$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa File: e2661e5c-51d0-30db-b475-4b166c8c13b1.roa (raw, json) Hash identifier: CmPTcvk7FXQnuXL6C+2Fg/ksDtkkf9G3Mrdpcwl7jg4= Subject key identifier: 7E:E0:10:04:8C:BF:AB:AD:21:86:03:70:FE:95:F9:33:8B:E6:5C:17 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584B875947F6DC365BD55D6B5D00 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa Signing time: Wed 15 Oct 2025 10:01:43 +0000 ROA not before: Wed 15 Oct 2025 10:01:43 +0000 ROA not after: Tue 13 Jan 2026 11:01:43 +0000 asID: 203963 IP address blocks: 167.253.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:59:47:f6:dc:36:5b:d5:5d:6b:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 15 10:01:43 2025 GMT Not After : Jan 13 11:01:43 2026 GMT Subject: CN=2a8c7c13-e549-47f8-8e85-63de2f753a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:54:26:0b:13:0c:fb:04:36:dc:f5:fe:7e: af:ea:dc:56:fe:2a:a7:7a:4f:99:d7:00:60:9f:a7: 87:4a:59:4f:13:f8:ca:d5:c9:05:3f:b4:fb:98:1d: 46:94:53:ad:a7:5b:f2:a2:8b:ae:9a:c7:61:0f:f5: 4d:b8:7f:93:90:2b:ab:ba:54:af:f8:ee:73:b5:b4: 8d:3b:a0:b7:08:79:d5:9c:5b:f6:99:5a:3c:b4:c9: c4:b4:aa:f8:98:5f:c3:16:5e:1b:03:ff:cc:44:50: 50:7d:b8:65:6a:51:6b:cd:85:ba:6d:7b:d9:91:58: f7:c9:e3:8f:54:fc:72:68:0c:a1:66:c0:f9:b7:c5: 0c:90:73:56:d1:ac:57:d2:28:a0:29:03:66:e3:fe: ae:57:24:ee:10:59:cb:44:d2:5d:19:79:d8:b0:5d: 95:07:4d:49:58:d6:03:bb:c7:64:de:ec:d8:57:9f: 37:ba:50:1c:7e:8b:c2:f5:e8:5e:52:26:02:81:14: 1b:e0:57:2d:84:52:ae:97:c1:5f:19:c9:0b:02:b2: 35:c9:69:95:c4:08:d2:67:da:0c:e0:06:e1:f8:03: 85:c2:87:89:5a:ab:b2:43:1c:b8:3f:4d:6e:b9:ff: f1:79:2d:82:87:19:18:c3:4c:0b:d0:6d:69:33:2d: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:10:04:8C:BF:AB:AD:21:86:03:70:FE:95:F9:33:8B:E6:5C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e2661e5c-51d0-30db-b475-4b166c8c13b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 167.253.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:84:e3:ca:d2:5d:87:35:05:a8:9f:ef:07:11:d8:b7:d9:b2: 1a:5f:c0:7d:8a:9c:e3:3a:e4:d3:fe:8b:ec:07:1a:c4:df:a1: a4:b1:3a:73:5c:03:8d:4f:ea:40:b6:f2:3d:49:0f:79:23:59: 17:8d:4c:7c:52:bc:45:e8:90:c1:00:33:fb:4d:fe:8d:e5:ca: 86:18:76:59:68:83:2b:4f:d6:8e:e2:3a:7d:fd:de:7f:d2:55: 2f:23:ba:2f:53:b1:8b:3e:e0:9d:50:60:55:87:27:d8:a6:2f: b7:d0:39:a4:c7:56:5a:88:b9:ec:91:15:dd:cb:63:90:34:fe: 94:7d:7b:71:44:1c:1c:5f:4d:80:93:af:a5:b3:63:36:06:21: c8:be:b7:6c:d7:78:40:92:6e:dd:e7:a6:fd:3b:c9:f4:b8:a8: ed:4a:ba:68:5b:47:95:2c:9c:97:c9:4f:f8:79:f4:2d:95:9d: 87:7b:38:b7:09:1b:b6:ce:0f:26:a1:ce:39:8b:b7:94:c2:1c: 8b:f5:bc:04:ba:7f:70:03:d7:c0:6a:f4:03:23:db:1e:44:b1: 2c:3d:b5:8a:4a:8c:5d:6f:62:4c:89:95:9b:c1:e4:0c:07:ab: f3:ce:61:6b:d6:8a:92:f2:cf:18:ab:84:db:aa:b2:50:1a:8c: 14:24:66:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHWUf23DZb1V1rXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTAxNTEwMDE0M1oXDTI2MDExMzExMDE0M1owLzEtMCsGA1UEAxMk MmE4YzdjMTMtZTU0OS00N2Y4LThlODUtNjNkZTJmNzUzYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X1UJgsTDPsENtz1/n6v6txW/iqnek+Z1wBg n6eHSllPE/jK1ckFP7T7mB1GlFOtp1vyoouumsdhD/VNuH+TkCurulSv+O5ztbSN O6C3CHnVnFv2mVo8tMnEtKr4mF/DFl4bA//MRFBQfbhlalFrzYW6bXvZkVj3yeOP VPxyaAyhZsD5t8UMkHNW0axX0iigKQNm4/6uVyTuEFnLRNJdGXnYsF2VB01JWNYD u8dk3uzYV583ulAcfovC9eheUiYCgRQb4FcthFKul8FfGckLArI1yWmVxAjSZ9oM 4Abh+AOFwoeJWquyQxy4P01uuf/xeS2ChxkYw0wL0G1pMy0kPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7gEASMv6utIYYDcP6V+TOL5lwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZTI2NjFlNWMtNTFkMC0z MGRiLWI0NzUtNGIxNjZjOGMxM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWE48rSXYc1Baif7wcR2LfZshpfwH2KnOM65NP+i+wHGsTfoaSxOnNc A41P6kC28j1JD3kjWReNTHxSvEXokMEAM/tN/o3lyoYYdllogytP1o7iOn393n/S VS8jui9TsYs+4J1QYFWHJ9imL7fQOaTHVlqIueyRFd3LY5A0/pR9e3FEHBxfTYCT r6WzYzYGIci+t2zXeECSbt3npv07yfS4qO1KumhbR5UsnJfJT/h59C2VnYd7OLcJ G7bODyahzjmLt5TCHIv1vAS6f3AD18Bq9AMj2x5EsSw9tYpKjF1vYkyJlZvB5AwH q/POYWvWipLyzxirhNuqslAajBQkZpM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:27 2025 by rpki-client