$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa File: e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa (raw, json) Hash identifier: v6RFfO9YusFYwPvRQeIzex9nYI96tIBZRYWed3K+pys= Subject key identifier: 3F:E2:B0:85:83:7F:24:AE:02:5F:54:39:11:36:14:34:19:98:FE:7D Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584B0A118F0D0193FD5D0B24D900 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 3258 IP address blocks: 167.253.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:8f:0d:01:93:fd:5d:0b:24:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=65cfca73-a03f-488c-9a36-d07089aca2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:3d:2f:db:35:25:86:e7:b0:93:2e:8d:95: f5:9b:52:8d:57:fb:83:f1:73:da:45:f9:df:2f:ae: 35:15:9a:43:1d:aa:3c:b1:68:6d:a0:5a:ca:75:86: aa:a9:94:42:42:af:35:b4:59:41:b8:39:5f:08:54: 7f:9e:af:14:d8:f7:68:a8:cf:b4:ab:ce:a4:cc:e6: e6:49:c4:72:60:af:7b:a1:c2:5f:87:5b:26:c2:71: 71:35:89:bf:14:33:51:a0:f5:5b:e6:c9:b3:26:6e: 7d:1c:2e:13:9d:5a:71:05:55:bb:dd:39:da:0f:e9: 6a:88:79:09:bd:c9:9b:ce:76:3f:84:ce:f2:77:59: 8c:25:d8:b9:a5:f8:84:ec:e4:c9:08:cd:d4:b4:71: 84:44:61:ed:4b:88:24:00:15:59:a1:40:44:82:56: 99:79:96:05:ba:1e:06:86:59:df:aa:8a:c5:49:4a: 79:47:d5:4f:b7:81:bc:66:c4:9e:a2:26:19:b5:ea: 14:99:20:ac:12:c1:73:88:37:ff:37:18:8d:ba:03: a2:1d:70:fc:c3:3d:28:4a:44:38:e2:10:0f:1b:09: 06:f1:e7:4f:33:44:c0:58:5b:27:b5:9f:fb:57:eb: af:c1:e4:97:6e:bf:d0:f3:0b:71:cf:13:22:ba:26: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:B0:85:83:7F:24:AE:02:5F:54:39:11:36:14:34:19:98:FE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 167.253.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:75:b9:b5:49:02:a4:70:80:7e:be:b0:d4:23:ab:1e:67:7f: 85:cb:27:f5:0f:2c:81:39:0d:ba:30:27:c2:b2:2e:0c:e0:b0: a6:c0:d8:07:eb:c7:a6:38:4a:20:21:95:66:52:78:26:ab:8c: 5b:38:43:dd:91:b3:c1:00:64:c3:05:0c:57:be:55:4a:ec:a2: 67:3a:16:a9:3d:05:45:b0:cf:0e:ba:90:c3:35:7e:5f:ee:3a: ff:1b:7f:ae:3b:c3:c4:93:d8:0e:be:c1:57:98:50:5f:69:e5: 55:d8:88:b1:93:5a:45:2f:bc:af:75:7f:08:91:21:a0:00:9e: 90:75:70:f5:70:c4:03:6f:91:ba:92:fc:2e:04:32:b9:c1:30: 3f:a0:56:4f:0b:30:76:37:a8:8d:b7:06:76:e5:75:a1:01:f7: dd:32:23:88:55:ae:96:9d:55:49:b1:67:85:44:fb:c7:0a:92: 0e:7f:0c:0e:95:75:e0:75:5d:f7:93:f6:6b:bb:26:6f:76:88: 78:56:d3:ce:b5:e3:1e:56:2c:61:d9:93:75:2a:a3:40:8a:2d: 94:a5:97:7d:3e:55:1c:b2:30:12:e7:f7:2b:b6:44:ff:b4:f9: 78:09:a5:a2:f3:da:41:c5:77:f2:9e:85:36:c2:e4:02:d7:4e: 81:de:bb:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEY8NAZP9XQsk2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NjVjZmNhNzMtYTAzZi00ODhjLTlhMzYtZDA3MDg5YWNhMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBg9L9s1JYbnsJMujZX1m1KNV/uD8XPaRfnf L641FZpDHao8sWhtoFrKdYaqqZRCQq81tFlBuDlfCFR/nq8U2PdoqM+0q86kzObm ScRyYK97ocJfh1smwnFxNYm/FDNRoPVb5smzJm59HC4TnVpxBVW73TnaD+lqiHkJ vcmbznY/hM7yd1mMJdi5pfiE7OTJCM3UtHGERGHtS4gkABVZoUBEglaZeZYFuh4G hlnfqorFSUp5R9VPt4G8ZsSeoiYZteoUmSCsEsFziDf/NxiNugOiHXD8wz0oSkQ4 4hAPGwkG8edPM0TAWFsntZ/7V+uvweSXbr/Q8wtxzxMiuiYtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/isIWDfySuAl9UORE2FDQZmP59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvZTEyZDRhNDQtMjk5YS0z YWE0LWIxNzAtYWU1NDcyYzE5YmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx1ubVJAqRwgH6+sNQjqx5nf4XLJ/UPLIE5DbowJ8KyLgzgsKbA2Afr x6Y4SiAhlWZSeCarjFs4Q92Rs8EAZMMFDFe+VUrsomc6Fqk9BUWwzw66kMM1fl/u Ov8bf647w8ST2A6+wVeYUF9p5VXYiLGTWkUvvK91fwiRIaAAnpB1cPVwxANvkbqS /C4EMrnBMD+gVk8LMHY3qI23BnbldaEB990yI4hVrpadVUmxZ4VE+8cKkg5/DA6V deB1XfeT9mu7Jm92iHhW08614x5WLGHZk3Uqo0CKLZSll30+VRyyMBLn9yu2RP+0 +XgJpaLz2kHFd/KehTbC5ALXToHeuxo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:27 2025 by rpki-client