$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa File: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (raw, json) Hash identifier: Z7zTNMK6Y2A4l7HwQ9SFYe2kYnap9stiTueY+IxQ9Wo= Subject key identifier: E8:98:63:59:32:C3:A6:ED:2B:75:30:7A:DC:03:8F:FE:D6:80:1E:34 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F4328584B8BE22F5BD3763C4E27CCB200 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 54041 IP address blocks: 167.253.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2f:5b:d3:76:3c:4e:27:cc:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=43117b53-cec1-480e-8d24-c16b72096881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:1f:a1:8e:3a:55:b3:e3:43:86:59:38:dd: 2c:c0:9d:1a:6e:2d:05:29:59:60:86:1b:f0:58:db: 33:2e:2e:4a:01:f9:d6:d8:bc:b5:40:1f:94:1d:fb: 45:51:75:c5:89:f4:74:19:5a:29:88:35:21:0c:41: c0:fa:1b:01:8a:4f:4c:d9:53:31:b2:34:4e:5e:43: 1d:a8:4f:15:44:00:41:a8:11:10:75:21:06:14:3b: 51:94:85:41:15:f3:fd:5a:8c:e7:1c:25:93:b5:a5: 23:5b:a8:ed:fb:5f:19:15:a8:85:f7:b8:47:10:0b: 4d:d2:f2:3f:c7:71:e7:e5:c4:a9:6c:54:0a:f6:07: 51:08:08:cc:ca:d8:5b:e6:a8:b1:b5:1f:bb:25:1b: 85:99:3f:f1:86:88:1d:b9:c8:fe:ea:44:04:46:11: 65:81:c3:e4:07:68:ca:af:f8:44:fe:05:06:23:f7: 83:de:ad:70:86:3d:3b:5d:6b:e7:ab:5c:d3:a6:2a: fa:47:2b:40:be:64:6c:03:15:79:d0:f6:c0:86:d5: 8d:1b:b5:a1:4f:69:d9:46:ef:c5:5f:83:7f:6a:93: 79:0e:e2:99:d2:d9:eb:9e:a1:b9:cd:70:93:02:0e: 3a:f1:cb:fb:06:03:80:7a:06:bf:3a:4d:02:ad:b4: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:63:59:32:C3:A6:ED:2B:75:30:7A:DC:03:8F:FE:D6:80:1E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 167.253.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:7b:66:f6:4b:be:14:fe:ff:aa:f2:92:67:b0:39:cb:ce:d9: 50:9b:5f:40:a3:25:00:50:6f:85:56:95:a0:b8:d8:f9:7b:cd: 7d:71:6c:22:9b:ea:7a:61:5e:8c:47:ad:80:b3:65:87:0b:d5: aa:62:3b:79:79:fa:7e:97:63:26:b7:91:84:b6:53:3e:76:64: dc:42:fa:38:4a:4e:11:fc:02:2f:34:ff:6e:d3:99:a4:c1:60: 16:4e:48:a9:51:9d:07:21:17:a6:92:2f:63:ab:9e:26:9c:45: c1:96:2e:f0:00:99:f9:d2:61:11:3f:94:0e:6c:51:e5:41:ec: e1:f1:d0:c8:84:42:c6:f1:11:2f:07:13:d8:e0:89:a1:ea:d7: 07:b1:38:b1:70:80:e3:e2:c9:97:db:7c:49:82:77:2f:2e:4c: a3:a6:2c:4c:07:9a:6a:55:49:4f:1a:a1:7e:19:29:bc:f0:15: 19:bf:89:24:4d:bd:91:3d:c9:f4:1a:c4:9f:56:02:d3:3b:5a: 60:8c:aa:f7:87:f6:51:08:c0:95:53:e4:e6:c5:ee:ab:3e:e8: 1f:35:30:2a:7c:ad:56:69:57:86:b3:41:b1:94:48:50:bc:6f: 2c:0d:38:56:cc:68:54:38:e3:5b:63:5c:e5:6f:27:f2:ba:d2: 60:bb:76:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4i9b03Y8TifMsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NDMxMTdiNTMtY2VjMS00ODBlLThkMjQtYzE2YjcyMDk2ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0cfoY46VbPjQ4ZZON0swJ0abi0FKVlghhvw WNszLi5KAfnW2Ly1QB+UHftFUXXFifR0GVopiDUhDEHA+hsBik9M2VMxsjROXkMd qE8VRABBqBEQdSEGFDtRlIVBFfP9WoznHCWTtaUjW6jt+18ZFaiF97hHEAtN0vI/ x3Hn5cSpbFQK9gdRCAjMythb5qixtR+7JRuFmT/xhogducj+6kQERhFlgcPkB2jK r/hE/gUGI/eD3q1whj07XWvnq1zTpir6RytAvmRsAxV50PbAhtWNG7WhT2nZRu/F X4N/apN5DuKZ0tnrnqG5zXCTAg468cv7BgOAega/Ok0CrbQA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiYY1kyw6btK3UwetwDj/7WgB40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvZjkxZDMwZjAtYThjNC0z Mzk4LWE4MGYtMjE4YjEyNTVjZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN7ZvZLvhT+/6rykmewOcvO2VCbX0CjJQBQb4VWlaC42Pl7zX1xbCKb 6nphXoxHrYCzZYcL1apiO3l5+n6XYya3kYS2Uz52ZNxC+jhKThH8Ai80/27TmaTB YBZOSKlRnQchF6aSL2OrniacRcGWLvAAmfnSYRE/lA5sUeVB7OHx0MiEQsbxES8H E9jgiaHq1wexOLFwgOPiyZfbfEmCdy8uTKOmLEwHmmpVSU8aoX4ZKbzwFRm/iSRN vZE9yfQaxJ9WAtM7WmCMqveH9lEIwJVT5ObF7qs+6B81MCp8rVZpV4azQbGUSFC8 bywNOFbMaFQ441tjXOVvJ/K60mC7dgo= -----END CERTIFICATE-----Generated at Tue Oct 21 17:58:16 2025 by rpki-client