$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa File: e6acc986-bd15-3041-b380-e9a3295ef802.roa (raw, json) Hash identifier: 3YkBScJxIP6H/wpQfXrbpJtory3xJP2Fw9ukYYL+d8s= Subject key identifier: 1E:39:34:64:C7:59:15:99:A5:DC:4D:8A:EF:CC:0C:6A:FC:A9:65:00 Certificate issuer: /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Certificate serial: 010D0C9F4328584FB93BC76E6A0CFF5D65A1BD00 Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 12083 IP address blocks: 167.253.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:c7:6e:6a:0c:ff:5d:65:a1:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=fa690fd4-6fc8-4039-a48f-bf8cee23750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:52:6a:39:83:7b:b7:5e:4e:0d:40:2d:75: c7:5c:9f:18:3e:d7:c2:ab:38:35:d7:38:d2:71:2a: 55:81:b7:fc:1f:67:8e:66:52:ee:c2:e3:7a:97:d5: a5:04:9c:60:3d:f1:af:d2:1e:d7:b5:17:11:15:8a: cf:c7:e9:48:54:b0:da:01:9f:06:4b:1d:5b:fb:66: 8e:b7:71:d6:d9:54:d3:1b:44:54:78:b1:4e:63:ed: 78:a9:3e:11:62:08:12:7f:8f:74:91:76:19:6e:45: 01:0f:e5:cf:82:2a:fe:58:7a:41:35:8c:af:96:36: 10:4c:f3:39:89:67:ee:aa:89:77:d4:ed:d4:07:ef: 3a:b5:ee:fa:9d:54:f7:35:2a:85:fb:91:49:b9:d7: b6:49:f3:a6:fc:b0:fc:a7:ee:83:39:e1:48:6e:d7: c5:03:dd:8e:e7:1a:1a:a8:5c:dc:c0:41:5d:1e:41: 27:8c:47:97:78:b4:58:64:0f:62:f2:61:3c:8f:bc: 9b:fa:e0:da:f9:58:7c:46:ef:fc:f9:a8:32:09:15: 9f:51:46:b1:77:46:7e:60:5d:3a:4e:5f:00:8c:bc: bd:5d:a6:fa:5b:34:1d:ed:dc:d6:cc:66:9e:02:0d: c3:f5:44:db:4f:80:c1:e0:f8:8b:db:4e:d5:51:f9: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:34:64:C7:59:15:99:A5:DC:4D:8A:EF:CC:0C:6A:FC:A9:65:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/e6acc986-bd15-3041-b380-e9a3295ef802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl X509v3 Authority Key Identifier: keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer sbgp-ipAddrBlock: critical IPv4: 167.253.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:76:92:93:a3:89:4a:bf:04:e0:07:f7:d9:71:24:ab:13:38: e2:4c:06:9d:59:b0:8b:f1:59:c7:f9:ce:07:d4:8f:4e:93:3c: 24:f2:c5:e5:cb:f1:3e:54:ea:3d:d1:2f:08:ef:e0:bb:37:13: 5f:9b:e1:e7:22:b3:33:fb:a5:a4:1a:90:ef:e4:aa:fc:1e:ed: 8f:df:5c:42:14:00:97:17:65:00:6d:17:37:fd:a7:d5:d0:bc: 1f:77:7e:d5:4d:16:35:df:43:cc:36:e4:7c:6e:25:05:78:bb: 1a:0d:b2:5b:e2:7c:bd:cc:b0:3b:3b:fa:7d:4b:4b:4c:02:e6: 19:cf:f3:20:1c:6b:5f:f8:76:7a:97:03:c3:ab:9f:ca:3b:bd: 30:c8:b0:6e:1d:c9:b9:76:2a:22:4f:82:d7:39:a9:ad:c1:0a: 8d:68:72:77:d7:66:30:c3:ab:25:de:23:00:4f:6a:60:bd:3a: 01:6c:e9:a6:c6:ad:6c:f8:41:62:cc:f9:03:87:bc:58:18:2d: 67:2b:b9:b9:85:4d:88:3e:39:96:53:e0:fb:48:a7:9c:c0:e4: f9:bb:a2:0d:76:79:63:93:f4:b3:e7:38:60:ff:5f:95:e8:a8: c9:59:47:9e:84:b8:31:a0:9b:95:96:9c:3d:fa:8d:9a:1b:be: 49:91:89:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O8duagz/XWWhvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh M2IyMB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmE2OTBmZDQtNmZjOC00MDM5LWE0OGYtYmY4Y2VlMjM3NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhxSajmDe7deTg1ALXXHXJ8YPtfCqzg11zjS cSpVgbf8H2eOZlLuwuN6l9WlBJxgPfGv0h7XtRcRFYrPx+lIVLDaAZ8GSx1b+2aO t3HW2VTTG0RUeLFOY+14qT4RYggSf490kXYZbkUBD+XPgir+WHpBNYyvljYQTPM5 iWfuqol31O3UB+86te76nVT3NSqF+5FJude2SfOm/LD8p+6DOeFIbtfFA92O5xoa qFzcwEFdHkEnjEeXeLRYZA9i8mE8j7yb+uDa+Vh8Ru/8+agyCRWfUUaxd0Z+YF06 Tl8AjLy9Xab6WzQd7dzWzGaeAg3D9UTbT4DB4PiL207VUfmg4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB45NGTHWRWZpdxNiu/MDGr8qWUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2 NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvZTZhY2M5ODYtYmQxNS0z MDQxLWIzODAtZTlhMzI5NWVmODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2 YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt2kpOjiUq/BOAH99lxJKsTOOJMBp1ZsIvxWcf5zgfUj06TPCTyxeXL 8T5U6j3RLwjv4Ls3E1+b4eciszP7paQakO/kqvwe7Y/fXEIUAJcXZQBtFzf9p9XQ vB93ftVNFjXfQ8w25HxuJQV4uxoNslvifL3MsDs7+n1LS0wC5hnP8yAca1/4dnqX A8Orn8o7vTDIsG4dybl2KiJPgtc5qa3BCo1ocnfXZjDDqyXeIwBPamC9OgFs6abG rWz4QWLM+QOHvFgYLWcrubmFTYg+OZZT4PtIp5zA5Pm7og12eWOT9LPnOGD/X5Xo qMlZR56EuDGgm5WWnD36jZobvkmRiaM= -----END CERTIFICATE-----Generated at Sun Nov 15 13:49:12 2026 by rpki-client