$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa File: c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa (raw, json) Hash identifier: AH+uCvJHZFQjCMDLzCxcIIGsD8PiZlJrdYS2TOTNr4w= Subject key identifier: 3B:08:BD:ED:FE:67:38:8F:8A:32:EC:9A:68:B3:D3:C5:78:AB:F9:E3 Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Certificate serial: 010D0C9F4328584F4987383E7C7B90C4F328FF20 Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 167.253.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:38:3e:7c:7b:90:c4:f3:28:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d835ca0f-bdde-4597-ae47-4b693986fbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:08:7f:c1:be:2b:0b:d7:c4:5f:b3:3e:9b: 26:d4:f4:e5:82:3f:c4:24:9f:de:21:9d:2c:4d:69: 75:b4:2c:5d:b6:4a:ce:6a:77:20:e9:32:d0:d1:b7: 7f:d1:93:44:51:42:3e:1a:20:47:70:e8:74:4a:dd: 93:07:cd:ed:fb:b6:18:f1:0f:56:9f:34:5a:a1:8b: 91:01:45:3b:53:74:1c:5a:3d:9f:85:0a:cd:48:98: b7:c5:a9:ec:ff:4e:6a:e3:d2:c7:4a:88:fb:c7:ab: fb:48:5c:bd:85:3e:fa:99:76:cb:86:7f:7e:09:04: 15:45:bd:30:82:67:76:b6:d5:6c:8f:b9:4a:26:67: 88:4d:95:10:88:8d:98:d0:f0:c3:16:eb:72:e0:1f: fa:23:b2:b3:c2:77:2f:9d:af:4f:85:f7:2e:58:03: 8e:43:30:e6:7b:1f:6b:4f:e8:b6:2d:75:01:f7:2a: bf:64:2e:05:7b:69:10:bf:bb:4f:b3:bf:c4:6b:15: d0:65:c3:07:84:90:6d:2e:ce:08:41:d6:a7:bc:52: fd:bb:dc:dd:bd:f5:78:78:3a:96:a4:d6:0f:9c:a6: 01:8c:e1:6a:21:bd:13:51:45:02:8c:13:73:40:bc: 06:2f:1e:5a:ea:fb:88:30:c8:51:76:ad:05:e1:90: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:BD:ED:FE:67:38:8F:8A:32:EC:9A:68:B3:D3:C5:78:AB:F9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/c0b9fd0b-c752-309b-9de9-773d5f82c03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl X509v3 Authority Key Identifier: keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fe:e5:72:3b:4b:bc:cc:73:71:d2:b4:79:e5:70:6e:98:27: 2d:a8:94:b2:38:25:27:3e:27:d5:f6:45:82:17:25:1f:7b:18: 44:df:97:13:86:60:f8:ad:59:a3:3e:be:6f:bc:f2:08:f5:74: 22:72:89:5b:82:c3:27:04:c0:18:ce:27:1e:49:c4:1e:05:58: 05:bc:c4:0f:d5:54:2c:82:1a:ec:aa:48:76:6b:dd:4e:25:1b: 50:53:d9:1c:94:87:0e:c4:2b:5e:78:2f:8c:bc:91:ea:4c:06: b4:2b:b2:15:d6:c7:8e:e9:33:da:79:05:86:a2:4a:ed:0d:b4: c5:4d:b3:29:d7:66:c3:fa:b9:6a:e5:db:3a:fa:7b:0f:e0:be: d9:d7:26:f4:2d:26:c6:b0:b9:05:76:4e:19:1b:9c:d6:6b:fc: 6e:3b:c6:f9:04:e2:bc:5a:58:04:03:cc:41:6a:94:6e:a8:50: 51:8a:61:ec:c2:82:a6:7d:d9:9a:ec:bf:51:13:a7:91:c5:6f: a7:6f:33:ba:8e:26:3c:24:4a:31:65:b2:e6:49:f3:44:0e:f6: a5:2d:53:2a:08:a5:f9:f8:16:a5:49:5a:09:ac:f2:29:5f:7c: fe:ad:6f:75:fe:27:ab:b9:70:03:fb:95:5b:5d:ed:d4:43:27: e8:24:a9:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhzg+fHuQxPMo/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RmMDU0YjctMGRiZC00MTBhLThhNmEtMTBhZjU3Mjhl ODRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDgzNWNhMGYtYmRkZS00NTk3LWFlNDctNGI2OTM5ODZmYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34wIf8G+KwvXxF+zPpsm1PTlgj/EJJ/eIZ0s TWl1tCxdtkrOancg6TLQ0bd/0ZNEUUI+GiBHcOh0St2TB83t+7YY8Q9WnzRaoYuR AUU7U3QcWj2fhQrNSJi3xans/05q49LHSoj7x6v7SFy9hT76mXbLhn9+CQQVRb0w gmd2ttVsj7lKJmeITZUQiI2Y0PDDFuty4B/6I7Kzwncvna9PhfcuWAOOQzDmex9r T+i2LXUB9yq/ZC4Fe2kQv7tPs7/EaxXQZcMHhJBtLs4IQdanvFL9u9zdvfV4eDqW pNYPnKYBjOFqIb0TUUUCjBNzQLwGLx5a6vuIMMhRdq0F4ZAPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsIve3+ZziPijLsmmiz08V4q/njMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZGYw NTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFmNTcyOGU4NGEvYzBiOWZkMGItYzc1Mi0z MDliLTlkZTktNzczZDVmODJjMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2RmMDU0YjctMGRiZC00MTBhLThh NmEtMTBhZjU3MjhlODRhLzdkZjA1NGI3LTBkYmQtNDEwYS04YTZhLTEwYWY1NzI4 ZTg0YS5jcmwwHwYDVR0jBBgwFoAU6Pw7x68gRdZTF4LOUkaYgOVYgCswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ZGYwNTRiNy0wZGJkLTQxMGEtOGE2YS0xMGFm NTcyOGU4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL+5XI7S7zMc3HStHnlcG6YJy2olLI4JSc+J9X2RYIXJR97GETflxOG YPitWaM+vm+88gj1dCJyiVuCwycEwBjOJx5JxB4FWAW8xA/VVCyCGuyqSHZr3U4l G1BT2RyUhw7EK154L4y8kepMBrQrshXWx47pM9p5BYaiSu0NtMVNsynXZsP6uWrl 2zr6ew/gvtnXJvQtJsawuQV2ThkbnNZr/G47xvkE4rxaWAQDzEFqlG6oUFGKYezC gqZ92Zrsv1ETp5HFb6dvM7qOJjwkSjFlsuZJ80QO9qUtUyoIpfn4FqVJWgms8ilf fP6tb3X+J6u5cAP7lVtd7dRDJ+gkqTg= -----END CERTIFICATE-----Generated at Fri Sep 25 07:11:43 2026 by rpki-client