$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa File: fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa (raw, json) Hash identifier: NPVNjD4vZ3hop3wF46j2pzKjp3PT5b/bVYftslThOcI= Subject key identifier: 94:F1:74:1E:E0:0D:C1:A0:A7:5A:F9:25:FD:B8:03:50:46:64:CC:90 Certificate issuer: /CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1 Certificate serial: 010D0C9F4328584BB45D0AD1647EED51E25D4F40 Authority key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 64264 IP address blocks: 167.253.110.0/24 maxlen: 24 2602:fb6b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0a:d1:64:7e:ed:51:e2:5d:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ac3476b2-cf58-4b1e-a6b2-0746d4652dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:e8:64:92:ad:1a:a4:9c:e5:20:2b:aa:69: 6f:7e:6e:97:b2:74:d9:32:a2:cb:92:7f:99:f2:f4: bb:c3:cb:dc:4c:78:a1:02:30:73:59:5f:e0:c3:fe: a0:b3:26:24:76:7c:99:82:2e:20:30:12:23:bf:17: ee:41:80:a4:98:cf:21:96:fe:2d:cd:28:14:0a:29: 0a:a0:e3:98:88:ba:ec:ae:4f:e4:12:66:42:b7:18: 69:b2:32:53:9b:a8:41:87:e0:bb:44:01:60:db:79: 81:e6:f2:7a:ba:1d:a2:b3:2c:8c:ab:83:f0:4b:7e: 68:3b:f4:bc:23:1d:53:59:d6:bd:7e:75:7b:c0:cf: a7:7e:ed:63:bc:be:9b:b1:53:18:e0:d8:3b:8a:b6: 89:63:38:a5:82:03:b3:73:c8:a4:4a:f9:b7:71:ed: b1:f5:65:a5:7a:82:6a:e8:bb:36:15:30:40:d7:ca: b8:af:eb:37:3a:ee:ea:49:cb:3d:a6:65:8d:cf:d4: 47:6d:17:ed:44:95:c0:e9:09:5e:82:1c:53:df:9b: 08:83:5e:b4:64:70:ae:c0:25:52:ea:c8:15:42:ec: 07:41:47:cf:75:89:63:6c:74:43:88:8e:aa:99:51: 38:89:04:73:cc:1b:c3:24:fa:24:de:e4:11:95:db: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F1:74:1E:E0:0D:C1:A0:A7:5A:F9:25:FD:B8:03:50:46:64:CC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl X509v3 Authority Key Identifier: keyid:D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer sbgp-ipAddrBlock: critical IPv4: 167.253.110.0/24 IPv6: 2602:fb6b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:50:e5:7a:40:59:ff:24:8d:a1:c8:3e:03:02:37:2e:f7:45: 85:09:d0:f4:86:77:6d:4f:06:8b:f0:47:5a:88:e0:d2:c4:f8: 66:d7:c6:99:a5:34:7c:e3:72:0b:13:6a:78:aa:5f:d5:8d:61: f2:30:44:65:43:9f:a9:cb:15:ea:d1:39:07:67:e9:6a:4d:c9: 16:c0:fd:9b:c5:01:00:94:10:e1:57:ad:bb:88:d8:b0:11:71: 25:f7:85:62:fc:ac:c2:56:01:cf:07:43:ca:73:82:d2:c6:bb: 1e:87:67:65:eb:20:7a:01:d5:42:8b:53:67:9c:31:5a:46:55: 27:e1:bb:c9:9f:d9:72:84:d1:0b:39:3b:89:93:27:65:e5:1c: e1:7c:0f:b0:37:90:a1:2c:d1:61:cd:75:a7:63:f5:38:28:41: 65:59:d0:38:1e:c2:f0:f3:bf:80:fa:c4:ad:37:ab:97:96:4c: ee:a5:d7:d1:6f:90:94:25:15:12:7c:6d:a4:45:92:71:74:2d: 4f:7e:58:88:2f:89:2e:41:d0:b6:6e:a2:49:a0:72:07:5c:16: ef:2c:e6:ad:62:4c:be:b9:b4:a8:5f:69:50:43:97:4c:12:06: ac:d8:fa:fa:25:74:fa:04:16:cb:4a:a5:ea:d6:7c:f1:8d:f1: 9b:5d:6f:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu0XQrRZH7tUeJdT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE3NTBmOGUtYTZjZS00YTNmLTgyNTctYmMxMjQ3OWE3 MmIxMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWMzNDc2YjItY2Y1OC00YjFlLWE2YjItMDc0NmQ0NjUyZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlujoZJKtGqSc5SArqmlvfm6XsnTZMqLLkn+Z 8vS7w8vcTHihAjBzWV/gw/6gsyYkdnyZgi4gMBIjvxfuQYCkmM8hlv4tzSgUCikK oOOYiLrsrk/kEmZCtxhpsjJTm6hBh+C7RAFg23mB5vJ6uh2isyyMq4PwS35oO/S8 Ix1TWda9fnV7wM+nfu1jvL6bsVMY4Ng7iraJYzilggOzc8ikSvm3ce2x9WWleoJq 6Ls2FTBA18q4r+s3Ou7qScs9pmWNz9RHbRftRJXA6QleghxT35sIg160ZHCuwCVS 6sgVQuwHQUfPdYljbHRDiI6qmVE4iQRzzBvDJPok3uQRldv0RQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJTxdB7gDcGgp1r5Jf24A1BGZMyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1 MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5YTcyYjEvZmVjNTU1NWQtZGI0Yy0z NmRkLThmNGQtMGFlZmU1NWRlMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE3NTBmOGUtYTZjZS00YTNmLTgy NTctYmMxMjQ3OWE3MmIxL2FhNzUwZjhlLWE2Y2UtNGEzZi04MjU3LWJjMTI0Nzlh NzJiMS5jcmwwHwYDVR0jBBgwFoAU1xaxPEXfQZrcKMrYsTDAy7qfxNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEy NDc5YTcyYjEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAp/1uMA4E AgACMAgDBgQmAvtrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqUOV6QFn/JI2hyD4DAjcu90WFCdD0hndt TwaL8EdaiODSxPhm18aZpTR843ILE2p4ql/VjWHyMERlQ5+pyxXq0TkHZ+lqTckW wP2bxQEAlBDhV627iNiwEXEl94Vi/KzCVgHPB0PKc4LSxrseh2dl6yB6AdVCi1Nn nDFaRlUn4bvJn9lyhNELOTuJkydl5RzhfA+wN5ChLNFhzXWnY/U4KEFlWdA4HsLw 87+A+sStN6uXlkzupdfRb5CUJRUSfG2kRZJxdC1PfliIL4kuQdC2bqJJoHIHXBbv LOatYky+ubSoX2lQQ5dMEgas2Pr6JXT6BBbLSqXq1nzxjfGbXW9y -----END CERTIFICATE-----Generated at Mon Nov 3 14:49:24 2025 by rpki-client