$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6c5d9890-0091-3679-baea-8028dfce9893.roa File: 6c5d9890-0091-3679-baea-8028dfce9893.roa (raw, json) Hash identifier: Gfuz3PsnVnGEHfvb2Dj7zNMjfgESlLeRGsR4SNOvEXM= Subject key identifier: 3F:A4:D3:B3:70:AC:3D:D1:30:F5:F7:6E:59:4D:06:10:B0:6A:84:26 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584BA39D26CA3FD63CC83F3EAD00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6c5d9890-0091-3679-baea-8028dfce9893.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16696 IP address blocks: 167.94.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:26:ca:3f:d6:3c:c8:3f:3e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=6acfdbec-735f-4d70-9565-ad791f89cf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:6e:44:6e:22:e9:e2:28:5d:ed:eb:76:1d: 7e:52:a2:f5:e2:9f:e5:3b:9a:80:1b:a6:3b:f2:05: 04:8b:6a:b9:ac:e2:12:46:0d:f6:50:38:b9:21:2d: 1b:bc:ed:33:af:1f:1e:f0:89:2a:ba:67:cb:13:15: 52:26:b5:dc:a1:5b:d7:ed:1e:9f:37:3d:7d:35:f8: 36:11:ba:f6:9b:65:9c:ec:cc:0a:1c:44:89:31:2a: 4c:ed:9e:41:1e:79:6b:8e:99:c8:d5:fa:e6:43:d0: b1:7f:ab:cb:e2:e4:b9:3d:8c:a1:23:0b:be:a9:1a: 28:67:1b:21:15:1a:9f:2f:2d:a8:06:6f:d5:5d:78: ad:cd:a4:5a:ad:d7:d1:c3:70:b7:8c:dd:ea:1d:19: ff:88:6b:90:f7:53:08:14:65:78:c1:f6:3f:f2:a5: fc:b9:5c:d3:32:ae:28:11:cd:41:df:af:15:3b:14: 89:ca:da:a3:7d:c5:8c:c0:72:f9:4e:2c:81:c1:5e: 70:02:28:4c:63:53:26:da:5f:c3:7e:ad:0d:d5:09: b4:c3:df:b6:e8:65:0d:70:d6:60:dc:05:c3:38:d1: a6:53:54:b5:68:d6:80:1b:aa:f6:8c:07:c8:a4:20: 34:59:ae:62:31:64:fb:67:6b:27:4e:f5:2b:ff:17: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A4:D3:B3:70:AC:3D:D1:30:F5:F7:6E:59:4D:06:10:B0:6A:84:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6c5d9890-0091-3679-baea-8028dfce9893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 167.94.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a2:6a:fa:ea:80:4c:8c:86:44:05:dd:cc:af:65:09:6e:8d: d7:0a:18:0b:a1:79:4b:7a:32:cc:26:b7:28:c2:a2:ef:5e:f1: 43:6b:aa:b1:a5:0f:54:ea:2c:ef:af:4d:2b:5a:b4:b2:96:d9: 58:69:50:b5:aa:3a:c3:33:3b:eb:15:7e:c9:1c:b0:15:a1:71: 9c:a0:58:6f:06:14:f3:04:f1:1d:e7:17:4d:55:40:40:11:3b: 58:06:be:ee:f4:ad:f6:02:a5:94:f1:db:ec:77:1b:64:f6:54: 1d:cc:5b:ff:7e:63:16:9c:31:0a:55:18:68:d0:c2:04:f2:0e: 66:ff:98:82:60:49:d8:7d:88:bb:d4:7f:a1:cd:55:58:ed:b9: 00:e6:0a:13:fd:f2:f7:81:d6:db:57:c7:ef:87:05:5b:b5:32: 68:76:de:0e:90:d4:66:c9:3b:2b:44:89:de:c9:bf:e6:51:26: 63:17:bc:8e:75:06:d4:62:ff:e5:96:91:f5:bb:95:db:80:d6: 5f:8d:73:a0:68:18:9a:41:71:26:20:eb:ff:8c:78:3d:a9:fe: 08:97:28:ba:95:a3:99:1a:7f:8f:8a:7d:06:c0:1f:19:00:bc: e9:78:d9:43:69:75:5d:c3:a9:db:1f:ff:15:87:b7:1f:62:b6: ce:6f:4f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSbKP9Y8yD8+rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmFjZmRiZWMtNzM1Zi00ZDcwLTk1NjUtYWQ3OTFmODljZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJJuRG4i6eIoXe3rdh1+UqL14p/lO5qAG6Y7 8gUEi2q5rOISRg32UDi5IS0bvO0zrx8e8IkqumfLExVSJrXcoVvX7R6fNz19Nfg2 Ebr2m2Wc7MwKHESJMSpM7Z5BHnlrjpnI1frmQ9Cxf6vL4uS5PYyhIwu+qRooZxsh FRqfLy2oBm/VXXitzaRardfRw3C3jN3qHRn/iGuQ91MIFGV4wfY/8qX8uVzTMq4o Ec1B368VOxSJytqjfcWMwHL5TiyBwV5wAihMY1Mm2l/Dfq0N1Qm0w9+26GUNcNZg 3AXDONGmU1S1aNaAG6r2jAfIpCA0Wa5iMWT7Z2snTvUr/xd5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+k07NwrD3RMPX3bllNBhCwaoQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmM1ZDk4OTAtMDA5MS0z Njc5LWJhZWEtODAyOGRmY2U5ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp17FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeiavrqgEyMhkQF3cyvZQlujdcKGAuheUt6MswmtyjCou9e8UNrqrGl D1TqLO+vTStatLKW2VhpULWqOsMzO+sVfskcsBWhcZygWG8GFPME8R3nF01VQEAR O1gGvu70rfYCpZTx2+x3G2T2VB3MW/9+YxacMQpVGGjQwgTyDmb/mIJgSdh9iLvU f6HNVVjtuQDmChP98veB1ttXx++HBVu1Mmh23g6Q1GbJOytEid7Jv+ZRJmMXvI51 BtRi/+WWkfW7lduA1l+Nc6BoGJpBcSYg6/+MeD2p/giXKLqVo5kaf4+KfQbAHxkA vOl42UNpdV3Dqdsf/xWHtx9its5vTyQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:28 2025 by rpki-client