$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json) Hash identifier: /xj7aFngbKvuWhZ29QWBzVhm9PnQY/ipouTOo9VjYKw= Subject key identifier: E4:14:E1:9C:32:76:9A:07:1A:CF:CE:65:5F:02:AB:BA:05:A6:AD:1D Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584ADECBC43078DC50429F62BD80 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 59253 IP address blocks: 167.253.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:c4:30:78:dc:50:42:9f:62:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=d3b44f0f-a247-4a95-902a-51c4a3332682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:16:a7:29:c4:cb:01:01:1e:dd:b7:1a:48:bb: 42:19:54:b0:dc:e8:84:81:88:5f:58:65:fa:32:74: 92:3b:f6:e9:d3:91:1b:7d:4a:ad:0c:51:31:78:86: df:36:49:f3:9f:9f:8e:27:23:d7:17:88:71:27:11: f5:f1:c4:ea:60:03:9f:8e:38:7c:b0:5e:bd:e6:7f: ec:64:aa:a5:e1:f7:18:ba:d4:6f:ea:23:73:29:2f: b7:be:ad:b1:11:f9:32:56:6c:9b:ca:ec:d5:18:12: 5f:a3:60:06:87:e5:20:5a:c2:27:94:0c:ee:d4:fa: 5a:f8:f7:14:0e:12:7e:37:29:32:da:54:99:99:e0: e9:6c:1f:72:f9:76:50:a3:c9:1c:e5:e6:cf:3b:18: 14:a0:70:90:f5:90:3e:1e:02:4e:6e:81:96:bd:30: f0:01:08:1f:cd:10:5a:4c:d8:e3:22:6c:fb:90:9c: 96:4c:a4:1d:39:b6:ea:08:f0:c2:58:4d:0e:24:a8: fb:39:53:10:d5:3c:b9:c3:af:a3:4d:9f:65:ef:8f: cc:43:f3:a2:5c:61:5b:04:b8:8f:4e:bf:91:4b:6c: 63:c2:f8:59:16:01:3f:7c:86:49:37:6f:a8:fa:40: 33:16:e5:a4:23:2a:ac:45:b0:d3:bb:a7:c0:ea:02: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:E1:9C:32:76:9A:07:1A:CF:CE:65:5F:02:AB:BA:05:A6:AD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:43:5c:e2:58:12:b7:38:ed:01:bf:43:bb:8b:f7:3e:d9:50: 89:57:3a:91:24:c3:49:f3:2e:9b:8c:10:95:e0:0f:71:5a:7f: 81:e8:4e:ff:aa:f6:57:c5:19:4f:16:5b:7d:81:b1:83:88:7d: d2:3c:84:be:16:ec:50:51:8c:73:63:55:58:1a:54:a9:52:af: 64:9e:52:4e:db:02:25:a0:59:cf:ba:a0:76:48:69:01:56:62: d5:60:68:67:61:d3:b3:53:94:68:2e:e1:ca:a4:15:5d:ad:91: d3:49:bd:9e:77:ee:b9:44:35:b8:b8:d6:2b:37:91:82:73:c6: 5b:b7:43:dd:a4:8a:a8:04:d6:71:07:09:92:17:7f:7a:15:06: 95:ff:d5:fb:7e:af:ba:aa:9d:e8:f4:0b:23:b9:bd:1c:93:8c: 53:82:00:1c:05:43:e8:11:31:04:b5:02:77:be:11:28:33:71: 6e:04:e5:05:6b:ef:68:06:af:0b:63:10:85:41:b8:91:46:e1: 2a:5a:ff:24:7f:1b:46:5c:14:cf:69:63:e5:bd:7c:47:2f:52: 13:d5:82:2a:a1:bc:ec:42:0a:89:47:0f:f3:23:11:89:73:4b: ab:70:77:c8:27:43:2d:72:5a:b5:79:b7:c7:25:8a:ea:2f:0c: 75:fe:61:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8QweNxQQp9ivYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDNiNDRmMGYtYTI0Ny00YTk1LTkwMmEtNTFjNGEzMzMyNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghanKcTLAQEe3bcaSLtCGVSw3OiEgYhfWGX6 MnSSO/bp05EbfUqtDFExeIbfNknzn5+OJyPXF4hxJxH18cTqYAOfjjh8sF695n/s ZKql4fcYutRv6iNzKS+3vq2xEfkyVmybyuzVGBJfo2AGh+UgWsInlAzu1Ppa+PcU DhJ+Nyky2lSZmeDpbB9y+XZQo8kc5ebPOxgUoHCQ9ZA+HgJOboGWvTDwAQgfzRBa TNjjImz7kJyWTKQdObbqCPDCWE0OJKj7OVMQ1Ty5w6+jTZ9l74/MQ/OiXGFbBLiP Tr+RS2xjwvhZFgE/fIZJN2+o+kAzFuWkIyqsRbDTu6fA6gJ7IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQU4ZwydpoHGs/OZV8Cq7oFpq0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtDXOJYErc47QG/Q7uL9z7ZUIlXOpEkw0nzLpuMEJXgD3Faf4HoTv+q 9lfFGU8WW32BsYOIfdI8hL4W7FBRjHNjVVgaVKlSr2SeUk7bAiWgWc+6oHZIaQFW YtVgaGdh07NTlGgu4cqkFV2tkdNJvZ537rlENbi41is3kYJzxlu3Q92kiqgE1nEH CZIXf3oVBpX/1ft+r7qqnej0CyO5vRyTjFOCABwFQ+gRMQS1Ane+ESgzcW4E5QVr 72gGrwtjEIVBuJFG4Spa/yR/G0ZcFM9pY+W9fEcvUhPVgiqhvOxCColHD/MjEYlz S6twd8gnQy1yWrV5t8cliuovDHX+YaA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:49 2025 by rpki-client