$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa File: c367d924-e3c1-33d4-83e2-cb8162da53f8.roa (raw, json) Hash identifier: q4VuNrQuMVhaXkCPLblJtsyflXGSsu7OLwg+jza1bjM= Subject key identifier: 68:F7:B2:D7:71:50:DA:A9:C1:F8:C0:F5:F2:86:23:1B:37:45:AB:25 Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Certificate serial: 010D0C9F4328584F11A141610AAB8F227A6E3050 Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 63150 IP address blocks: 167.253.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:41:61:0a:ab:8f:22:7a:6e:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ff838648-1624-4ddb-a96a-89db95f4ae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:74:27:c3:8b:63:af:3c:f0:3d:8a:a8:be: 99:fb:33:45:b6:02:00:fa:68:46:7f:41:fe:c9:6d: 3b:22:eb:14:e2:ec:c5:f8:f0:03:e2:be:43:47:64: d3:a1:52:c2:b6:93:9a:08:fe:0d:5e:73:2f:84:19: 12:9f:db:52:f5:06:78:ef:0d:b7:25:59:90:05:0c: cc:97:84:31:8e:c9:c6:69:f3:61:40:f7:07:c9:1e: c9:25:86:ed:5b:d4:a7:ec:72:f0:b4:56:a9:52:d3: 4f:82:e9:d3:59:79:00:d7:87:37:95:46:e5:dc:7a: dd:76:a7:73:36:da:5b:cc:11:ca:7e:e9:8c:f1:07: f4:76:b6:89:d9:5c:48:7c:4f:87:f3:ee:2b:af:dd: 16:93:c4:d3:59:50:73:9d:5b:67:c7:08:68:eb:b6: 1c:3e:da:53:d1:e5:08:ae:c8:0b:be:a9:18:9a:bd: 60:a6:55:c0:7c:3e:9b:39:cf:a4:80:59:5d:1a:24: 03:ef:64:88:67:90:0d:94:5b:0c:84:a9:44:ba:cd: f0:91:43:9a:fb:21:12:ff:1b:92:ac:f7:82:3f:c7: d0:02:00:1e:11:37:f4:a1:b9:3e:34:ca:56:f9:3a: 21:d2:57:84:da:77:cf:ee:22:91:5e:a4:5b:6e:37: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F7:B2:D7:71:50:DA:A9:C1:F8:C0:F5:F2:86:23:1B:37:45:AB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/c367d924-e3c1-33d4-83e2-cb8162da53f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl X509v3 Authority Key Identifier: keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer sbgp-ipAddrBlock: critical IPv4: 167.253.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b4:2a:94:d5:55:68:60:1b:ee:56:60:0c:ba:16:74:51:0d: c9:10:56:82:c5:11:ab:86:34:c3:50:ae:52:3b:0e:5f:ab:cd: 05:25:55:60:01:97:95:5e:ba:9f:69:24:da:d3:cf:09:2f:8e: ea:c5:98:8a:67:63:a4:7d:8d:40:42:96:80:46:08:56:3d:a1: 4e:c1:50:a3:b2:06:e0:e0:33:a2:ee:6a:b1:22:e9:09:73:0a: 50:af:c2:65:a8:de:fc:45:96:8f:e1:16:62:2a:a8:54:16:ff: d2:91:51:78:05:9e:8b:46:21:53:d1:15:86:09:4e:bd:15:1a: 9b:fd:92:6e:96:4b:f6:70:a5:d6:45:07:ff:c2:bf:4c:55:46: 40:0d:16:56:42:64:f9:f1:4e:77:1d:a9:87:03:f4:34:42:06: 99:a7:d1:cd:7c:8d:fc:a0:e3:12:66:af:3d:39:ef:aa:bd:40: 38:ec:c3:02:a8:5d:3e:2a:cd:15:9f:22:e3:18:74:22:d3:0f: 24:44:ba:0e:62:a9:b1:dd:20:2d:29:37:09:bf:d5:a1:a1:25: ba:b4:11:7b:c6:07:fc:f6:24:52:06:36:24:22:82:7f:a3:4c: 14:44:cd:6a:41:65:ec:b0:65:47:0d:07:d5:b9:27:ba:df:6e: ab:b5:3d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUFhCquPInpuMFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ZDExNzQtNGJmNC00NjViLTlmMGItMTA5MTYzM2U2 NzE3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmY4Mzg2NDgtMTYyNC00ZGRiLWE5NmEtODlkYjk1ZjRhZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfR0J8OLY6888D2KqL6Z+zNFtgIA+mhGf0H+ yW07IusU4uzF+PAD4r5DR2TToVLCtpOaCP4NXnMvhBkSn9tS9QZ47w23JVmQBQzM l4QxjsnGafNhQPcHyR7JJYbtW9Sn7HLwtFapUtNPgunTWXkA14c3lUbl3Hrddqdz NtpbzBHKfumM8Qf0draJ2VxIfE+H8+4rr90Wk8TTWVBznVtnxwho67YcPtpT0eUI rsgLvqkYmr1gplXAfD6bOc+kgFldGiQD72SIZ5ANlFsMhKlEus3wkUOa+yES/xuS rPeCP8fQAgAeETf0obk+NMpW+Toh0leE2nfP7iKRXqRbbjcmFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj3stdxUNqpwfjA9fKGIxs3RaslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZk MTE3NC00YmY0LTQ2NWItOWYwYi0xMDkxNjMzZTY3MTcvYzM2N2Q5MjQtZTNjMS0z M2Q0LTgzZTItY2I4MTYyZGE1M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA2ZDExNzQtNGJmNC00NjViLTlm MGItMTA5MTYzM2U2NzE3L2QwNmQxMTc0LTRiZjQtNDY1Yi05ZjBiLTEwOTE2MzNl NjcxNy5jcmwwHwYDVR0jBBgwFoAU9jj3atiqgLwTOxXzDa4QNzLQ0McwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDZkMTE3NC00YmY0LTQ2NWItOWYwYi0xMDkx NjMzZTY3MTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES0KpTVVWhgG+5WYAy6FnRRDckQVoLFEauGNMNQrlI7Dl+rzQUlVWAB l5Veup9pJNrTzwkvjurFmIpnY6R9jUBCloBGCFY9oU7BUKOyBuDgM6LuarEi6Qlz ClCvwmWo3vxFlo/hFmIqqFQW/9KRUXgFnotGIVPRFYYJTr0VGpv9km6WS/ZwpdZF B//Cv0xVRkANFlZCZPnxTncdqYcD9DRCBpmn0c18jfyg4xJmrz0576q9QDjswwKo XT4qzRWfIuMYdCLTDyREug5iqbHdIC0pNwm/1aGhJbq0EXvGB/z2JFIGNiQign+j TBREzWpBZeywZUcNB9W5J7rfbqu1PRA= -----END CERTIFICATE-----Generated at Sun Sep 27 11:29:47 2026 by rpki-client