$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa File: 7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa (raw, json) Hash identifier: rYydIKar/S6VI7Qc2PkasDYwCceUfotJeocztYfv39A= Subject key identifier: E2:E4:C5:83:80:95:1C:50:0C:98:31:55:42:9F:79:FA:15:C5:95:EA Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F6292DD7D5F8BC8145973E140 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 399275 IP address blocks: 167.253.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:dd:7d:5f:8b:c8:14:59:73:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=86be29eb-6013-4e20-a28c-73bab496d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:95:8b:19:19:a1:be:6f:53:81:65:e0:76: b1:81:5b:c7:8a:a5:af:a5:a8:f0:aa:db:d5:59:83: 1e:d5:0a:2b:6d:8e:ea:a6:2a:3b:27:c4:3f:0e:ed: a5:3c:2c:4a:90:5a:14:c8:95:c0:a1:da:97:9d:b2: e1:98:df:32:ec:1c:18:92:c9:25:9d:3c:ef:94:b3: f3:bb:c0:92:82:89:34:a1:ed:5e:54:ae:16:e2:76: 1b:ff:6a:d1:73:c6:a9:58:32:c6:c0:cc:d4:1a:c3: 46:40:b0:25:dc:b2:38:38:08:5b:6a:00:72:87:33: 33:a3:ab:6f:11:36:db:96:f9:c4:83:f1:c8:2a:fd: b3:47:71:e9:35:96:82:3c:f6:59:97:5b:ce:9b:73: f8:be:60:47:10:b8:bd:98:47:98:c5:4e:a2:d3:b7: d5:4b:be:b3:f7:a9:f2:93:49:bb:61:4c:a1:2b:3d: 84:b7:35:0c:cc:24:25:1d:b0:f6:9a:7a:0e:f3:9d: 76:ea:e6:2f:51:19:7b:fb:82:56:6b:b3:4b:ed:f1: f6:b4:61:78:47:11:78:c0:b6:e8:e6:20:2c:0f:c2: 63:e2:04:ae:d3:5b:a3:36:9a:90:8b:2e:20:bb:fe: 10:6f:d5:89:33:64:c2:ff:60:fa:e0:5a:05:fb:58: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:C5:83:80:95:1C:50:0C:98:31:55:42:9F:79:FA:15:C5:95:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:82:6f:6d:62:55:85:78:e4:b7:04:28:c9:6e:1b:ac:ca:be: 09:35:3c:3e:8f:ff:4c:66:ec:a9:8a:9d:e1:11:58:63:26:bb: 54:84:cf:f4:9a:c3:b1:e7:e2:3c:32:41:79:9b:a4:96:52:1c: 2a:41:35:c0:60:dd:00:07:cb:12:2c:11:b2:29:68:da:eb:7e: 2a:b7:9e:32:ca:eb:2f:30:8c:d8:16:db:24:4e:88:29:92:bb: d9:80:47:6c:b5:d1:5d:6a:e6:78:8b:52:7d:09:a4:56:1e:06: a3:2f:4d:be:54:94:4f:21:8d:c6:62:85:90:77:4f:19:eb:81: f1:34:05:6e:54:3d:f0:b9:a6:bd:3c:60:0a:93:ba:3f:d6:3f: 4c:d2:b6:f6:58:15:fb:6b:59:ba:37:57:aa:9f:56:36:55:19: 5d:f1:1e:6c:d7:b0:75:ea:df:72:c7:e4:68:bd:6b:b5:28:dc: e6:a4:87:69:2c:fa:23:b2:cc:d6:e4:2c:fb:5f:ab:28:c9:00: b9:61:0c:a3:6b:3d:d6:c5:96:da:59:b2:89:58:d0:75:6e:47: 81:89:71:c7:88:9a:b3:30:d8:1f:38:52:f3:fa:59:5b:ce:1a: fe:3c:35:e3:6d:fd:09:1e:63:dd:7a:84:8f:54:af:d2:b5:a6: 3f:ee:c2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikt19X4vIFFlz4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ODZiZTI5ZWItNjAxMy00ZTIwLWEyOGMtNzNiYWI0OTZkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT6VixkZob5vU4Fl4HaxgVvHiqWvpajwqtvV WYMe1QorbY7qpio7J8Q/Du2lPCxKkFoUyJXAodqXnbLhmN8y7BwYksklnTzvlLPz u8CSgok0oe1eVK4W4nYb/2rRc8apWDLGwMzUGsNGQLAl3LI4OAhbagByhzMzo6tv ETbblvnEg/HIKv2zR3HpNZaCPPZZl1vOm3P4vmBHELi9mEeYxU6i07fVS76z96ny k0m7YUyhKz2EtzUMzCQlHbD2mnoO85126uYvURl7+4JWa7NL7fH2tGF4RxF4wLbo 5iAsD8Jj4gSu01ujNpqQiy4gu/4Qb9WJM2TC/2D64FoF+1jEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLkxYOAlRxQDJgxVUKfefoVxZXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvN2U5Y2ZlYjctNDg0OC0z N2E2LWEzMTctNjBiZmRlZDdiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeCb21iVYV45LcEKMluG6zKvgk1PD6P/0xm7KmKneERWGMmu1SEz/Sa w7Hn4jwyQXmbpJZSHCpBNcBg3QAHyxIsEbIpaNrrfiq3njLK6y8wjNgW2yROiCmS u9mAR2y10V1q5niLUn0JpFYeBqMvTb5UlE8hjcZihZB3TxnrgfE0BW5UPfC5pr08 YAqTuj/WP0zStvZYFftrWbo3V6qfVjZVGV3xHmzXsHXq33LH5Gi9a7Uo3Oakh2ks +iOyzNbkLPtfqyjJALlhDKNrPdbFltpZsolY0HVuR4GJcceImrMw2B84UvP6WVvO Gv48NeNt/QkeY916hI9Ur9K1pj/uwrI= -----END CERTIFICATE-----Generated at Mon Oct 12 00:55:31 2026 by rpki-client