$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa File: d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa (raw, json) Hash identifier: 0NP26MaYhcxbmmlnLqkWmiz+Cud3U6ghYVOwm75wtwQ= Subject key identifier: 3C:35:3E:72:1F:E2:65:E9:8E:66:C0:C1:EE:C7:B4:5F:32:63:37:B4 Certificate issuer: /CN=19039935-462a-4b14-8e96-78798283eeff Certificate serial: 010D0C9F4328584B84E788401E2DB08D6903E840 Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 167.253.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:88:40:1e:2d:b0:8d:69:03:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19039935-462a-4b14-8e96-78798283eeff Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=34ba44ac-5398-4e0d-ad75-aeb4a37ed4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:9e:86:93:c3:de:73:8e:4b:32:2f:35:21: 9d:92:14:4c:6b:cb:de:e7:8e:4c:b7:04:44:9a:a8: 32:d1:0f:07:d3:d4:72:2e:f2:1f:3b:a8:0b:f4:af: ed:c5:ec:0d:0e:1d:88:65:31:b7:da:d9:98:61:dd: 6d:6a:bd:fc:c5:08:b5:11:3c:3d:ac:9a:e7:85:eb: 9a:5f:49:27:c2:ac:ba:7f:53:12:ad:43:b2:25:4f: bf:31:3e:89:08:f1:f6:de:67:3a:7f:07:32:44:0f: f6:2e:90:ba:ec:64:43:a0:62:f0:b7:60:86:66:56: ec:ec:ee:7a:1b:46:c9:03:42:23:e2:60:23:a5:e6: f7:66:f9:07:66:b8:9e:ab:28:1f:51:ec:2d:50:3b: e7:33:5e:bd:85:98:46:f0:6a:0e:47:de:33:63:5b: c8:37:1a:48:96:f4:8a:05:83:be:30:fe:45:6f:ae: 5b:e6:d7:dd:d6:be:9e:fe:5d:cb:f5:91:6e:b7:bb: 89:25:ed:31:7b:cb:92:c0:b4:67:ce:08:26:04:f4: 1c:cd:2e:ff:b5:8d:42:3f:75:aa:35:b7:03:75:07: e3:22:e6:94:f9:2e:fa:27:3a:7c:88:ff:47:13:cb: 33:88:e3:0f:01:9c:a9:1b:15:3f:60:fe:57:52:25: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:35:3E:72:1F:E2:65:E9:8E:66:C0:C1:EE:C7:B4:5F:32:63:37:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl X509v3 Authority Key Identifier: keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer sbgp-ipAddrBlock: critical IPv4: 167.253.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5f:e0:32:34:a6:24:60:b4:4b:38:35:cf:6d:61:89:c1:89: e6:56:cc:0c:a2:eb:74:25:88:2f:6c:7e:32:50:ec:18:a5:c1: bf:79:5f:cb:64:3d:51:13:a2:d3:49:1b:3b:ce:2c:52:ab:33: 7d:b8:8b:5d:d1:c0:66:9f:af:10:9a:27:47:f1:7b:df:91:ea: e9:39:2e:c4:6e:d0:ac:a8:a2:4c:17:19:10:3e:70:77:1e:4b: e2:ff:c8:bb:5a:82:be:f4:d4:d2:16:fd:17:73:ed:84:7d:ee: 93:a4:d1:ab:36:f1:80:90:f0:f2:e5:a2:e4:66:aa:56:05:a4: b7:c1:9f:80:d0:45:58:fa:95:40:4b:ff:1b:8b:40:26:dc:18: ab:14:5b:07:02:2f:e1:15:2a:6e:03:d3:34:02:c7:a7:84:a9: ab:b2:50:82:96:0d:37:47:b1:e7:5d:3d:a0:f3:98:39:9d:44: 45:c0:1c:cf:ff:b7:fc:e0:6e:cf:b0:d3:24:e0:e0:11:51:d7: 59:5c:f2:28:21:0c:5a:e0:bd:8f:78:fa:04:4c:d0:07:90:9b: b1:5e:3e:06:97:69:fc:f1:c0:6b:90:8c:aa:3f:d4:17:64:90: 2d:a0:5c:5a:47:5e:d0:43:64:b5:52:49:ee:88:25:49:36:f7: 8c:e5:e2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54hAHi2wjWkD6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNl ZWZmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzRiYTQ0YWMtNTM5OC00ZTBkLWFkNzUtYWViNGEzN2VkNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfCehpPD3nOOSzIvNSGdkhRMa8ve545MtwRE mqgy0Q8H09RyLvIfO6gL9K/txewNDh2IZTG32tmYYd1tar38xQi1ETw9rJrnheua X0knwqy6f1MSrUOyJU+/MT6JCPH23mc6fwcyRA/2LpC67GRDoGLwt2CGZlbs7O56 G0bJA0Ij4mAjpeb3ZvkHZrieqygfUewtUDvnM169hZhG8GoOR94zY1vINxpIlvSK BYO+MP5Fb65b5tfd1r6e/l3L9ZFut7uJJe0xe8uSwLRnzggmBPQczS7/tY1CP3Wq NbcDdQfjIuaU+S76Jzp8iP9HE8sziOMPAZypGxU/YP5XUiXeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw1PnIf4mXpjmbAwe7HtF8yYze0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTAz OTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvZDMxZDhhNjgtM2FhZS0z MWZiLTg3NTgtOWM5ZWM3MjFjNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkwMzk5MzUtNDYyYS00YjE0LThl OTYtNzg3OTgyODNlZWZmLzE5MDM5OTM1LTQ2MmEtNGIxNC04ZTk2LTc4Nzk4Mjgz ZWVmZi5jcmwwHwYDVR0jBBgwFoAUMCKfdKNrwtqpZkAI0cw8U5Df3pkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5 ODI4M2VlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpf4DI0piRgtEs4Nc9tYYnBieZWzAyi63QliC9sfjJQ7Bilwb95X8tk PVETotNJGzvOLFKrM324i13RwGafrxCaJ0fxe9+R6uk5LsRu0KyookwXGRA+cHce S+L/yLtagr701NIW/Rdz7YR97pOk0as28YCQ8PLlouRmqlYFpLfBn4DQRVj6lUBL /xuLQCbcGKsUWwcCL+EVKm4D0zQCx6eEqauyUIKWDTdHseddPaDzmDmdREXAHM// t/zgbs+w0yTg4BFR11lc8ighDFrgvY94+gRM0AeQm7FePgaXafzxwGuQjKo/1Bdk kC2gXFpHXtBDZLVSSe6IJUk294zl4lw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:04 2025 by rpki-client