$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa File: d2f2610a-a62c-3b03-99f9-138214533fcd.roa (raw, json) Hash identifier: 7b++vhgcxouXZNrSesVySZce9rhr/xJg0NKbO6M/TNE= Subject key identifier: 87:CE:E9:3F:0E:ED:AC:74:E7:70:89:21:8E:43:FF:69:63:D2:86:D7 Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584B8BE227CE2514DC7B356F9E00 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 397666 IP address blocks: 167.253.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:27:ce:25:14:dc:7b:35:6f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=bb46b4a5-4fb7-400c-991e-183957c262fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:e3:13:eb:19:c4:0c:68:39:fa:05:2a:11: e6:20:4f:ac:e2:7b:00:83:88:ee:77:9e:e3:9c:54: 23:7f:dd:51:13:c7:69:2c:5f:f9:8a:03:b8:b2:7b: fb:6d:e4:86:30:7e:a7:66:f0:2d:23:88:5e:87:56: df:21:9c:9c:77:f2:25:8c:d2:85:dc:62:89:3b:78: 0f:35:b3:fb:4f:81:21:52:a3:43:e2:85:bc:cf:31: 91:5a:c3:3e:74:5f:db:70:c4:c8:15:2b:ed:c3:d5: 1b:7c:2e:b1:1d:cb:6d:ec:4f:9a:ec:ed:a3:3f:ac: 67:cb:6f:c9:d8:ac:b0:21:6e:51:70:c1:8f:c3:c8: b5:7a:e1:f1:9a:c6:b3:e6:72:bc:35:2f:8e:73:5d: 89:c9:0b:a3:d3:3f:05:c9:be:5a:ef:62:05:c6:8f: 8f:00:1a:32:07:00:b7:6e:2a:a1:ab:7f:6c:34:da: 75:55:82:64:97:7d:1e:95:dd:cd:e1:7e:8f:8c:75: fb:2d:bc:56:f2:7c:7f:3e:8b:4d:87:60:ca:21:09: 17:6c:00:53:61:8f:79:58:3a:c0:16:0e:2b:92:ba: 6f:34:50:9a:3c:cf:93:3e:ab:7e:71:56:f1:0a:ad: 86:2c:26:4c:7e:a1:28:a4:20:3e:1a:03:48:d4:9d: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CE:E9:3F:0E:ED:AC:74:E7:70:89:21:8E:43:FF:69:63:D2:86:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d2f2610a-a62c-3b03-99f9-138214533fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 167.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:5c:bf:23:65:1e:b9:5e:09:84:d2:6c:e5:eb:e7:df:d2: 0e:39:44:63:71:58:83:3d:f5:c5:dc:4c:40:f4:16:42:2f:46: 15:bf:37:d0:0f:81:6d:53:17:94:1a:fe:0a:95:b4:d9:9f:18: e8:3b:c4:56:2d:bb:d3:ba:66:b3:c5:90:80:17:14:d5:8c:5d: 38:c9:e3:34:41:c0:28:4e:86:62:8b:93:00:d2:23:51:0d:1d: 10:c1:51:86:b3:08:c7:4f:f9:32:e6:72:09:78:47:fa:b8:ce: 27:d1:dd:1e:f6:02:f4:60:3b:aa:64:ea:a9:b4:e2:cc:31:2f: 48:79:35:c7:1d:c3:88:34:5b:33:c7:eb:72:63:83:36:a7:ef: 98:e8:ef:2d:0e:87:5f:5c:3b:15:cc:b7:0f:ed:fe:54:a1:c9: 42:24:72:ad:5c:b9:27:7c:ef:2d:3d:09:9d:47:43:50:c2:97: 0d:2e:f4:f5:13:98:f8:6c:55:4b:ac:58:5f:19:e3:34:94:70: dc:a3:b8:21:6f:0a:e4:f9:07:68:43:84:38:52:64:83:49:f2: 5d:8e:53:de:25:f5:63:0e:04:3f:79:f9:22:1b:07:fa:6b:0e: 83:21:e2:7b:4a:44:32:53:9f:f9:31:6d:5b:de:86:e3:0d:50: 58:5c:ab:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ifOJRTcezVvngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YmI0NmI0YTUtNGZiNy00MDBjLTk5MWUtMTgzOTU3YzI2MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW/jE+sZxAxoOfoFKhHmIE+s4nsAg4jud57j nFQjf91RE8dpLF/5igO4snv7beSGMH6nZvAtI4heh1bfIZycd/IljNKF3GKJO3gP NbP7T4EhUqND4oW8zzGRWsM+dF/bcMTIFSvtw9UbfC6xHctt7E+a7O2jP6xny2/J 2KywIW5RcMGPw8i1euHxmsaz5nK8NS+Oc12JyQuj0z8Fyb5a72IFxo+PABoyBwC3 biqhq39sNNp1VYJkl30eld3N4X6PjHX7LbxW8nx/PotNh2DKIQkXbABTYY95WDrA Fg4rkrpvNFCaPM+TPqt+cVbxCq2GLCZMfqEopCA+GgNI1J0O0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfO6T8O7ax053CJIY5D/2lj0obXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvZDJmMjYxMGEtYTYyYy0z YjAzLTk5ZjktMTM4MjE0NTMzZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDXL8jZR65XgmE0mzl6+ff0g45RGNxWIM99cXcTED0FkIvRhW/N9AP gW1TF5Qa/gqVtNmfGOg7xFYtu9O6ZrPFkIAXFNWMXTjJ4zRBwChOhmKLkwDSI1EN HRDBUYazCMdP+TLmcgl4R/q4zifR3R72AvRgO6pk6qm04swxL0h5Nccdw4g0WzPH 63Jjgzan75jo7y0Oh19cOxXMtw/t/lShyUIkcq1cuSd87y09CZ1HQ1DClw0u9PUT mPhsVUusWF8Z4zSUcNyjuCFvCuT5B2hDhDhSZINJ8l2OU94l9WMOBD95+SIbB/pr DoMh4ntKRDJTn/kxbVvehuMNUFhcq4w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:41:08 2025 by rpki-client