$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa File: 63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa (raw, json) Hash identifier: Wh3uK4GByj2OH/Abakye/nXOlhf0jBPZsmbouPYfi/s= Subject key identifier: 9C:A0:7B:F8:22:C8:89:5D:9B:9A:3E:B2:96:D7:8F:F5:DA:F1:C9:CE Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584B047C171861EE585F32E58100 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 26548 IP address blocks: 167.253.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:17:18:61:ee:58:5f:32:e5:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=1e679281-7f17-44d7-8b22-f3cee3c86f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:52:8c:26:f1:aa:5f:b4:71:e5:93:7c:a2: 11:86:ae:c5:16:b0:0a:b7:b2:e4:d3:6d:69:6e:14: 6b:cf:b7:b2:1d:cd:8f:64:78:30:b7:a8:07:d3:b4: d3:bc:82:02:e1:6a:a0:52:cf:1e:d0:c7:42:25:23: c9:c8:02:e1:5f:8d:4e:73:49:52:4f:fa:a9:2a:0a: 2d:ef:90:d3:1d:f0:51:1d:7f:18:e8:aa:01:1e:cd: 40:d8:1d:47:02:ea:21:a5:d4:89:c0:7d:87:ee:6f: 45:78:4f:8e:8a:1b:4f:fd:94:f6:99:90:f2:20:c3: f0:1d:e4:cf:ec:1f:85:ff:02:8a:26:ae:ea:9f:3f: 12:88:42:ef:34:0b:37:b6:77:af:95:7d:6b:05:1e: b9:f6:94:45:6e:13:1b:47:e8:71:65:2b:ce:4f:59: a5:a2:ac:ea:fe:09:96:7f:18:e0:1b:43:19:d1:a5: 44:1d:3e:35:e7:b1:ae:22:d5:e6:15:d1:9c:d9:86: 80:ef:45:df:13:0e:3f:f0:86:1d:8f:c3:48:72:f9: 30:97:7b:10:19:39:3a:37:74:dd:99:73:ac:3b:56: 9f:f5:ad:61:f7:d8:9d:14:72:ca:3b:2a:7a:5f:a0: 05:b7:17:01:bd:84:86:fa:97:8a:ba:34:9c:de:a0: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:7B:F8:22:C8:89:5D:9B:9A:3E:B2:96:D7:8F:F5:DA:F1:C9:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/63a79354-b7a6-3f9a-9abb-8d8b82d14be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:39:56:8f:3b:db:72:9c:98:e5:bd:d5:f9:92:93:6d:fc:6e: 88:09:88:99:22:3d:0f:c6:83:1d:9e:af:db:16:ba:42:cf:21: 78:94:34:18:d2:6b:fd:57:96:e7:ee:54:bc:f2:d6:39:e6:41: dd:74:34:c0:7d:2e:72:47:1c:bc:c6:10:92:d9:57:dd:ce:08: ce:bf:a5:8a:b4:c6:bc:d8:e5:09:9b:a9:06:1e:d8:95:d5:29: 2e:e4:9b:71:18:91:31:3b:fe:86:5d:d7:c3:d6:b7:a9:47:21: c3:84:2f:d6:12:45:d7:61:96:33:89:4d:76:5b:55:69:7c:a1: f2:96:8e:4e:de:31:c1:9d:84:69:c0:69:60:5c:10:7d:6b:0a: 8a:08:77:2e:48:34:c3:13:5f:95:d8:8a:27:01:3a:f8:bd:27: b8:58:c0:7e:f0:39:89:95:6d:c1:67:c7:80:33:4a:ad:33:7c: e0:f1:94:37:c8:2e:3d:c9:a4:af:e7:eb:56:a6:83:db:0f:e1: 71:e8:70:d9:9f:a0:8f:47:33:2d:42:06:48:3a:97:03:93:b5: b6:29:34:b4:1f:cf:9b:84:9f:5d:48:e1:fb:b4:92:f4:5c:ee: 15:81:86:80:37:96:e0:f9:5e:bf:13:65:2d:1e:49:f2:29:55: cc:47:ff:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBcYYe5YXzLlgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWU2NzkyODEtN2YxNy00NGQ3LThiMjItZjNjZWUzYzg2ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMFSjCbxql+0ceWTfKIRhq7FFrAKt7Lk021p bhRrz7eyHc2PZHgwt6gH07TTvIIC4WqgUs8e0MdCJSPJyALhX41Oc0lST/qpKgot 75DTHfBRHX8Y6KoBHs1A2B1HAuohpdSJwH2H7m9FeE+OihtP/ZT2mZDyIMPwHeTP 7B+F/wKKJq7qnz8SiELvNAs3tnevlX1rBR659pRFbhMbR+hxZSvOT1mloqzq/gmW fxjgG0MZ0aVEHT4157GuItXmFdGc2YaA70XfEw4/8IYdj8NIcvkwl3sQGTk6N3Td mXOsO1af9a1h99idFHLKOyp6X6AFtxcBvYSG+peKujSc3qC7bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyge/giyIldm5o+spbXj/Xa8cnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvNjNhNzkzNTQtYjdhNi0z ZjlhLTlhYmItOGQ4YjgyZDE0YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA5Vo8723KcmOW91fmSk238bogJiJkiPQ/Ggx2er9sWukLPIXiUNBjS a/1XlufuVLzy1jnmQd10NMB9LnJHHLzGEJLZV93OCM6/pYq0xrzY5QmbqQYe2JXV KS7km3EYkTE7/oZd18PWt6lHIcOEL9YSRddhljOJTXZbVWl8ofKWjk7eMcGdhGnA aWBcEH1rCooIdy5INMMTX5XYiicBOvi9J7hYwH7wOYmVbcFnx4AzSq0zfODxlDfI Lj3JpK/n61amg9sP4XHocNmfoI9HMy1CBkg6lwOTtbYpNLQfz5uEn11I4fu0kvRc 7hWBhoA3luD5Xr8TZS0eSfIpVcxH/w0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:52 2025 by rpki-client