$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa File: b592519b-2458-3376-88aa-1a85ad209d0e.roa (raw, json) Hash identifier: YUDuNtGLcGvYZFJkywY2jsBQ82kkgaIJdWPmfBh1F5o= Subject key identifier: E9:E9:B9:17:E7:B8:30:2B:F5:37:F9:79:D6:65:7C:09:89:56:22:AA Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584B970CF58E28811DD079ED3E00 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 11185 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:8e:28:81:1d:d0:79:ed:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0e013319-3b25-4533-82c4-07ee8f6d0d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:d1:93:04:6f:01:60:b0:f4:bd:67:f7:21: c0:91:30:5f:49:c7:54:e8:8e:7f:e5:da:73:70:62: b3:cb:6a:f7:c7:59:c2:4f:37:21:48:ad:ab:7b:6c: 30:a8:be:44:90:0d:cc:89:b0:dc:6b:9a:c7:0c:1f: 4f:46:4f:ae:4e:f6:df:5a:ff:4b:55:9f:4c:a2:86: e6:64:b0:84:e0:2b:cc:01:5f:d1:6d:c9:13:d6:b9: 1a:53:a4:3d:2b:17:41:0c:4a:f3:12:d7:99:0b:d3: cc:92:25:bd:c0:70:bc:ab:50:78:b4:4f:88:82:bf: 5c:b2:d1:70:7a:64:ed:a1:61:ea:02:2b:ab:6f:97: e0:50:5b:b2:fb:50:42:5c:9f:80:86:22:b4:c7:6e: 6b:4c:06:02:a5:35:33:93:10:73:d8:05:ae:b7:25: dd:4f:9f:10:b1:b6:5f:0e:ba:fb:0a:f4:4f:51:fc: ff:70:05:ca:c6:1b:ae:ca:7e:48:fd:f0:51:24:30: 38:c6:5a:23:48:8d:90:af:db:2f:da:6a:e1:3e:82: 33:bc:fc:40:dd:13:c9:ad:39:35:15:e3:dd:61:51: ef:9b:3a:7f:da:c1:a2:e3:2d:5b:fd:75:97:ae:f9: 3b:34:b2:ae:95:d1:a2:3b:6f:a7:d1:76:5a:b4:e5: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:B9:17:E7:B8:30:2B:F5:37:F9:79:D6:65:7C:09:89:56:22:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/b592519b-2458-3376-88aa-1a85ad209d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a9:04:2d:52:a8:e5:86:da:70:d8:51:e0:b4:67:17:d0:f6: c6:f1:bc:9f:69:ca:49:34:a2:f5:be:41:43:03:21:8b:9f:92: 24:f7:c2:8f:18:48:91:84:3f:5a:9f:1d:75:a2:43:f7:05:52: bb:cb:2e:72:0c:6f:5e:a6:d0:42:00:5b:ed:8d:d3:9c:43:63: 92:b9:0e:19:43:99:29:aa:c4:c3:fe:7f:4a:07:24:e8:0e:72: 2d:d1:96:95:7e:5d:e8:87:ac:29:62:87:fd:ef:62:1f:c5:3e: 59:9f:11:c9:e6:1c:15:7c:67:6b:80:6b:e9:6d:8c:04:2d:b1: 8a:c4:ca:b6:6a:11:cc:67:58:50:ac:ad:79:42:fb:4d:69:b8: 7f:63:2d:76:32:78:b5:b9:16:cc:27:6a:e3:07:8b:2a:a6:d9: c6:eb:14:8c:b5:5d:83:dd:74:01:77:fe:3e:ef:ef:83:7d:fa: 29:ed:a5:08:0c:36:3f:fe:a1:31:1e:8c:d5:cb:05:85:4f:04: 44:2c:b1:1a:b9:83:93:08:a6:dc:e7:e1:36:46:e0:3e:20:ec: 64:fc:11:73:6e:d2:f0:9e:77:59:99:17:98:79:d3:e2:84:a8: 73:fb:35:27:72:c6:0a:52:0d:b1:93:64:bc:3b:f3:dc:73:6a: d1:06:e6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPWOKIEd0HntPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGUwMTMzMTktM2IyNS00NTMzLTgyYzQtMDdlZThmNmQwZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozPRkwRvAWCw9L1n9yHAkTBfScdU6I5/5dpz cGKzy2r3x1nCTzchSK2re2wwqL5EkA3MibDca5rHDB9PRk+uTvbfWv9LVZ9Moobm ZLCE4CvMAV/RbckT1rkaU6Q9KxdBDErzEteZC9PMkiW9wHC8q1B4tE+Igr9cstFw emTtoWHqAiurb5fgUFuy+1BCXJ+AhiK0x25rTAYCpTUzkxBz2AWutyXdT58QsbZf Drr7CvRPUfz/cAXKxhuuyn5I/fBRJDA4xlojSI2Qr9sv2mrhPoIzvPxA3RPJrTk1 FePdYVHvmzp/2sGi4y1b/XWXrvk7NLKuldGiO2+n0XZatOUSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnpuRfnuDAr9Tf5edZlfAmJViKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvYjU5MjUxOWItMjQ1OC0z Mzc2LTg4YWEtMWE4NWFkMjA5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEapBC1SqOWG2nDYUeC0ZxfQ9sbxvJ9pykk0ovW+QUMDIYufkiT3wo8Y SJGEP1qfHXWiQ/cFUrvLLnIMb16m0EIAW+2N05xDY5K5DhlDmSmqxMP+f0oHJOgO ci3RlpV+XeiHrClih/3vYh/FPlmfEcnmHBV8Z2uAa+ltjAQtsYrEyrZqEcxnWFCs rXlC+01puH9jLXYyeLW5FswnauMHiyqm2cbrFIy1XYPddAF3/j7v74N9+intpQgM Nj/+oTEejNXLBYVPBEQssRq5g5MIptzn4TZG4D4g7GT8EXNu0vCed1mZF5h50+KE qHP7NSdyxgpSDbGTZLw789xzatEG5pY= -----END CERTIFICATE-----Generated at Sun Nov 2 22:51:46 2025 by rpki-client