$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa File: 7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa (raw, json) Hash identifier: +SraLeqWsqq3Jen5wkHPGrdlhm8zB7Mx1sxopYmHOVA= Subject key identifier: 01:60:AA:89:43:F9:AD:5C:02:8B:7E:2D:78:D2:C1:C7:D5:4F:F2:76 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584EC0A729FADF9EE192D3DD2380 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 399275 IP address blocks: 167.253.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:29:fa:df:9e:e1:92:d3:dd:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=5ca6e31f-793a-4361-8526-82e1740c8c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:1e:e5:5f:f7:69:6c:1a:a3:d6:62:ea:1c: dc:38:ba:5d:28:92:64:5c:89:78:be:42:8c:5a:a7: db:42:83:40:d8:e3:d5:8c:96:11:a3:99:06:61:58: 38:19:9d:d1:01:e2:2e:17:b9:02:ae:4a:6e:9f:98: eb:f6:9c:31:08:f8:d2:36:55:09:7e:b6:f2:d6:6f: 8d:8a:ef:4f:ff:3f:ea:7a:b1:c2:8e:b5:3e:53:b4: 86:e9:8b:c0:74:72:42:f5:a8:a6:29:a8:5e:f0:d0: ae:39:3e:29:64:ac:df:36:80:0f:66:ee:2c:ac:78: 9d:e8:51:47:08:3e:1b:20:a6:65:b4:79:4c:f2:e7: 13:dc:10:5b:3e:f7:80:77:4f:70:d3:33:ed:fd:8f: be:80:84:6e:af:f2:44:db:3c:b4:bf:91:68:4c:1c: 1f:7d:78:38:30:f1:74:7f:05:1d:dd:de:c9:05:0b: 1a:4e:9f:e5:fd:ca:85:32:1f:dd:07:9d:8f:9d:a2: 6c:30:e6:d8:6f:e3:5e:ee:26:f8:54:78:f4:f7:9b: f1:3b:7b:54:88:a6:bd:fc:bf:7b:37:73:ba:ab:ec: ba:97:28:04:6d:20:57:1e:97:86:7b:d8:37:44:dd: bc:08:a6:32:bc:96:10:75:77:38:9a:d1:16:6c:6c: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:60:AA:89:43:F9:AD:5C:02:8B:7E:2D:78:D2:C1:C7:D5:4F:F2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/7e9cfeb7-4848-37a6-a317-60bfded7b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 167.253.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0a:bb:b6:fd:85:4a:a9:7a:87:c8:81:54:14:0e:c8:a4:31: 42:7b:41:10:81:bd:ae:19:54:3b:30:39:3f:11:b5:1b:89:80: 4d:42:43:67:a7:e8:7f:f1:a5:26:d1:f9:d7:f5:40:de:bf:39: ac:30:43:ff:db:ea:20:a1:75:f5:e3:b2:2a:e7:6d:28:dd:da: 82:2c:70:68:3f:75:31:6f:9c:a1:27:0e:f9:e5:1d:1a:ef:ad: 7a:84:54:65:e3:ba:52:ff:95:58:61:a0:30:b5:78:6b:83:60: 60:d9:49:bf:4e:37:41:79:3c:2c:b2:cf:87:7d:c9:6b:c9:4b: f5:bb:78:e6:e0:98:ca:a7:aa:25:ad:c5:45:a5:3b:31:8f:c9: 59:1f:e2:33:ba:c2:2c:5c:26:e5:e2:bd:d5:4d:46:fb:af:28: 15:39:87:44:29:2f:a2:54:25:37:a2:bf:b6:e7:13:18:74:25: 7a:a6:24:4b:71:40:94:df:64:75:cd:8b:26:02:cb:fb:26:98: bb:b3:7a:63:45:8d:d5:1d:c1:e4:b9:1f:89:4b:2f:6b:19:d2: f3:7f:73:5a:05:b2:e8:8a:bf:09:ec:24:b1:7a:17:61:e5:c6: 60:67:fd:fb:4c:68:a6:fd:da:6c:d3:9f:aa:8c:b5:7f:b4:0f: 0f:af:9f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apyn6357hktPdI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NWNhNmUzMWYtNzkzYS00MzYxLTg1MjYtODJlMTc0MGM4YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYe5V/3aWwao9Zi6hzcOLpdKJJkXIl4vkKM WqfbQoNA2OPVjJYRo5kGYVg4GZ3RAeIuF7kCrkpun5jr9pwxCPjSNlUJfrby1m+N iu9P/z/qerHCjrU+U7SG6YvAdHJC9aimKahe8NCuOT4pZKzfNoAPZu4srHid6FFH CD4bIKZltHlM8ucT3BBbPveAd09w0zPt/Y++gIRur/JE2zy0v5FoTBwffXg4MPF0 fwUd3d7JBQsaTp/l/cqFMh/dB52PnaJsMObYb+Ne7ib4VHj095vxO3tUiKa9/L97 N3O6q+y6lygEbSBXHpeGe9g3RN28CKYyvJYQdXc4mtEWbGwcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFgqolD+a1cAot+LXjSwcfVT/J2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvN2U5Y2ZlYjctNDg0OC0z N2E2LWEzMTctNjBiZmRlZDdiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAKu7b9hUqpeofIgVQUDsikMUJ7QRCBva4ZVDswOT8RtRuJgE1CQ2en 6H/xpSbR+df1QN6/OawwQ//b6iChdfXjsirnbSjd2oIscGg/dTFvnKEnDvnlHRrv rXqEVGXjulL/lVhhoDC1eGuDYGDZSb9ON0F5PCyyz4d9yWvJS/W7eObgmMqnqiWt xUWlOzGPyVkf4jO6wixcJuXivdVNRvuvKBU5h0QpL6JUJTeiv7bnExh0JXqmJEtx QJTfZHXNiyYCy/smmLuzemNFjdUdweS5H4lLL2sZ0vN/c1oFsuiKvwnsJLF6F2Hl xmBn/ftMaKb92mzTn6qMtX+0Dw+vn6k= -----END CERTIFICATE-----Generated at Thu Aug 27 17:00:52 2026 by rpki-client