$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa File: c367d924-e3c1-33d4-83e2-cb8162da53f8.roa (raw, json) Hash identifier: xnM1iaVt+WmUX+YroJCLJPePHdzoN/fANR7V+AXa6Jg= Subject key identifier: 7A:37:A6:5A:8A:92:8E:B7:3D:7D:13:4A:0D:DC:04:3D:3E:3B:F2:C2 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F4328584AEE65D509C590C6248655A0C0 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa Signing time: Thu 21 Aug 2025 15:08:20 +0000 ROA not before: Thu 21 Aug 2025 15:08:20 +0000 ROA not after: Wed 19 Nov 2025 16:08:20 +0000 asID: 63150 IP address blocks: 167.253.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:65:d5:09:c5:90:c6:24:86:55:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Aug 21 15:08:20 2025 GMT Not After : Nov 19 16:08:20 2025 GMT Subject: CN=ea3899cb-87e7-42cb-a820-068d8e0424a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:dd:67:8e:75:aa:d0:ac:88:66:2d:6b:7a: e4:07:3b:36:99:38:d7:52:15:56:3c:e4:a6:96:bf: b5:20:2f:56:5b:1e:87:d0:40:4c:45:89:fb:96:10: a7:bf:5d:d3:0d:b6:5f:7a:0d:ca:e9:13:ff:ea:ee: 0c:be:38:39:dd:65:d2:9f:8e:0f:7d:dd:b4:9f:f2: e8:8a:b8:11:e9:d7:30:ae:42:58:9d:15:e4:8f:df: c2:b5:66:42:5b:2c:a9:d2:9f:76:72:17:64:90:93: 8c:a0:75:bf:8d:9d:63:a7:11:c2:3a:d4:c9:60:96: 90:7a:65:6b:73:ed:73:1f:35:5f:a0:65:ee:e4:8e: 5d:60:52:b3:9a:54:3a:c3:ca:62:45:fd:76:12:29: 2f:11:51:f0:f8:59:1e:44:63:48:31:c1:26:2b:8c: bf:9f:ca:1e:12:93:44:25:f2:17:c8:db:84:3f:a2: 03:07:d8:c2:49:53:b3:8d:fb:17:8b:0d:65:2c:9d: 36:f4:e4:cd:03:9b:71:dd:b7:91:e3:8c:4c:2e:b7: 46:7a:74:26:dd:72:56:c7:79:fa:b6:a1:86:4a:24: 2b:1f:70:df:71:f2:2a:68:69:ed:28:e4:d8:af:10: c0:4b:e1:af:c9:8a:50:ae:eb:5f:6b:f4:fe:cd:5d: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:37:A6:5A:8A:92:8E:B7:3D:7D:13:4A:0D:DC:04:3D:3E:3B:F2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 167.253.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:33:08:37:f5:4d:ef:aa:50:d4:d7:66:c3:b4:a5:90:18:42: 96:7d:52:f5:6c:e8:bf:71:52:1f:ad:c3:da:15:f4:f5:b1:de: c9:01:aa:12:ee:3f:d3:7c:2d:77:d9:76:20:5f:a8:c8:15:48: 83:63:18:2b:e2:00:39:f4:4d:26:3c:43:5b:75:4b:ce:bc:d1: 4c:0f:53:79:1d:bf:56:a2:6d:b0:db:9f:4b:1b:92:1a:15:86: 80:28:4f:56:46:d1:04:2c:7f:7b:5c:2c:ed:f6:f4:ed:6c:ef: b5:e8:4d:6d:d6:83:7d:4e:9b:c3:09:be:01:cb:b4:92:df:7b: 03:ac:8c:ba:16:bb:d8:fc:19:54:e1:5a:24:48:c8:5b:ff:78: e4:e1:93:89:e6:aa:57:2c:0c:ae:26:d3:63:40:21:59:6f:d3: 88:3a:fe:f3:83:8f:7c:a5:53:23:8b:11:ba:7f:12:89:d5:ce: 0d:4c:32:6f:71:f8:f9:a3:32:22:b6:5f:6b:9c:20:8f:68:1e: 53:fa:0e:5d:ed:63:82:8f:15:74:c4:08:a5:48:a8:88:81:52: cc:65:b1:06:93:d6:df:f7:46:65:db:dc:30:1f:fc:71:b0:9e: 45:c4:2a:72:1b:1e:d3:a4:fd:87:2d:cc:70:06:ea:e5:4c:3e: ac:b2:4c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruZdUJxZDGJIZVoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI1MDgyMTE1MDgyMFoXDTI1MTExOTE2MDgyMFowLzEtMCsGA1UEAxMk ZWEzODk5Y2ItODdlNy00MmNiLWE4MjAtMDY4ZDhlMDQyNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuXdZ451qtCsiGYta3rkBzs2mTjXUhVWPOSm lr+1IC9WWx6H0EBMRYn7lhCnv13TDbZfeg3K6RP/6u4Mvjg53WXSn44Pfd20n/Lo irgR6dcwrkJYnRXkj9/CtWZCWyyp0p92chdkkJOMoHW/jZ1jpxHCOtTJYJaQemVr c+1zHzVfoGXu5I5dYFKzmlQ6w8piRf12EikvEVHw+FkeRGNIMcEmK4y/n8oeEpNE JfIXyNuEP6IDB9jCSVOzjfsXiw1lLJ029OTNA5tx3beR44xMLrdGenQm3XJWx3n6 tqGGSiQrH3DfcfIqaGntKOTYrxDAS+GvyYpQrutfa/T+zV2PnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo3plqKko63PX0TSg3cBD0+O/LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvYzM2N2Q5MjQtZTNjMS0z M2Q0LTgzZTItY2I4MTYyZGE1M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMzCDf1Te+qUNTXZsO0pZAYQpZ9UvVs6L9xUh+tw9oV9PWx3skBqhLu P9N8LXfZdiBfqMgVSINjGCviADn0TSY8Q1t1S8680UwPU3kdv1aibbDbn0sbkhoV hoAoT1ZG0QQsf3tcLO329O1s77XoTW3Wg31Om8MJvgHLtJLfewOsjLoWu9j8GVTh WiRIyFv/eOThk4nmqlcsDK4m02NAIVlv04g6/vODj3ylUyOLEbp/EonVzg1MMm9x +PmjMiK2X2ucII9oHlP6Dl3tY4KPFXTECKVIqIiBUsxlsQaT1t/3RmXb3DAf/HGw nkXEKnIbHtOk/YctzHAG6uVMPqyyTMU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:16 2025 by rpki-client