$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa File: 94057822-67e9-351b-a192-3c74187f8ae0.roa (raw, json) Hash identifier: rtt1QNovm6GY/Y/Iwpjt1kfwR6P/qTmb5HTyVPOUmYQ= Subject key identifier: 56:78:03:BF:D9:0A:4C:12:E5:C2:6B:C2:C8:EA:C9:2E:3C:F4:C4:7B Certificate issuer: /CN=c52a3659-4578-49f3-9ef2-ea8640fc6339 Certificate serial: 010D0C9F4328584ACF70F8B356E0D7BBFBE9B480 Authority key identifier: F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 167.253.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:70:f8:b3:56:e0:d7:bb:fb:e9:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c52a3659-4578-49f3-9ef2-ea8640fc6339 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=b3217787-be23-441d-9f1a-ca0bcb4f7493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:69:c3:54:18:4e:9e:70:f2:db:28:64:24: 99:18:d3:8a:ad:4c:57:0e:7f:b0:3e:08:1e:8f:bf: dc:bf:9b:bd:29:5b:1d:92:a9:ca:5d:71:56:18:b7: c9:0e:4a:08:52:be:3a:7f:97:11:72:bd:d5:f7:9a: 8e:39:8f:65:c2:cf:5b:10:da:72:aa:fa:b5:bb:0b: 65:1e:72:a2:42:8d:bb:40:28:d1:e6:4c:de:73:e4: f8:19:04:77:0e:6a:63:18:f1:ed:7f:44:b3:a4:ed: cf:9e:6e:1f:60:b7:8e:dd:5a:b7:7c:b3:7f:9c:ae: d9:f4:64:37:70:e8:75:63:64:ad:a4:ac:74:76:a8: fc:2f:c9:da:84:a7:e4:47:ef:42:91:aa:31:96:e9: 81:11:64:c6:c8:a5:7c:e4:95:a1:62:ba:bc:03:43: 90:35:4a:d2:99:1c:6c:06:1e:1b:31:42:c1:82:91: b6:63:3e:c4:5b:65:e3:83:2f:80:db:d5:07:23:86: e7:10:0a:bd:9a:81:29:bb:1b:b9:26:09:50:b1:ac: 2f:12:15:d8:3e:25:83:6d:70:4b:dc:26:60:85:cc: 75:39:e1:af:9c:d0:56:1b:cd:ea:44:4c:f5:6f:35: a0:90:71:86:82:43:5d:32:42:4b:76:aa:e9:2d:d4: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:03:BF:D9:0A:4C:12:E5:C2:6B:C2:C8:EA:C9:2E:3C:F4:C4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/94057822-67e9-351b-a192-3c74187f8ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339/c52a3659-4578-49f3-9ef2-ea8640fc6339.crl X509v3 Authority Key Identifier: keyid:F5:1A:36:FC:86:A2:76:F3:BB:1F:6D:6F:3B:18:39:FD:CF:D9:98:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c52a3659-4578-49f3-9ef2-ea8640fc6339.cer sbgp-ipAddrBlock: critical IPv4: 167.253.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:08:92:00:d6:37:f5:4d:a7:6e:b0:4b:3d:cb:c2:fa:5e:02: 84:9b:02:fa:22:e7:f2:aa:17:eb:45:2e:75:d7:5a:d9:02:77: 60:79:b8:d1:30:e5:c5:10:cb:fd:df:78:0c:d3:a5:a5:2e:2f: ac:1d:8c:64:c8:f2:3a:48:ff:59:ad:5d:11:ca:ca:51:cd:29: 4e:b2:de:db:ae:28:d4:56:a0:8a:55:e4:93:1b:e2:78:69:10: fb:94:86:ef:52:a8:0a:33:16:80:0d:0e:4a:ec:cc:79:c6:45: c1:1d:35:b3:8b:28:fd:32:62:e7:aa:bb:df:4c:21:28:d1:74: df:53:8e:80:d7:e8:d1:67:6c:d7:d5:9b:d7:83:44:35:00:a9: 43:31:42:71:c8:eb:c0:3c:3c:f0:4d:07:ac:0b:c1:97:06:95: cc:c7:1f:ec:6e:65:cc:c4:05:46:36:ae:56:d6:3f:b7:12:4f: 40:20:d2:30:47:ba:c7:0e:7a:34:89:48:ad:a7:47:75:34:2d: 5d:4c:9d:23:ed:be:0e:c3:d9:72:d1:bb:7c:30:d9:44:c4:df: 61:66:ec:cb:32:bc:c4:b0:8d:76:43:cd:a3:e8:13:92:bb:35: 30:cf:5d:68:85:65:1d:53:cb:0d:35:41:99:89:14:08:bc:cb: eb:46:d6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcPizVuDXu/vptIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyYTM2NTktNDU3OC00OWYzLTllZjItZWE4NjQwZmM2 MzM5MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YjMyMTc3ODctYmUyMy00NDFkLTlmMWEtY2EwYmNiNGY3NDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpVpw1QYTp5w8tsoZCSZGNOKrUxXDn+wPgge j7/cv5u9KVsdkqnKXXFWGLfJDkoIUr46f5cRcr3V95qOOY9lws9bENpyqvq1uwtl HnKiQo27QCjR5kzec+T4GQR3DmpjGPHtf0SzpO3Pnm4fYLeO3Vq3fLN/nK7Z9GQ3 cOh1Y2StpKx0dqj8L8nahKfkR+9CkaoxlumBEWTGyKV85JWhYrq8A0OQNUrSmRxs Bh4bMULBgpG2Yz7EW2Xjgy+A29UHI4bnEAq9moEpuxu5JglQsawvEhXYPiWDbXBL 3CZghcx1OeGvnNBWG83qREz1bzWgkHGGgkNdMkJLdqrpLdSuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ4A7/ZCkwS5cJrwsjqyS489MR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNTJh MzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2NDBmYzYzMzkvOTQwNTc4MjItNjdlOS0z NTFiLWExOTItM2M3NDE4N2Y4YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzUyYTM2NTktNDU3OC00OWYzLTll ZjItZWE4NjQwZmM2MzM5L2M1MmEzNjU5LTQ1NzgtNDlmMy05ZWYyLWVhODY0MGZj NjMzOS5jcmwwHwYDVR0jBBgwFoAU9Ro2/IaidvO7H21vOxg5/c/ZmPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNTJhMzY1OS00NTc4LTQ5ZjMtOWVmMi1lYTg2 NDBmYzYzMzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQIkgDWN/VNp26wSz3LwvpeAoSbAvoi5/KqF+tFLnXXWtkCd2B5uNEw 5cUQy/3feAzTpaUuL6wdjGTI8jpI/1mtXRHKylHNKU6y3tuuKNRWoIpV5JMb4nhp EPuUhu9SqAozFoANDkrszHnGRcEdNbOLKP0yYuequ99MISjRdN9TjoDX6NFnbNfV m9eDRDUAqUMxQnHI68A8PPBNB6wLwZcGlczHH+xuZczEBUY2rlbWP7cST0Ag0jBH uscOejSJSK2nR3U0LV1MnSPtvg7D2XLRu3ww2UTE32Fm7MsyvMSwjXZDzaPoE5K7 NTDPXWiFZR1Tyw01QZmJFAi8y+tG1go= -----END CERTIFICATE-----Generated at Sun Aug 24 03:32:19 2025 by rpki-client