$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa File: 8465acbb-141f-32cb-bf36-567b501bdefb.roa (raw, json) Hash identifier: LZCJnmk6Gm43nB+fL2rPIZmBgJ9Cjz5WJrnUI9DM+t0= Subject key identifier: D6:B9:91:D9:C6:6E:F8:DE:94:FE:78:97:B2:72:00:EE:5B:48:D6:F5 Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584B970CF5AEB96E9235F0C6F500 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 2386 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:ae:b9:6e:92:35:f0:c6:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ae369afa-2cea-434e-807c-090409abaf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:10:03:eb:ba:dd:aa:f0:2c:45:37:6a:0e: a5:b8:10:7c:33:0b:ab:74:d3:8c:ce:a4:60:16:17: ec:ed:3f:b5:e3:b4:80:3d:c3:8b:ce:7d:98:5a:62: ad:b9:ae:d2:f4:61:23:cb:4f:93:06:6d:73:e6:34: a5:41:55:62:5d:bc:04:96:3e:da:18:15:ac:1d:49: e0:c2:31:95:a5:9d:95:7b:5b:cb:d9:59:c7:64:f4: bd:ba:c2:c1:8a:4a:2f:37:3e:9b:e5:7a:28:f8:0e: d7:a5:99:4e:cd:31:52:3f:23:50:a6:97:cf:34:98: d9:0e:bd:63:52:de:83:32:29:bd:1c:85:37:14:96: aa:78:91:3a:18:02:f2:41:86:ac:b5:7a:0c:e2:8a: 97:db:e0:c4:4e:56:84:15:08:1c:b3:5e:8e:e0:62: 5a:97:28:ae:8b:fe:73:c2:3b:59:13:bc:ce:92:9a: 97:5b:bb:62:9f:83:f8:dd:a2:f6:84:1e:bd:00:9f: 11:0a:02:0b:f4:96:7e:d0:89:27:b4:d8:f9:87:fa: d1:66:5b:7d:ac:f9:4e:67:a6:bc:12:5a:d5:e3:8e: 7c:5f:23:b5:f5:c9:80:77:b9:7f:43:af:cb:16:fb: ab:b7:ec:54:02:d6:7f:b6:70:4b:60:f9:6b:a6:8e: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:91:D9:C6:6E:F8:DE:94:FE:78:97:B2:72:00:EE:5B:48:D6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/8465acbb-141f-32cb-bf36-567b501bdefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:18:67:f7:bc:3c:d9:f5:c8:d4:37:97:1f:db:22:12:6b:f4: 19:72:30:1e:8e:44:bf:ac:86:e8:37:7b:22:d9:e4:81:9d:b5: 97:74:6b:41:44:b6:11:cf:f7:65:00:ad:04:9c:a1:e9:72:5e: 88:ef:1c:c4:49:e1:50:fc:2f:16:9d:65:67:2d:4e:35:3b:ac: 09:fb:1b:fe:a8:b5:7a:8e:d0:30:ad:72:8e:f9:eb:c3:72:0b: 2c:48:50:c9:10:51:89:40:f7:0f:07:97:5a:8f:8c:7f:4f:af: 98:e1:fd:8d:0f:26:0e:f0:15:4c:fe:94:88:75:d7:dc:ac:0b: 3e:a4:80:5e:f7:6e:b9:42:11:e9:01:1d:eb:d4:5e:5c:46:ff: 91:b0:71:6b:d4:f6:c6:79:f7:61:98:d9:97:14:f5:2d:c9:c0: 97:16:e0:15:0a:03:e7:38:93:db:e9:37:97:af:27:1f:e6:c2: ba:10:6b:f8:21:ea:c5:21:5e:05:d9:85:38:8f:95:44:c6:18: 99:41:cc:18:94:ef:c0:24:f5:ec:c5:0e:67:1d:8d:28:af:99: 2f:f3:46:36:e6:f7:f1:cf:a3:48:89:08:78:88:9f:5b:b1:92: 15:93:51:36:8f:41:ad:5d:9b:7c:b4:45:e7:b8:49:b6:e5:08: c9:98:a1:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPWuuW6SNfDG9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YWUzNjlhZmEtMmNlYS00MzRlLTgwN2MtMDkwNDA5YWJhZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm88QA+u63arwLEU3ag6luBB8MwurdNOMzqRg Fhfs7T+147SAPcOLzn2YWmKtua7S9GEjy0+TBm1z5jSlQVViXbwElj7aGBWsHUng wjGVpZ2Ve1vL2VnHZPS9usLBikovNz6b5Xoo+A7XpZlOzTFSPyNQppfPNJjZDr1j Ut6DMim9HIU3FJaqeJE6GALyQYastXoM4oqX2+DETlaEFQgcs16O4GJalyiui/5z wjtZE7zOkpqXW7tin4P43aL2hB69AJ8RCgIL9JZ+0IkntNj5h/rRZlt9rPlOZ6a8 ElrV4458XyO19cmAd7l/Q6/LFvurt+xUAtZ/tnBLYPlrpo7h6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa5kdnGbvjelP54l7JyAO5bSNb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvODQ2NWFjYmItMTQxZi0z MmNiLWJmMzYtNTY3YjUwMWJkZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIYZ/e8PNn1yNQ3lx/bIhJr9BlyMB6ORL+shug3eyLZ5IGdtZd0a0FE thHP92UArQScoelyXojvHMRJ4VD8LxadZWctTjU7rAn7G/6otXqO0DCtco7568Ny CyxIUMkQUYlA9w8Hl1qPjH9Pr5jh/Y0PJg7wFUz+lIh119ysCz6kgF73brlCEekB HevUXlxG/5GwcWvU9sZ592GY2ZcU9S3JwJcW4BUKA+c4k9vpN5evJx/mwroQa/gh 6sUhXgXZhTiPlUTGGJlBzBiU78Ak9ezFDmcdjSivmS/zRjbm9/HPo0iJCHiIn1ux khWTUTaPQa1dm3y0Ree4SbblCMmYofo= -----END CERTIFICATE-----Generated at Sat Nov 1 18:47:09 2025 by rpki-client