$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa File: 502f559a-6adf-3a43-95b5-07df039f3802.roa (raw, json) Hash identifier: aw24KO6i153k1q8hbvGc701D4NHykGMPZGMo2NRFp0I= Subject key identifier: ED:7B:24:AF:C5:DF:53:A8:C7:8E:B8:DA:9C:2F:D9:71:B2:73:41:6A Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584B970CF5E4EB624DD385573900 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 23277 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:e4:eb:62:4d:d3:85:57:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0e6a723c-b59d-4738-a4e1-2b75f5e6ed32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:75:c5:b1:b1:f2:8b:1b:0f:1e:ff:07:a0: e2:d0:b3:15:6e:d2:df:2c:d3:f7:1a:2d:42:5b:9a: fa:88:34:60:a8:6d:4b:51:db:2b:bb:03:b2:aa:8c: df:5a:aa:fb:ab:23:9e:e1:3a:4f:ad:b1:06:e8:36: 29:a8:fa:75:28:01:35:c1:10:12:f2:56:2a:91:52: 41:b5:9c:95:50:6e:c5:d4:31:b6:f4:1d:72:a6:d0: 38:bc:67:3e:ed:7f:23:a7:77:54:4e:7a:97:f0:75: 90:e9:3c:55:b9:64:c1:38:e9:3d:a8:40:a5:cd:95: 08:93:3f:b6:c1:4e:38:85:d6:c0:6b:bd:3a:c5:ce: 0e:b6:ad:e0:d2:0b:b7:09:5c:1b:2f:0f:86:6e:37: e7:7b:53:29:6c:61:79:62:5d:35:dc:b3:60:03:c2: 02:33:00:a6:88:89:ca:1a:34:31:4f:c3:76:43:19: d4:0c:58:a7:6e:5d:f7:ca:3c:dd:50:01:95:d8:fe: 6b:07:f3:7f:12:9f:ad:9b:61:53:ac:63:92:04:bf: f9:22:f5:95:4c:4b:57:2a:9e:e9:b3:20:d6:ec:89: ce:f2:5c:13:20:fa:95:0b:56:0b:4e:d4:61:4a:dd: eb:5e:00:6b:4a:d6:30:b8:6f:17:03:aa:3f:05:2c: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:24:AF:C5:DF:53:A8:C7:8E:B8:DA:9C:2F:D9:71:B2:73:41:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/502f559a-6adf-3a43-95b5-07df039f3802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:26:95:cb:1a:a4:40:af:9c:78:1c:6a:50:ef:ba:d8:ab:d5: f4:68:0f:3a:57:55:40:b3:07:4a:e6:0c:76:2d:a3:85:53:18: e8:0c:5b:fc:7b:e3:6e:06:cd:b4:46:96:ec:ea:7d:d5:8f:09: cd:bf:80:2a:3a:1d:a2:e6:c1:29:55:90:b9:d5:eb:7a:85:7c: c2:50:d6:03:81:50:4c:33:19:89:59:3d:6a:82:81:33:d7:82: 12:b6:f7:9c:bf:4b:5e:b5:3d:12:2f:51:2d:00:4e:10:2d:dc: 94:44:4f:e5:35:8b:29:59:6e:09:d8:71:52:d1:44:0b:4e:f2: d9:df:58:32:70:b7:44:97:3f:30:95:79:72:0b:f0:56:ee:47: 8b:b7:3b:6a:b6:40:de:53:b0:39:96:84:a7:69:4f:2d:71:fa: 0d:63:8c:56:2b:f8:13:1a:74:62:20:49:0e:9a:77:2c:27:31: 1b:d6:b5:4c:2a:2d:3d:90:aa:1f:47:4a:30:7c:b2:ab:23:4b: 57:2f:a1:97:17:2a:54:59:3e:ad:aa:3b:ff:ec:e8:52:6f:95: b7:f7:a4:16:19:12:99:14:e8:c5:ac:c8:14:4e:4f:df:0c:11: 57:df:57:e4:bd:a9:6b:45:49:45:61:72:3f:b1:c1:53:d7:c7: 43:83:a6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPXk62JN04VXOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGU2YTcyM2MtYjU5ZC00NzM4LWE0ZTEtMmI3NWY1ZTZlZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNN1xbGx8osbDx7/B6Di0LMVbtLfLNP3Gi1C W5r6iDRgqG1LUdsruwOyqozfWqr7qyOe4TpPrbEG6DYpqPp1KAE1wRAS8lYqkVJB tZyVUG7F1DG29B1yptA4vGc+7X8jp3dUTnqX8HWQ6TxVuWTBOOk9qEClzZUIkz+2 wU44hdbAa706xc4Otq3g0gu3CVwbLw+Gbjfne1MpbGF5Yl013LNgA8ICMwCmiInK GjQxT8N2QxnUDFinbl33yjzdUAGV2P5rB/N/Ep+tm2FTrGOSBL/5IvWVTEtXKp7p syDW7InO8lwTIPqVC1YLTtRhSt3rXgBrStYwuG8XA6o/BSz5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO17JK/F31Oox4642pwv2XGyc0FqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvNTAyZjU1OWEtNmFkZi0z YTQzLTk1YjUtMDdkZjAzOWYzODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYmlcsapECvnHgcalDvutir1fRoDzpXVUCzB0rmDHYto4VTGOgMW/x7 424GzbRGluzqfdWPCc2/gCo6HaLmwSlVkLnV63qFfMJQ1gOBUEwzGYlZPWqCgTPX ghK295y/S161PRIvUS0AThAt3JRET+U1iylZbgnYcVLRRAtO8tnfWDJwt0SXPzCV eXIL8FbuR4u3O2q2QN5TsDmWhKdpTy1x+g1jjFYr+BMadGIgSQ6adywnMRvWtUwq LT2Qqh9HSjB8sqsjS1cvoZcXKlRZPq2qO//s6FJvlbf3pBYZEpkU6MWsyBROT98M EVffV+S9qWtFSUVhcj+xwVPXx0ODptE= -----END CERTIFICATE-----Generated at Sun Nov 2 22:51:47 2025 by rpki-client