43:b6:66: 0d:0f:cb:01:d2:81:4e:e2:50:a5:5d:7e:e1:f0:75:11:07:07: 86:27:6c:13:c5:98:64:a3:91:2f:7e:25:2d:75:7f:a1:c7:94: e3:0c:fd:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ife9AQKrBoF8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NmEyZTMyNmUtZjNkMS00ZGI2LWI5ODMtYmQzYjYzMDhjY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt0fWNUWksKJG7dGtp05ecZUYGA/WYY78QRO EuIAl4Ljx1Vl4nB+UBhmOLwcaDDWy9s1h8878vnKwxnBYj4BwN9X4I2QjWwyMFk9 +qz1tjAGWNtKF/wPGV/yCvVHJpkwr2f9TXP/tbtr2GJ9LGsghwQK4Zc+pGmjjMDz E+EtZIFZl04F5f5czvncinj1p0RqipWg8AbPKi6T8fk5b75s2l9jABy0nEAFZ+Kw 8uIBaObRYqtBCO5PvE8+YEbG2mebfVac/ecAaTsa6kHacBKfMhUHO1yuB243ySRR 2K+VH5qf/u1fOKTBv9PtpFbd16vW6sVn1YU8uSMJZw0oShUFPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK8atGip/35qAd1LKoqq5hO1KL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvOWEzODM3YzEtY2EyMS0z OWJlLTkyMmItZTdhZGVhYjI5YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADj15GqVoBFJVuNEnYdZnvj2PUHQJS/62qnElb1YtawTjfrJ8ZJNAzD yNUvaqkhx4z6k7DqqIj0mnz0b+vwqDrAc4T0HF5Ab7RNrbbjPmSdhhf+d4X17VgS rQ3cObbzOIBxjbMHhezJ0SdmEgHa2oWS66c+9eufzRpterxFdono9UF9UIztCeWM iWzc77mmkIvjphZEmzWOjwtbKOddDTDA8O7yEWw/n8nJiwX5BIXW5+wTnCFBOxLa ILsXmHqEvCyHOr2UfywUQMcxyY39A07xz0ME0kO2Zg0PywHSgU7iUKVdfuHwdREH B4YnbBPFmGSjkS9+JS11f6HHlOMM/d4= -----END CERTIFICATE-----Generated at Tue Oct 28 12:47:50 2025 by rpki-client