$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa File: 2a1f5a03-eb95-3489-80d4-971a6ad53336.roa (raw, json) Hash identifier: C8104o5vN9JuYaYhGjI5bo2oCInmf+kMb2PCRwNVTg4= Subject key identifier: 6C:79:DB:4E:69:11:AE:3D:51:A6:4A:9C:DD:76:07:8D:C8:2E:2E:48 Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584F8F3DEC008F4456308DFAB500 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 46887 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:ec:00:8f:44:56:30:8d:fa:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=76d58dcf-0aa5-4c3f-9424-d4e75d488975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:78:ee:d2:d9:c3:f5:45:01:0d:5b:23:db: 92:e9:e1:cf:c8:6a:8c:a7:7b:59:bb:e1:03:52:4e: 12:3d:d6:c9:02:2e:97:25:fe:d7:82:e8:fc:5c:b3: 4a:80:2e:44:cf:12:1e:59:a6:68:9b:63:65:e2:02: 9a:62:f5:6e:10:ca:fc:10:f8:ac:db:ec:9d:65:11: 4a:14:d4:6c:ee:27:da:5f:57:d5:10:8c:b2:73:34: ac:1a:20:c0:1d:86:bf:dc:e7:4c:58:68:a8:f2:9f: a0:54:62:d5:f2:8b:d4:5d:64:cc:7e:b8:73:6c:f6: dc:1f:74:20:66:13:91:2a:f4:1c:96:38:3b:55:44: 11:fe:3e:e0:2b:d9:5b:3d:fe:3a:74:a1:01:43:9a: ad:7d:1b:81:ae:80:9f:fc:cb:d4:a6:ee:31:7d:23: 3f:86:99:59:87:eb:c5:c9:38:b7:4b:02:3f:e2:1f: 60:8f:f8:11:cc:8c:85:77:62:6e:63:aa:34:80:d3: 25:7c:10:f9:54:0d:5c:32:43:e8:ef:c1:cd:5f:12: 31:27:42:89:ac:d1:ae:a3:9c:b2:fe:4c:45:5b:cd: 39:3d:67:c9:fc:96:7b:15:af:f6:cd:54:75:c1:fd: 0c:c6:37:ec:62:14:01:95:1e:2c:f9:c3:8c:0f:ea: 68:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:79:DB:4E:69:11:AE:3D:51:A6:4A:9C:DD:76:07:8D:C8:2E:2E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/2a1f5a03-eb95-3489-80d4-971a6ad53336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a7:ef:39:5d:27:6d:59:40:50:5f:ad:49:ec:c9:8b:26:a8: ba:6a:57:af:7f:d2:12:99:f6:89:22:15:d2:d4:c7:b6:ce:4c: 0d:05:74:99:f7:05:ab:98:db:ea:e9:d4:7c:73:21:99:8b:cf: 5f:30:5c:4e:04:f3:a1:0e:60:fe:7c:cf:5a:9f:91:37:e5:c9: e9:f4:9a:fe:87:33:e4:0d:01:80:00:b1:7f:69:b8:3c:24:35: ac:86:05:a3:c8:8f:f0:e8:74:55:77:7c:8f:40:37:91:43:e3: bd:09:84:1c:06:f3:16:98:e1:eb:73:dc:2b:e7:f6:62:08:e0: 8f:9d:07:3e:e0:7b:5f:32:1f:b4:f0:ed:04:34:c4:af:bd:8d: 3f:44:65:97:89:31:98:55:b3:27:3b:dc:71:a1:e4:22:81:e9: 32:60:bd:f7:0b:60:db:e6:6c:40:00:50:40:14:94:ba:4d:54: 02:1c:c5:dd:23:44:58:2d:bb:fb:95:6a:6e:4c:96:25:5d:96: 2d:cc:f1:31:57:83:8a:ff:e4:19:35:3d:28:51:57:96:1a:8d: 85:57:8c:0f:7b:27:ee:52:46:d7:65:50:eb:fd:82:39:79:16: bc:77:4b:3b:ad:95:9f:24:8d:81:8f:9b:c9:a4:0b:0e:59:27: b0:12:f0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPewAj0RWMI36tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NzZkNThkY2YtMGFhNS00YzNmLTk0MjQtZDRlNzVkNDg4OTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kd47tLZw/VFAQ1bI9uS6eHPyGqMp3tZu+ED Uk4SPdbJAi6XJf7Xguj8XLNKgC5EzxIeWaZom2Nl4gKaYvVuEMr8EPis2+ydZRFK FNRs7ifaX1fVEIyyczSsGiDAHYa/3OdMWGio8p+gVGLV8ovUXWTMfrhzbPbcH3Qg ZhORKvQcljg7VUQR/j7gK9lbPf46dKEBQ5qtfRuBroCf/MvUpu4xfSM/hplZh+vF yTi3SwI/4h9gj/gRzIyFd2JuY6o0gNMlfBD5VA1cMkPo78HNXxIxJ0KJrNGuo5yy /kxFW805PWfJ/JZ7Fa/2zVR1wf0MxjfsYhQBlR4s+cOMD+pocwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx5205pEa49UaZKnN12B43ILi5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvMmExZjVhMDMtZWI5NS0z NDg5LTgwZDQtOTcxYTZhZDUzMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADin7zldJ21ZQFBfrUnsyYsmqLpqV69/0hKZ9okiFdLUx7bOTA0FdJn3 BauY2+rp1HxzIZmLz18wXE4E86EOYP58z1qfkTflyen0mv6HM+QNAYAAsX9puDwk NayGBaPIj/DodFV3fI9AN5FD470JhBwG8xaY4etz3Cvn9mII4I+dBz7ge18yH7Tw 7QQ0xK+9jT9EZZeJMZhVsyc73HGh5CKB6TJgvfcLYNvmbEAAUEAUlLpNVAIcxd0j RFgtu/uVam5MliVdli3M8TFXg4r/5Bk1PShRV5YajYVXjA97J+5SRtdlUOv9gjl5 Frx3SzutlZ8kjYGPm8mkCw5ZJ7AS8Ow= -----END CERTIFICATE-----Generated at Thu Oct 29 13:52:39 2026 by rpki-client