$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa File: 440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa (raw, json) Hash identifier: R9WLMcePUpvzWgGx76miJGyz9c+JmHH/vlcZKo9DTgE= Subject key identifier: A9:17:D6:D9:47:A5:7A:EF:F8:87:BA:77:3C:66:F4:A2:ED:66:C8:1C Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584B970CF59CD4206873AA77DD00 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:9c:d4:20:68:73:aa:77:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=2a2f3119-695b-44c0-b410-89e11a44049a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:ac:fd:d7:a5:ee:bd:53:2c:33:fb:8d:08: 70:4f:b8:75:93:66:e8:8b:9c:5d:98:cb:b2:e6:70: cf:e8:b1:99:0d:c8:a7:82:89:5d:b2:7a:05:3d:a1: b1:cb:3e:b8:ff:d0:3c:a9:3c:98:bc:c0:7b:6c:a1: d2:bb:ae:58:ee:c3:27:b2:95:d4:1e:e8:a3:bd:cb: 7c:f2:43:88:ca:61:f0:7a:84:f4:98:17:9a:05:0e: 99:59:54:ad:21:3e:c4:04:f9:d7:fa:be:3f:c7:06: 08:8a:68:24:42:2e:34:fa:ea:4c:e2:3c:e8:b9:10: 88:eb:fb:f9:9a:93:8d:c8:8e:5e:4f:a2:c5:53:05: b1:87:0e:4c:2a:81:ab:77:14:61:9d:9b:15:17:b0: 36:8b:89:9e:57:78:72:ff:f2:ba:57:e8:4a:27:26: 52:51:ae:a9:42:7e:03:ca:e3:71:cc:02:78:75:1a: 24:05:19:9d:95:a6:8e:60:bd:f6:ab:95:47:9d:6c: 0d:3f:09:49:33:c3:d0:24:6f:c3:2b:8f:a0:bb:e7: cb:84:14:d1:27:b8:2f:d9:7f:02:27:82:f9:f9:61: 52:8b:a5:fe:23:fb:ae:ad:bf:cb:e4:c5:99:98:5e: d0:fa:c7:fe:c8:c3:37:ca:f0:5e:c0:65:98:9a:5d: 4d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:17:D6:D9:47:A5:7A:EF:F8:87:BA:77:3C:66:F4:A2:ED:66:C8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2b:2a:da:03:5c:b8:bf:4f:fd:6c:f0:f2:94:58:73:6d:bb: 93:95:a8:b3:bb:7f:f1:4e:2f:6f:e7:ab:ab:38:37:15:aa:55: 9d:41:ee:f7:d6:bf:d7:30:1e:21:b0:6a:4c:9f:14:cc:97:9e: 55:e7:eb:8e:9a:76:0f:74:10:d1:58:d3:4a:f4:05:c6:0b:9a: 92:8f:34:e1:17:a1:e1:80:80:b8:d0:a5:f4:f4:96:41:44:25: 76:7d:ee:1a:b9:4b:1a:35:22:1b:b7:95:27:d5:fb:4e:cc:fd: 0a:0c:3b:5d:49:7f:4f:e0:84:fe:2b:6d:83:c1:c2:59:10:d9: 1e:b0:3e:d6:c6:50:0a:e3:f4:96:ff:03:e4:a5:c0:c0:27:b5: 20:d6:c5:a5:d1:71:1f:c4:22:c5:93:61:83:11:f5:cc:21:c6: 34:57:d3:8a:7b:91:43:60:2f:8f:3b:0a:c6:25:ed:88:f4:dd: 2a:e3:5a:7d:30:13:c5:0f:d1:71:07:a3:a4:c1:64:55:ba:c6: 3f:63:a0:e4:b9:49:85:78:08:78:4c:a3:62:81:0b:83:ba:17: ff:f4:38:bf:a6:59:f2:bc:c2:d1:1b:56:a1:3b:88:eb:ae:43: 54:26:1a:eb:b9:ea:56:20:d1:85:7e:9b:27:52:d2:f5:b5:62: 13:a4:24:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPWc1CBoc6p33QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MmEyZjMxMTktNjk1Yi00NGMwLWI0MTAtODllMTFhNDQwNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49as/del7r1TLDP7jQhwT7h1k2boi5xdmMuy 5nDP6LGZDcingoldsnoFPaGxyz64/9A8qTyYvMB7bKHSu65Y7sMnspXUHuijvct8 8kOIymHweoT0mBeaBQ6ZWVStIT7EBPnX+r4/xwYIimgkQi40+upM4jzouRCI6/v5 mpONyI5eT6LFUwWxhw5MKoGrdxRhnZsVF7A2i4meV3hy//K6V+hKJyZSUa6pQn4D yuNxzAJ4dRokBRmdlaaOYL32q5VHnWwNPwlJM8PQJG/DK4+gu+fLhBTRJ7gv2X8C J4L5+WFSi6X+I/uurb/L5MWZmF7Q+sf+yMM3yvBewGWYml1NbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkX1tlHpXrv+Ie6dzxm9KLtZsgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvNDQwYzRhNmItMTM0My0z YWYyLThlMmEtZDA0NDNiYTdkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACorKtoDXLi/T/1s8PKUWHNtu5OVqLO7f/FOL2/nq6s4NxWqVZ1B7vfW v9cwHiGwakyfFMyXnlXn646adg90ENFY00r0BcYLmpKPNOEXoeGAgLjQpfT0lkFE JXZ97hq5Sxo1Ihu3lSfV+07M/QoMO11Jf0/ghP4rbYPBwlkQ2R6wPtbGUArj9Jb/ A+SlwMAntSDWxaXRcR/EIsWTYYMR9cwhxjRX04p7kUNgL487CsYl7Yj03SrjWn0w E8UP0XEHo6TBZFW6xj9joOS5SYV4CHhMo2KBC4O6F//0OL+mWfK8wtEbVqE7iOuu Q1QmGuu56lYg0YV+mydS0vW1YhOkJCw= -----END CERTIFICATE-----Generated at Sun Nov 2 22:52:08 2025 by rpki-client