$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa File: cc14649a-e604-33da-b145-eed98529505d.roa (raw, json) Hash identifier: hWFlsl04MQVWLjZ5PGQz86Qafs8KfSS/sHM7a470upw= Subject key identifier: 67:3F:B4:11:4A:DE:87:24:65:73:4E:68:0D:54:0D:94:D8:F1:5F:C0 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584F4975FF5AE17CCD44F2136E28 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395494 IP address blocks: 167.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ff:5a:e1:7c:cd:44:f2:13:6e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=055d0dc1-b81f-4c58-a1da-44b2e28d4d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:bf:79:70:db:bd:3b:c5:91:3b:df:78:de: 02:2c:7d:c9:03:bb:2f:c8:a1:3d:17:5d:07:ba:9a: 71:05:5f:bc:05:c1:46:df:f6:f8:cb:35:3a:3b:a1: 7f:93:1f:9e:68:27:c2:41:80:19:ca:1b:71:58:2d: 17:d9:aa:93:63:78:fd:a2:0a:1d:41:87:4c:b9:03: f7:af:d8:92:95:55:ee:ef:f2:ea:20:79:39:37:22: 18:18:55:63:a4:63:63:2f:5b:16:e3:7d:b0:fa:8c: 34:bb:37:fd:1d:2d:28:6b:84:b0:9d:04:71:94:69: 7f:e1:95:07:80:2a:85:34:9a:96:af:b8:a1:6d:76: 41:bb:ee:e0:97:08:fa:86:67:70:60:73:43:86:30: 4b:4e:35:29:5f:68:ad:a2:40:c5:9a:72:c8:6a:7a: ed:38:6e:34:27:d0:a6:a5:8e:52:da:19:38:47:b5: a4:44:58:7d:c9:64:4b:09:42:4b:e2:e8:58:2c:ab: d8:71:5e:be:b6:46:38:a8:64:58:e1:61:2f:15:5b: 1d:99:9a:a7:a2:9e:90:85:93:4c:1c:f2:fe:10:cf: a1:6e:64:a2:69:d1:96:d2:1b:3e:21:a9:58:2b:d1: f4:bc:f3:6f:df:52:cd:11:87:c5:aa:d2:b4:5d:2b: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:B4:11:4A:DE:87:24:65:73:4E:68:0D:54:0D:94:D8:F1:5F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/cc14649a-e604-33da-b145-eed98529505d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 167.253.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:e4:48:e0:15:b1:5e:e8:21:3c:a8:ff:a6:8b:4c:d8:1a: da:26:7d:29:99:53:da:b2:d3:42:33:81:0d:24:7f:87:95:ec: 80:50:8a:cf:09:4b:95:75:43:da:c7:32:b1:40:16:bd:20:ce: 70:f4:63:73:3e:8e:9b:a4:46:17:dc:a9:c3:6c:32:d7:7a:72: 5a:ba:b8:4a:6f:39:4b:7d:50:d8:6b:43:8e:f8:bd:9f:53:cd: c8:da:77:44:ce:15:1a:f9:04:00:79:dc:c1:43:85:5e:32:0f: 2f:1d:58:a7:02:24:16:c4:b4:6e:43:42:8c:b5:a7:87:e7:79: f9:0f:3e:08:8c:e0:fd:66:eb:cc:bb:44:77:9f:64:76:a0:0c: ec:cf:d3:2f:94:36:5e:cc:53:05:93:bb:1a:a8:45:6d:9a:c1: a6:a0:a2:20:06:45:e2:c1:7b:6d:6b:8b:97:96:fa:50:da:02: f9:65:01:d3:e0:0c:89:0d:c1:7f:03:fa:d1:8a:bd:43:fc:e4: 06:56:a9:28:0d:75:df:0e:ef:7c:d3:33:4f:f2:ee:72:a2:dc: 8a:ef:f6:f1:05:53:56:30:a6:b8:72:fd:ff:2f:80:e8:e4:93: 62:37:e5:8d:f3:67:c9:d0:ea:42:5a:37:a9:da:45:1d:0d:de: ab:6d:dc:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdf9a4XzNRPITbigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDU1ZDBkYzEtYjgxZi00YzU4LWExZGEtNDRiMmUyOGQ0ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6+/eXDbvTvFkTvfeN4CLH3JA7svyKE9F10H uppxBV+8BcFG3/b4yzU6O6F/kx+eaCfCQYAZyhtxWC0X2aqTY3j9ogodQYdMuQP3 r9iSlVXu7/LqIHk5NyIYGFVjpGNjL1sW432w+ow0uzf9HS0oa4SwnQRxlGl/4ZUH gCqFNJqWr7ihbXZBu+7glwj6hmdwYHNDhjBLTjUpX2itokDFmnLIanrtOG40J9Cm pY5S2hk4R7WkRFh9yWRLCUJL4uhYLKvYcV6+tkY4qGRY4WEvFVsdmZqnop6QhZNM HPL+EM+hbmSiadGW0hs+IalYK9H0vPNv31LNEYfFqtK0XSvQDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc/tBFK3ockZXNOaA1UDZTY8V/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvY2MxNDY0OWEtZTYwNC0z M2RhLWIxNDUtZWVkOTg1Mjk1MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjR5EjgFbFe6CE8qP+mi0zYGtomfSmZU9qy00IzgQ0kf4eV7IBQis8J S5V1Q9rHMrFAFr0gznD0Y3M+jpukRhfcqcNsMtd6clq6uEpvOUt9UNhrQ474vZ9T zcjad0TOFRr5BAB53MFDhV4yDy8dWKcCJBbEtG5DQoy1p4fnefkPPgiM4P1m68y7 RHefZHagDOzP0y+UNl7MUwWTuxqoRW2awaagoiAGReLBe21ri5eW+lDaAvllAdPg DIkNwX8D+tGKvUP85AZWqSgNdd8O73zTM0/y7nKi3Irv9vEFU1Ywprhy/f8vgOjk k2I35Y3zZ8nQ6kJaN6naRR0N3qtt3Pg= -----END CERTIFICATE-----Generated at Sat Sep 26 06:04:19 2026 by rpki-client