$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa File: 167eae46-bc88-39ca-be9a-4e8c66e65784.roa (raw, json) Hash identifier: fu6ZcBxlaZPgt420QXlboHibfcavNPW0jgMnpWryKZM= Subject key identifier: 66:1D:85:BD:D2:F8:4C:2E:F6:37:11:92:92:00:1E:A3:66:98:8A:CC Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F497750EDF13566853316CA40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 213122 IP address blocks: 167.94.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:50:ed:f1:35:66:85:33:16:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2622e67-fd5f-4907-ad1b-30c5d7a83434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2f:61:e4:38:67:c5:b6:38:f3:51:12:2b:14: 49:e2:ad:11:21:1c:f6:2a:ad:51:72:b9:5d:90:f6: 75:1b:ea:5e:02:be:13:27:32:d0:01:a1:72:f9:e3: 27:6c:3a:0b:bb:c4:d7:e1:c6:4c:1b:ec:34:46:6f: 97:90:ab:80:e6:42:8b:99:8e:9d:ee:1c:41:eb:d8: 98:ff:c9:52:d6:db:f2:13:fd:ad:c9:c5:49:1a:24: ed:21:68:ab:82:bc:1d:00:22:e1:a3:b8:c0:b2:05: c5:a6:dd:86:89:0d:ce:c3:12:9f:ad:eb:e8:db:b5: f4:46:44:e6:a7:80:f8:e1:e3:b0:9c:a4:7c:bf:18: 3a:6b:52:87:12:fb:53:5c:99:eb:d2:02:69:41:40: 56:95:37:f5:e8:51:42:b9:09:60:5a:ed:1d:12:a0: 39:07:4d:bc:36:48:8f:30:8d:7c:7b:22:ec:f3:0b: ef:41:62:29:ae:cb:02:99:f2:83:a7:26:52:0e:48: 1e:24:fb:91:01:63:45:9c:1d:2a:d1:96:8c:7a:79: 4a:52:4f:75:e9:0e:c9:0d:a0:61:ab:59:87:e3:e9: 15:f5:fb:ef:fe:fa:a7:55:88:a4:21:81:07:05:6d: c9:eb:b1:b9:eb:c5:10:9d:2b:70:fa:f5:7f:2a:31: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1D:85:BD:D2:F8:4C:2E:F6:37:11:92:92:00:1E:A3:66:98:8A:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/167eae46-bc88-39ca-be9a-4e8c66e65784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 167.94.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:39:9b:b1:5d:8f:4d:bc:f4:25:37:b7:b1:cf:b9:4c:2f:87: 50:7c:38:e5:b1:89:f5:69:d8:09:de:f6:3c:b9:06:3b:87:26: 5d:a4:dc:53:5c:33:67:84:8b:14:28:bc:ff:6a:18:1a:9b:99: a8:f3:58:1f:af:db:26:6f:e4:89:c6:96:78:62:f1:55:0a:8a: 91:8f:b2:21:d6:f6:0d:97:67:7e:43:c8:69:ee:bf:ed:47:ac: 4f:7e:2f:c5:3d:b3:31:17:19:f9:67:41:cb:0e:d6:60:43:60: 54:4d:16:33:0b:de:74:81:ec:30:6c:24:40:65:f6:84:5c:fc: c8:bc:89:b8:94:02:c6:d5:4a:cd:0f:e4:f4:c7:d0:ba:b3:0c: 01:89:f7:58:8d:0b:80:12:53:8a:2b:16:5e:c5:dd:77:0c:7b: 40:cb:5e:fe:9d:c7:7e:ee:8c:dc:32:60:ef:f6:84:43:2b:82: 35:cf:35:13:2d:bc:bc:f6:0d:28:a0:d3:a2:aa:9b:09:26:80: 6c:f3:b8:df:60:a9:e6:7c:ff:0a:03:f8:6e:52:20:a0:f4:29: 92:d7:86:45:69:a9:e3:e6:75:cf:5a:56:42:66:c1:1e:11:a0: 27:10:6d:79:7f:90:41:37:79:e6:6e:dd:26:db:88:d4:5b:5c: 29:f1:11:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1Dt8TVmhTMWykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTI2MjJlNjctZmQ1Zi00OTA3LWFkMWItMzBjNWQ3YTgzNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC9h5DhnxbY481ESKxRJ4q0RIRz2Kq1Rcrld kPZ1G+peAr4TJzLQAaFy+eMnbDoLu8TX4cZMG+w0Rm+XkKuA5kKLmY6d7hxB69iY /8lS1tvyE/2tycVJGiTtIWirgrwdACLho7jAsgXFpt2GiQ3OwxKfrevo27X0RkTm p4D44eOwnKR8vxg6a1KHEvtTXJnr0gJpQUBWlTf16FFCuQlgWu0dEqA5B028NkiP MI18eyLs8wvvQWIprssCmfKDpyZSDkgeJPuRAWNFnB0q0ZaMenlKUk916Q7JDaBh q1mH4+kV9fvv/vqnVYikIYEHBW3J67G568UQnStw+vV/KjFV9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYdhb3S+Ewu9jcRkpIAHqNmmIrMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMTY3ZWFlNDYtYmM4OC0z OWNhLWJlOWEtNGU4YzY2ZTY1Nzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp14HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk5m7Fdj0289CU3t7HPuUwvh1B8OOWxifVp2Ane9jy5BjuHJl2k3FNc M2eEixQovP9qGBqbmajzWB+v2yZv5InGlnhi8VUKipGPsiHW9g2XZ35DyGnuv+1H rE9+L8U9szEXGflnQcsO1mBDYFRNFjML3nSB7DBsJEBl9oRc/Mi8ibiUAsbVSs0P 5PTH0LqzDAGJ91iNC4ASU4orFl7F3XcMe0DLXv6dx37ujNwyYO/2hEMrgjXPNRMt vLz2DSig06KqmwkmgGzzuN9gqeZ8/woD+G5SIKD0KZLXhkVpqePmdc9aVkJmwR4R oCcQbXl/kEE3eeZu3SbbiNRbXCnxERg= -----END CERTIFICATE-----Generated at Sat Sep 26 04:13:28 2026 by rpki-client