$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa File: 2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa (raw, json) Hash identifier: y2L54ERHmTZhhDKXMB+UTxg/vFJwixkxrl07tNOnj/g= Subject key identifier: A4:D7:F0:84:51:D6:AA:A8:A1:46:A0:FA:08:4A:59:7E:09:04:38:3D Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584F49730E48918188DFDDF364C0 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8011 IP address blocks: 167.17.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0e:48:91:81:88:df:dd:f3:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7fe5bd35-4018-42cb-9409-79f0e5e2fed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:88:65:67:f5:84:46:44:89:5a:3a:a7:bf: ee:e7:78:8c:02:66:a7:22:61:78:fc:a2:1f:a4:03: c2:18:7d:54:0b:8e:a4:3a:4a:8b:29:00:9d:ac:c4: 10:f6:28:38:5c:fb:9b:69:34:7e:d0:bb:76:34:85: b1:a9:77:62:fd:59:1c:cb:8d:c7:66:b3:40:76:f0: a1:b0:57:61:c9:84:42:07:0a:d8:ed:5c:c4:e2:71: fd:6c:ff:3f:e6:17:33:1c:39:3f:7f:f3:d6:1f:ce: 17:4d:7e:bd:da:c1:ff:88:e2:b7:da:dd:3e:72:5a: 79:73:62:dd:96:8b:71:38:ef:3d:12:b1:c9:d8:67: e6:f6:09:06:bf:e4:58:71:f2:ae:12:b1:e5:37:3c: 56:31:81:77:de:cd:69:1d:b5:4b:45:c7:47:9e:1f: 81:4b:ba:4e:6e:9a:8c:fa:23:c5:2f:46:f8:33:41: 85:b8:86:ea:23:c6:a6:18:38:ac:b7:be:3f:4f:22: 34:57:0e:3d:35:63:77:9b:4d:40:a1:90:df:47:42: 76:ed:39:0b:af:80:fe:fd:d3:34:b5:4c:cc:e7:de: ce:93:09:41:91:20:c2:81:3f:f1:22:58:71:2e:16: de:04:4f:39:ff:bd:1b:46:70:66:89:1f:fb:f5:28: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D7:F0:84:51:D6:AA:A8:A1:46:A0:FA:08:4A:59:7E:09:04:38:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/2ffb35d4-0c0d-3364-881c-4c1e58422dd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv4: 167.17.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cb:ff:e9:2b:c6:8d:0d:5d:f3:96:72:27:83:d0:ce:b4:fc: 9b:e1:6e:ea:2c:27:60:6b:32:57:df:0a:ff:e9:48:7f:46:f7: 9a:9b:4e:13:52:f9:65:c0:e5:e8:50:36:7e:45:4f:98:cb:13: d2:3c:1a:14:8e:43:99:84:a1:ba:74:f6:c3:e4:19:36:9e:f7: 50:b3:d7:8e:13:02:36:90:92:25:67:57:2c:28:94:3a:d3:8e: 85:3c:86:13:e3:0f:e8:57:71:3a:5f:af:41:fa:68:24:28:f4: 0e:bb:7a:51:68:c1:31:e3:e2:e2:04:45:ea:0b:4f:e4:fa:db: e1:0a:4a:f3:8f:23:01:a5:d2:e0:8c:40:c9:3e:fb:d5:3d:8b: f8:68:f0:5c:9d:6e:1c:2d:2d:2a:de:14:72:cf:cc:ce:1e:b3: 53:d1:9f:40:a5:03:7f:37:60:06:41:8c:f4:d4:34:ce:5f:d8: 97:5f:6e:3e:46:f4:49:dc:97:f2:fb:15:19:49:26:b3:df:5c: f7:2d:57:44:b2:09:82:36:b9:63:e2:5d:01:8e:86:e9:49:61: 28:43:d6:26:ed:8d:cf:bc:c8:4f:a5:cf:f9:ed:68:e3:be:87: 3e:7a:66:a4:c2:cc:e1:48:32:06:39:5b:09:3d:7b:84:b2:3b: c3:b5:1d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw5IkYGI393zZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ZlNWJkMzUtNDAxOC00MmNiLTk0MDktNzlmMGU1ZTJmZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpeIZWf1hEZEiVo6p7/u53iMAmanImF4/KIf pAPCGH1UC46kOkqLKQCdrMQQ9ig4XPubaTR+0Lt2NIWxqXdi/Vkcy43HZrNAdvCh sFdhyYRCBwrY7VzE4nH9bP8/5hczHDk/f/PWH84XTX692sH/iOK32t0+clp5c2Ld lotxOO89ErHJ2Gfm9gkGv+RYcfKuErHlNzxWMYF33s1pHbVLRcdHnh+BS7pObpqM +iPFL0b4M0GFuIbqI8amGDist74/TyI0Vw49NWN3m01AoZDfR0J27TkLr4D+/dM0 tUzM597OkwlBkSDCgT/xIlhxLhbeBE85/70bRnBmiR/79SgGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTX8IRR1qqooUag+ghKWX4JBDg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvMmZmYjM1ZDQtMGMwZC0z MzY0LTg4MWMtNGMxZTU4NDIyZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpxHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzL/+krxo0NXfOWcieD0M60/JvhbuosJ2BrMlffCv/pSH9G95qbThNS +WXA5ehQNn5FT5jLE9I8GhSOQ5mEobp09sPkGTae91Cz144TAjaQkiVnVywolDrT joU8hhPjD+hXcTpfr0H6aCQo9A67elFowTHj4uIEReoLT+T62+EKSvOPIwGl0uCM QMk++9U9i/ho8FydbhwtLSreFHLPzM4es1PRn0ClA383YAZBjPTUNM5f2Jdfbj5G 9Encl/L7FRlJJrPfXPctV0SyCYI2uWPiXQGOhulJYShD1ibtjc+8yE+lz/ntaOO+ hz56ZqTCzOFIMgY5Wwk9e4SyO8O1HQk= -----END CERTIFICATE-----Generated at Fri Oct 2 16:39:39 2026 by rpki-client