$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa File: 352d2a14-7375-334b-9c60-edebec362279.roa (raw, json) Hash identifier: vpJpPm8WyKIHx7DQWLLE6kBvE4gunQ0JCgbzxz5Lhw8= Subject key identifier: 09:3E:56:B4:C7:D2:5A:71:DB:54:51:18:35:A9:1E:5D:BD:B5:8E:EB Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F4976BD031524B090A8B6F3C0 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399275 IP address blocks: 167.253.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:bd:03:15:24:b0:90:a8:b6:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5348d59d-7e64-496d-bb92-e47261fef160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:70:60:60:ce:37:1d:6f:f8:a9:b6:53:72: f0:25:9e:85:75:19:81:46:4e:64:27:66:88:8a:85: 10:2f:93:24:1f:a0:a0:6f:38:0c:14:40:06:a0:3d: 10:a0:5b:57:d8:66:94:91:8a:fc:f9:5c:9f:ea:c9: 82:fc:c5:92:09:3a:28:77:d4:91:37:36:f9:31:e0: 28:33:a4:42:be:dd:09:26:97:f9:fe:2c:05:fc:e2: 01:d4:60:81:d3:61:98:eb:5a:5d:6a:bf:cc:9f:61: 6e:2b:1c:dc:90:2b:f7:d5:bf:f7:64:7d:ad:8d:4a: 45:2c:58:86:73:81:65:f3:70:23:e8:f5:54:e3:32: 84:fb:f9:0a:04:74:32:15:97:3e:35:7d:c5:b7:0d: 0b:74:83:4a:0f:bc:30:44:a2:14:02:bb:f3:6e:67: e3:71:26:66:61:10:de:97:a5:9b:53:93:7f:8c:1d: ef:92:a3:cb:95:c2:86:1b:20:ea:9d:5f:ed:b5:6e: 72:c1:d5:e2:dd:fa:76:dd:12:ec:dc:71:13:0d:d5: 0a:3d:01:39:04:8b:a6:1a:77:e2:ed:84:c2:a7:ce: 14:7d:f7:17:e6:83:6d:0b:22:9d:55:8d:cd:db:49: 57:e4:75:a6:67:59:5a:c4:53:d3:e8:34:de:6b:f5: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:56:B4:C7:D2:5A:71:DB:54:51:18:35:A9:1E:5D:BD:B5:8E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/352d2a14-7375-334b-9c60-edebec362279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9f:4d:d6:9b:8b:30:67:48:15:16:10:17:b9:e4:35:0a:4c: 55:94:ed:a7:d6:63:29:e2:07:0e:a2:97:95:02:ba:fa:ee:d4: 67:f2:5d:a8:1b:6b:1a:b5:08:25:4e:18:44:d2:58:b6:09:e8: 80:c0:27:d4:2b:82:3c:bf:48:ad:30:d6:a8:25:2f:c7:66:2c: 70:b0:51:c7:22:18:8f:92:c9:a5:c4:79:ee:b7:3d:a1:42:30: 24:e3:18:4a:6f:4d:a6:ca:0d:d9:1c:3f:5f:15:c9:ed:f8:0f: d6:04:61:19:90:86:0c:5e:dc:a0:ec:29:eb:c5:b3:31:85:1b: f0:65:89:f4:cf:e4:69:66:e1:8c:6e:37:2a:6b:4a:5a:ff:0e: d1:89:c6:00:a1:6c:47:e0:26:ed:2d:20:75:60:9d:a6:ca:cc: db:a4:a8:4a:e2:c1:8a:70:10:b1:bf:6a:82:7f:4d:3d:7c:c8: 9b:f6:eb:33:c2:e3:ed:54:e1:74:6a:7a:9d:34:a6:65:01:bb: aa:85:3c:20:90:ca:4c:84:0f:81:2a:3c:6f:25:41:54:30:34: ff:a9:70:61:fb:72:9f:73:42:46:76:9c:97:b8:f0:2a:57:35: 5f:34:e3:94:b1:34:bc:5b:af:1d:e4:8d:b0:90:ee:b8:69:fe: 51:bd:2c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdr0DFSSwkKi288AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTM0OGQ1OWQtN2U2NC00OTZkLWJiOTItZTQ3MjYxZmVmMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0NwYGDONx1v+Km2U3LwJZ6FdRmBRk5kJ2aI ioUQL5MkH6CgbzgMFEAGoD0QoFtX2GaUkYr8+Vyf6smC/MWSCTood9SRNzb5MeAo M6RCvt0JJpf5/iwF/OIB1GCB02GY61pdar/Mn2FuKxzckCv31b/3ZH2tjUpFLFiG c4Fl83Aj6PVU4zKE+/kKBHQyFZc+NX3Ftw0LdINKD7wwRKIUArvzbmfjcSZmYRDe l6WbU5N/jB3vkqPLlcKGGyDqnV/ttW5ywdXi3fp23RLs3HETDdUKPQE5BIumGnfi 7YTCp84UffcX5oNtCyKdVY3N20lX5HWmZ1laxFPT6DTea/Wd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk+VrTH0lpx21RRGDWpHl29tY7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMzUyZDJhMTQtNzM3NS0z MzRiLTljNjAtZWRlYmVjMzYyMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOfTdabizBnSBUWEBe55DUKTFWU7afWYyniBw6il5UCuvru1GfyXagb axq1CCVOGETSWLYJ6IDAJ9Qrgjy/SK0w1qglL8dmLHCwUcciGI+SyaXEee63PaFC MCTjGEpvTabKDdkcP18Vye34D9YEYRmQhgxe3KDsKevFszGFG/BlifTP5Glm4Yxu NyprSlr/DtGJxgChbEfgJu0tIHVgnabKzNukqEriwYpwELG/aoJ/TT18yJv26zPC 4+1U4XRqep00pmUBu6qFPCCQykyED4EqPG8lQVQwNP+pcGH7cp9zQkZ2nJe48CpX NV8045SxNLxbrx3kjbCQ7rhp/lG9LGo= -----END CERTIFICATE-----Generated at Tue Oct 13 20:45:13 2026 by rpki-client