$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa File: aefaffa5-f3e0-3cff-b520-95718774c4ca.roa (raw, json) Hash identifier: w1hzS+KR3d78pHyiYBleCQQ1eNu/leDgahQKCvaZF48= Subject key identifier: 1C:CF:FB:D3:D0:6C:24:F8:EC:3D:86:0D:BB:55:DF:E8:3B:E1:D5:5A Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Certificate serial: 010D0C9F4328584B13D6BBFCA76A58B25D334C00 Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 397745 IP address blocks: 167.100.16.0/22 maxlen: 22 216.47.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bb:fc:a7:6a:58:b2:5d:33:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=b68c1181-3428-4be5-b881-99c18498d386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:45:0a:4c:a9:62:4a:d8:f3:dc:d9:40:e3: e3:ba:01:92:37:e7:4c:00:49:80:71:9c:11:c5:62: 11:d2:58:c8:bb:35:b5:aa:43:81:00:65:9a:d9:cf: a3:5e:f1:45:fe:0d:84:b4:4b:9b:7f:fd:13:82:b5: 76:09:18:58:05:e3:d5:98:e5:65:62:23:af:a7:a2: eb:c2:c7:25:99:4d:c7:81:50:1a:a9:8d:e6:c2:54: 6a:49:b5:d9:48:32:38:3f:57:11:ca:d6:67:86:9b: a9:d2:99:75:ac:c6:89:0d:fc:8f:fa:22:77:ee:67: 86:5b:29:11:dc:0e:7e:29:73:9d:e4:f8:2f:f2:93: 9b:6b:b0:de:c2:06:37:4d:15:61:55:89:d0:0d:ce: 95:a6:25:97:c0:db:64:f6:92:d9:27:f0:be:88:cd: bd:7d:45:d6:e1:66:2b:92:5b:b3:4e:33:f1:5c:b6: f5:5f:8e:d9:d8:f1:e5:d7:74:88:69:87:52:1d:0c: 4c:ee:a0:68:7a:4c:5a:0b:6d:59:f2:02:1a:e2:19: a4:44:d0:e8:2c:39:98:2a:72:9e:ff:9a:f0:dc:e0: ee:3a:7a:f5:ea:93:9a:a0:06:f5:2a:81:83:d3:62: d2:c1:5a:19:66:d2:9f:71:07:f4:c0:72:6b:da:bc: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:FB:D3:D0:6C:24:F8:EC:3D:86:0D:BB:55:DF:E8:3B:E1:D5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl X509v3 Authority Key Identifier: keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer sbgp-ipAddrBlock: critical IPv4: 167.100.16.0/22 216.47.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1f:2f:b8:e2:6c:e5:a6:2f:3e:64:fa:13:ce:0e:00:a7:77: 52:53:f3:ea:55:1d:5a:b9:7f:33:d1:32:fb:e9:3c:68:72:73: 00:7e:3e:79:43:cc:01:9c:52:ec:0a:5f:69:b3:a3:74:ed:45: 27:7a:e3:a2:8d:c9:12:b0:ee:66:1d:db:2e:f8:ea:6c:4c:99: f5:92:fc:46:5f:1e:cf:06:4e:98:e4:79:82:7c:fc:4f:42:08: fa:d6:a3:84:04:de:6b:af:00:bd:6b:c5:33:db:2a:fa:8a:a6: 5b:bd:07:c9:90:4c:f2:30:d7:8e:3d:83:1a:ce:5c:3a:3c:1d: c8:90:09:a0:10:9c:0e:4e:f8:d8:2f:9d:34:b8:6c:c8:3a:6a: a8:c6:f0:09:5c:0b:ea:4e:a5:c5:cb:4e:2b:22:42:c1:9d:fc: 67:5e:a4:8c:e8:cd:89:ce:68:4b:64:f5:46:19:3a:dc:2e:5a: 29:d6:8f:d8:c0:49:05:c3:79:c5:67:12:95:3f:75:ff:d9:aa: d0:a2:90:92:11:c4:9c:db:2c:33:17:52:e1:86:86:c9:ca:cb: c5:f8:ce:9a:24:f5:77:04:b5:05:c2:85:48:4a:86:91:52:2e: 5d:47:11:73:b2:64:61:eb:68:ee:38:7b:d3:d8:c6:63:31:f2: 33:63:5b:e3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsT1rv8p2pYsl0zTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3 NzNhMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YjY4YzExODEtMzQyOC00YmU1LWI4ODEtOTljMTg0OThkMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmudFCkypYkrY89zZQOPjugGSN+dMAEmAcZwR xWIR0ljIuzW1qkOBAGWa2c+jXvFF/g2EtEubf/0TgrV2CRhYBePVmOVlYiOvp6Lr wsclmU3HgVAaqY3mwlRqSbXZSDI4P1cRytZnhpup0pl1rMaJDfyP+iJ37meGWykR 3A5+KXOd5Pgv8pOba7DewgY3TRVhVYnQDc6VpiWXwNtk9pLZJ/C+iM29fUXW4WYr kluzTjPxXLb1X47Z2PHl13SIaYdSHQxM7qBoekxaC21Z8gIa4hmkRNDoLDmYKnKe /5rw3ODuOnr16pOaoAb1KoGD02LSwVoZZtKfcQf0wHJr2ryRXQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBzP+9PQbCT47D2GDbtV3+g74dVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvYWVmYWZmYTUtZjNlMC0z Y2ZmLWI1MjAtOTU3MTg3NzRjNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5 NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4 ZTFmOTc3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCp2QQAwQB 2C8mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL0fL7jibOWmLz5k+hPODgCnd1JT8+pVHVq5fzPRMvvpPGhy cwB+PnlDzAGcUuwKX2mzo3TtRSd646KNyRKw7mYd2y746mxMmfWS/EZfHs8GTpjk eYJ8/E9CCPrWo4QE3muvAL1rxTPbKvqKplu9B8mQTPIw1449gxrOXDo8HciQCaAQ nA5O+NgvnTS4bMg6aqjG8AlcC+pOpcXLTisiQsGd/GdepIzozYnOaEtk9UYZOtwu WinWj9jASQXDecVnEpU/df/ZqtCikJIRxJzbLDMXUuGGhsnKy8X4zpok9XcEtQXC hUhKhpFSLl1HEXOyZGHraO44e9PYxmMx8jNjW+M= -----END CERTIFICATE-----Generated at Tue Oct 21 18:02:58 2025 by rpki-client