$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/13daf477-5966-3f89-bbaa-c0d8971c7f72.roa File: 13daf477-5966-3f89-bbaa-c0d8971c7f72.roa (raw, json) Hash identifier: gIf+73NEqFaB8O+dtNlcfPqzbqwnNogDEqbfylws8ek= Subject key identifier: 79:BF:9C:45:78:4C:7C:B8:7C:4F:29:87:69:72:ED:45:7E:DE:71:C4 Certificate issuer: /CN=19039935-462a-4b14-8e96-78798283eeff Certificate serial: 010D0C9F4328584B84E78853199EBF32CE46AC80 Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/13daf477-5966-3f89-bbaa-c0d8971c7f72.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 167.253.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:88:53:19:9e:bf:32:ce:46:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19039935-462a-4b14-8e96-78798283eeff Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=2fd4aae7-1e12-435b-b54a-55c0d5470762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:02:df:4b:d2:58:27:8c:fc:d8:89:b8:27: ef:dc:cc:a2:cc:87:03:d8:8f:f4:07:1e:b7:cf:ed: 34:b2:20:67:59:0f:23:ea:1a:1c:7a:7e:66:e1:3c: 90:ba:64:71:54:de:d0:2c:cd:b3:37:84:e9:a0:ad: 6c:bb:73:f8:d4:df:fb:c6:d7:bd:db:11:64:ab:ba: 74:fa:48:2b:84:79:77:16:fb:76:b2:8f:eb:8d:31: 4e:eb:4c:77:58:56:cd:78:5e:ce:be:2e:b8:22:28: 05:d9:c5:01:b8:bc:ff:23:3f:40:5b:4f:25:63:40: f1:27:fd:39:b6:59:85:a2:31:9b:95:e0:b5:9e:dc: 92:d0:b1:ad:e0:c0:d7:ff:c5:9b:fc:da:25:93:43: f5:6c:59:29:81:f1:4a:c4:b8:f6:08:68:bd:7b:09: d3:9e:9e:a7:51:89:7c:9d:78:66:91:98:e6:0b:52: dc:da:14:8d:06:9a:fa:fa:98:e6:32:a1:e6:cd:12: fa:ce:e2:5b:c6:cf:74:35:df:ef:cc:88:ca:3a:84: 27:61:6b:bc:3a:d1:74:52:ab:49:a3:42:4c:71:e1: 41:a7:64:d6:57:23:b7:83:f0:9f:c8:7c:ce:d4:4c: 37:0b:64:af:ec:c0:48:c7:f2:62:16:8d:96:b2:8a: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BF:9C:45:78:4C:7C:B8:7C:4F:29:87:69:72:ED:45:7E:DE:71:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/13daf477-5966-3f89-bbaa-c0d8971c7f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl X509v3 Authority Key Identifier: keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer sbgp-ipAddrBlock: critical IPv4: 167.253.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:58:a0:9f:5e:66:95:f3:a4:db:01:d4:9e:94:35:92:0c:59: 07:fd:72:45:3c:17:72:6f:2f:2f:f6:fe:62:20:58:15:21:38: 7f:79:bb:34:d7:25:8a:aa:24:bf:57:67:8c:10:3b:12:3c:18: ef:e6:14:3d:4c:1b:2a:06:b6:1c:1a:03:69:ad:0c:98:35:d0: 3a:73:9f:61:e6:8d:bf:d5:21:cf:8c:f6:2b:cb:24:e2:a3:81: 88:c7:90:98:46:74:e3:76:ba:46:e1:08:2a:fc:4f:86:e8:4a: 8a:30:79:dd:29:3a:26:fe:6c:1e:71:ff:14:2f:8d:74:e0:f8: 82:cb:a6:fc:e2:fd:28:82:f2:08:fc:82:a4:15:1b:94:4d:93: 24:a5:f3:69:90:ba:1c:a1:c6:d6:5f:33:d9:8a:ba:91:00:ac: 5a:24:42:4e:7e:63:ef:bb:b3:1f:aa:eb:03:ac:4e:50:36:b7: 2e:50:38:2a:f4:ea:1a:9d:e6:24:0b:45:86:42:e0:8a:64:5d: 61:4e:9f:d5:c0:ad:49:e1:fb:13:cd:2e:d7:71:24:da:3b:3b: e9:ef:09:0b:40:4e:60:17:3b:a1:f2:b4:0c:6d:36:a1:bd:01: eb:a2:a2:49:6e:ad:3b:6b:d4:2b:43:c3:b1:fe:6d:32:32:4b: 43:12:1e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54hTGZ6/Ms5GrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNl ZWZmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MmZkNGFhZTctMWUxMi00MzViLWI1NGEtNTVjMGQ1NDcwNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqwC30vSWCeM/NiJuCfv3MyizIcD2I/0Bx63 z+00siBnWQ8j6hocen5m4TyQumRxVN7QLM2zN4TpoK1su3P41N/7xte92xFkq7p0 +kgrhHl3Fvt2so/rjTFO60x3WFbNeF7Ovi64IigF2cUBuLz/Iz9AW08lY0DxJ/05 tlmFojGbleC1ntyS0LGt4MDX/8Wb/Nolk0P1bFkpgfFKxLj2CGi9ewnTnp6nUYl8 nXhmkZjmC1Lc2hSNBpr6+pjmMqHmzRL6zuJbxs90Nd/vzIjKOoQnYWu8OtF0UqtJ o0JMceFBp2TWVyO3g/CfyHzO1Ew3C2Sv7MBIx/JiFo2WsordJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm/nEV4THy4fE8ph2ly7UV+3nHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTAz OTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvMTNkYWY0NzctNTk2Ni0z Zjg5LWJiYWEtYzBkODk3MWM3ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkwMzk5MzUtNDYyYS00YjE0LThl OTYtNzg3OTgyODNlZWZmLzE5MDM5OTM1LTQ2MmEtNGIxNC04ZTk2LTc4Nzk4Mjgz ZWVmZi5jcmwwHwYDVR0jBBgwFoAUMCKfdKNrwtqpZkAI0cw8U5Df3pkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5 ODI4M2VlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1YoJ9eZpXzpNsB1J6UNZIMWQf9ckU8F3JvLy/2/mIgWBUhOH95uzTX JYqqJL9XZ4wQOxI8GO/mFD1MGyoGthwaA2mtDJg10Dpzn2Hmjb/VIc+M9ivLJOKj gYjHkJhGdON2ukbhCCr8T4boSoowed0pOib+bB5x/xQvjXTg+ILLpvzi/SiC8gj8 gqQVG5RNkySl82mQuhyhxtZfM9mKupEArFokQk5+Y++7sx+q6wOsTlA2ty5QOCr0 6hqd5iQLRYZC4IpkXWFOn9XArUnh+xPNLtdxJNo7O+nvCQtATmAXO6HytAxtNqG9 AeuioklurTtr1CtDw7H+bTIyS0MSHvU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:20 2025 by rpki-client