$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa File: c7a9fdea-664c-38e1-be4a-09e48baa862e.roa (raw, json) Hash identifier: ZdypkdU/tWDREsUZ4qV0LjUn+7IBKXls/FXfMMHzHbg= Subject key identifier: FF:48:3D:C0:0D:43:B6:13:50:3A:E6:ED:BF:AA:DC:B9:30:6E:A4:E8 Certificate issuer: /CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b Certificate serial: 010D0C9F4328584B2CF6ECE57FF338462E05E480 Authority key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 167.253.136.0/24 maxlen: 24 167.253.137.0/24 maxlen: 24 167.253.138.0/24 maxlen: 24 167.253.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ec:e5:7f:f3:38:46:2e:05:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=5c36d8ac-fd9d-410a-be92-ff2bf83c5f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:26:0d:dc:b8:29:4c:57:10:c0:05:e4:55: 62:a4:49:81:98:b8:e0:c7:68:55:50:55:f5:cc:64: a8:1a:90:ec:99:a0:66:fc:07:9f:4c:81:7b:13:69: eb:01:bd:01:36:8c:58:6d:63:f0:07:37:da:09:31: e4:e2:c9:6b:9e:c0:b6:f6:67:a3:e4:9f:52:2d:65: e3:b1:6e:2a:33:4e:1b:f5:d5:e1:39:b5:30:26:85: f6:b8:a3:63:c6:03:0f:ff:cc:22:47:94:3b:15:4a: dc:fe:82:ad:da:8d:24:06:f6:b3:00:c8:a4:a2:af: be:b4:37:81:bc:4a:81:52:34:3f:b9:37:98:ec:bd: 0d:77:28:56:46:2b:22:b9:e9:d7:e4:82:d1:8f:ba: 4d:c1:cc:1d:53:24:34:b2:ea:3a:2b:4d:10:67:9b: 66:6c:a8:cf:02:d8:c8:59:d5:4b:fa:5d:3b:85:45: f6:de:c6:c9:04:f0:ad:1d:02:e9:37:c0:79:c5:cd: 31:d2:77:59:12:5f:a8:f3:a0:f2:9f:af:ac:81:32: 13:7f:44:76:ed:7d:62:c7:63:e5:a2:8b:7b:fd:ce: 20:21:19:1a:f5:71:b6:1c:53:63:06:8f:95:32:2d: 47:66:5f:89:1e:1f:dc:e8:02:e2:e9:2b:f2:f4:38: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:3D:C0:0D:43:B6:13:50:3A:E6:ED:BF:AA:DC:B9:30:6E:A4:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl X509v3 Authority Key Identifier: keyid:4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer sbgp-ipAddrBlock: critical IPv4: 167.253.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c8:38:a2:de:15:ca:a7:85:b5:75:7f:1c:07:3f:a0:fa:ac: e1:20:50:61:f9:ad:84:d2:33:92:30:f4:4d:64:d0:7a:5d:e2: 1b:9e:15:ed:21:f8:f9:4f:00:ec:02:12:90:d8:10:b2:fc:f0: 12:bb:5b:b0:81:ff:63:35:12:8f:0d:25:7c:a2:d9:f3:a2:8f: 7b:d9:c8:9d:61:eb:0a:34:72:6f:d7:2f:1b:c2:b6:75:b0:84: 3c:72:ed:53:89:cc:0b:0f:fc:d7:41:ee:6e:88:b0:06:d8:31: b5:e7:0b:1d:c2:aa:3b:8f:2a:7b:b8:9e:9c:11:14:d1:bf:33: b7:cd:55:79:0b:40:04:ff:f0:84:46:cb:2b:e4:8e:49:ff:0b: eb:b5:00:a6:b1:54:4d:e0:04:70:5d:61:3c:90:c6:03:3e:40: 85:b4:7a:c7:bd:f9:a2:34:88:1f:b6:1b:5c:c9:86:e1:97:dd: 7c:6d:30:29:72:e5:c4:86:d7:f9:7c:1d:b6:17:aa:83:6d:f9: 83:7c:f2:d2:93:81:ea:72:ec:c6:25:14:3f:3d:7b:b5:f8:df: ea:6a:d7:53:69:69:eb:a9:6c:39:f4:bc:50:f4:fe:08:b0:44: 2c:c5:45:c7:d6:ea:27:70:40:25:1b:e0:56:df:4d:d2:b9:04: 25:a7:d2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uzlf/M4Ri4F5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwOTA1MjUtN2FlZS00ZTBkLWI1NzctYWQzNGFhZjFk YTdiMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NWMzNmQ4YWMtZmQ5ZC00MTBhLWJlOTItZmYyYmY4M2M1ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM8mDdy4KUxXEMAF5FVipEmBmLjgx2hVUFX1 zGSoGpDsmaBm/AefTIF7E2nrAb0BNoxYbWPwBzfaCTHk4slrnsC29mej5J9SLWXj sW4qM04b9dXhObUwJoX2uKNjxgMP/8wiR5Q7FUrc/oKt2o0kBvazAMikoq++tDeB vEqBUjQ/uTeY7L0NdyhWRisiuenX5ILRj7pNwcwdUyQ0suo6K00QZ5tmbKjPAtjI WdVL+l07hUX23sbJBPCtHQLpN8B5xc0x0ndZEl+o86Dyn6+sgTITf0R27X1ix2Pl oot7/c4gIRka9XG2HFNjBo+VMi1HZl+JHh/c6ALi6Svy9DhFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9IPcANQ7YTUDrm7b+q3LkwbqToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5 MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0YWFmMWRhN2IvYzdhOWZkZWEtNjY0Yy0z OGUxLWJlNGEtMDllNDhiYWE4NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOTA1MjUtN2FlZS00ZTBkLWI1 NzctYWQzNGFhZjFkYTdiL2Q0MDkwNTI1LTdhZWUtNGUwZC1iNTc3LWFkMzRhYWYx ZGE3Yi5jcmwwHwYDVR0jBBgwFoAUS0RYliZ7lmmBf8mm4KnQRD52pJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0 YWFmMWRhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXIOKLeFcqnhbV1fxwHP6D6rOEgUGH5rYTSM5Iw9E1k0Hpd4hueFe0h +PlPAOwCEpDYELL88BK7W7CB/2M1Eo8NJXyi2fOij3vZyJ1h6wo0cm/XLxvCtnWw hDxy7VOJzAsP/NdB7m6IsAbYMbXnCx3CqjuPKnu4npwRFNG/M7fNVXkLQAT/8IRG yyvkjkn/C+u1AKaxVE3gBHBdYTyQxgM+QIW0ese9+aI0iB+2G1zJhuGX3XxtMCly 5cSG1/l8HbYXqoNt+YN88tKTgepy7MYlFD89e7X43+pq11NpaeupbDn0vFD0/giw RCzFRcfW6idwQCUb4FbfTdK5BCWn0v8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:26 2025 by rpki-client