$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa File: da2467e4-8ac6-3706-a594-a1d5a5e00187.roa (raw, json) Hash identifier: 2Rv7dq3OXaLN+DMUFaDPaaT468kcHkQ9oxqvdHOpeL4= Subject key identifier: 23:54:E9:74:86:BF:64:A9:0F:63:77:25:2D:C3:6B:97:0D:FC:73:74 Certificate issuer: /CN=a5114e69-a8e9-416a-a99b-8144e07664ce Certificate serial: 010D0C9F4328584AF0F15766273BE72CC0241100 Authority key identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 2914 IP address blocks: 167.253.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:57:66:27:3b:e7:2c:c0:24:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5114e69-a8e9-416a-a99b-8144e07664ce Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8a4f67a8-c835-48fd-83ed-84d08e28411e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:2d:1f:19:21:a2:3c:55:d5:b9:b5:39:63: 38:b1:a3:d2:c9:69:6b:51:1a:eb:45:08:15:04:e2: 80:85:c7:a3:79:d6:ed:c5:ce:a2:42:96:40:ef:05: fd:34:41:cf:34:c9:8b:7d:20:2a:c9:30:d1:99:92: 0a:45:14:a3:48:8b:32:39:dc:83:42:50:0b:87:2b: 15:43:c9:4c:15:1a:db:88:97:43:ac:53:7d:d7:07: fe:62:09:4c:67:67:1c:2f:1d:bb:57:b6:85:71:3e: ed:c1:a7:30:8e:50:05:d1:a8:64:68:27:13:52:af: dc:4c:ef:4a:82:6c:23:e9:da:5a:a8:71:53:d2:6d: dc:6a:0c:72:5c:00:42:4a:5d:15:6c:75:83:ea:6c: 65:c1:f1:59:b3:56:fd:7f:e5:96:59:73:5a:58:37: 96:6e:73:25:1d:4f:0d:89:bb:97:3e:91:84:30:ec: cf:14:7b:1f:00:fc:d8:3f:2e:34:e9:3c:76:ee:d7: 1e:7b:48:e3:76:7c:97:e3:d3:f3:d7:43:6d:66:83: 30:d6:99:8b:70:a0:bc:55:03:17:a1:d0:03:80:63: 9d:1e:b6:4f:b8:9e:88:3b:9d:ea:81:05:77:71:b8: bf:a6:3e:bb:a8:83:42:6b:3d:9a:8f:36:f9:94:c3: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:E9:74:86:BF:64:A9:0F:63:77:25:2D:C3:6B:97:0D:FC:73:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/da2467e4-8ac6-3706-a594-a1d5a5e00187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl X509v3 Authority Key Identifier: keyid:7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer sbgp-ipAddrBlock: critical IPv4: 167.253.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f5:12:53:52:1f:18:70:d5:5e:67:88:75:c1:7d:d8:78:82: fa:32:b2:b7:be:b1:eb:ea:d0:03:04:b1:0c:6e:bf:e3:7f:ff: ed:fa:c7:e0:07:99:27:6e:2a:01:df:d4:06:f8:e4:01:c1:17: 58:53:03:1a:73:99:52:82:10:51:5f:0d:2c:0f:5d:d5:3b:1e: 41:36:4b:10:66:37:a6:40:86:cf:75:68:2b:38:66:a5:81:59: 24:e8:c3:80:07:69:12:f9:96:f6:0f:8f:a8:91:88:c0:15:b3: f6:d6:ba:80:f8:c3:db:c1:1b:10:8d:b8:57:8a:6e:22:04:4a: 69:e9:bd:aa:01:09:31:ea:da:61:8b:9c:6f:38:7d:da:fd:93: bf:ab:dd:01:f4:b3:24:1a:d4:22:69:5d:1e:0f:f8:98:69:69: 70:93:c3:90:37:96:38:d3:2d:b5:60:7c:3f:b3:4b:2a:eb:ad: a5:fe:c1:82:97:35:99:df:99:88:56:30:56:68:b8:4c:4b:bd: c5:6e:d9:7e:7f:b9:94:a0:1f:7e:b1:18:6f:4f:dc:d8:ba:b2: f7:38:c5:57:25:27:a6:a9:ba:5c:63:14:44:c0:b1:a1:41:4b: 68:c9:cc:bd:ae:72:af:f9:f1:07:5a:e9:f5:98:8a:e6:c7:84: f1:23:bd:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VdmJzvnLMAkEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUxMTRlNjktYThlOS00MTZhLWE5OWItODE0NGUwNzY2 NGNlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGE0ZjY3YTgtYzgzNS00OGZkLTgzZWQtODRkMDhlMjg0MTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld4tHxkhojxV1bm1OWM4saPSyWlrURrrRQgV BOKAhcejedbtxc6iQpZA7wX9NEHPNMmLfSAqyTDRmZIKRRSjSIsyOdyDQlALhysV Q8lMFRrbiJdDrFN91wf+YglMZ2ccLx27V7aFcT7twacwjlAF0ahkaCcTUq/cTO9K gmwj6dpaqHFT0m3cagxyXABCSl0VbHWD6mxlwfFZs1b9f+WWWXNaWDeWbnMlHU8N ibuXPpGEMOzPFHsfAPzYPy406Tx27tcee0jjdnyX49Pz10NtZoMw1pmLcKC8VQMX odADgGOdHrZPuJ6IO53qgQV3cbi/pj67qINCaz2ajzb5lMNkhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNU6XSGv2SpD2N3JS3Da5cN/HN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNTEx NGU2OS1hOGU5LTQxNmEtYTk5Yi04MTQ0ZTA3NjY0Y2UvZGEyNDY3ZTQtOGFjNi0z NzA2LWE1OTQtYTFkNWE1ZTAwMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTUxMTRlNjktYThlOS00MTZhLWE5 OWItODE0NGUwNzY2NGNlL2E1MTE0ZTY5LWE4ZTktNDE2YS1hOTliLTgxNDRlMDc2 NjRjZS5jcmwwHwYDVR0jBBgwFoAUengMhHZKm9WAVqNwaJYRUH93/0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNTExNGU2OS1hOGU5LTQxNmEtYTk5Yi04MTQ0 ZTA3NjY0Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb1ElNSHxhw1V5niHXBfdh4gvoysre+sevq0AMEsQxuv+N//+36x+AH mSduKgHf1Ab45AHBF1hTAxpzmVKCEFFfDSwPXdU7HkE2SxBmN6ZAhs91aCs4ZqWB WSTow4AHaRL5lvYPj6iRiMAVs/bWuoD4w9vBGxCNuFeKbiIESmnpvaoBCTHq2mGL nG84fdr9k7+r3QH0syQa1CJpXR4P+JhpaXCTw5A3ljjTLbVgfD+zSyrrraX+wYKX NZnfmYhWMFZouExLvcVu2X5/uZSgH36xGG9P3Ni6svc4xVclJ6apulxjFETAsaFB S2jJzL2ucq/58Qda6fWYiubHhPEjvUA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:49 2025 by rpki-client