$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa File: f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa (raw, json) Hash identifier: qC2zDeuI2wHJUjkxO+UsvNS8mjV1iXE8I73HGfntH8w= Subject key identifier: 1E:D4:FE:33:E5:40:63:A3:9F:1F:C9:57:A2:3F:5D:5D:7E:B0:AF:79 Certificate issuer: /CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Certificate serial: 010D0C9F4328584AD23BC321373A513C02BEDC80 Authority key identifier: FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 35847 IP address blocks: 167.253.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c3:21:37:3a:51:3c:02:be:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f5bb86-0dc0-441a-8698-f65ab3faa30a Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f0af9be0-936c-4481-a6c3-45a3505b1ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:a6:33:16:1b:d0:07:77:5d:9e:53:04:45: da:40:58:c0:df:eb:86:f9:a0:a0:e8:d1:cc:11:7b: b8:95:e6:74:51:5c:39:08:3d:aa:44:a9:73:96:da: b5:51:4b:5a:3d:a6:3a:d0:e3:0b:07:1c:d6:97:47: ab:df:76:d3:f3:fb:5e:9a:f8:af:e1:b5:4c:40:d6: be:5e:1c:22:70:eb:b4:6c:34:f9:59:c5:24:b3:7e: d9:da:59:9f:9e:02:70:37:d4:15:8b:c3:4b:be:09: 82:63:cc:bb:69:74:d9:3d:6c:d2:2b:79:7d:2a:64: 30:e7:38:83:30:a5:26:30:26:dc:60:98:20:24:8b: 0e:39:7b:8e:b7:bb:a3:d6:ab:9c:e1:7f:b4:83:3a: ad:49:0c:43:23:88:36:5b:06:8f:b1:6a:cf:fe:d9: 9c:70:47:2a:71:f8:5a:7c:e1:57:46:11:4c:4d:b3: 5a:cd:52:8e:22:ac:8b:38:58:a2:2a:fd:36:69:47: 30:bc:bc:4c:54:d8:b0:d7:de:49:59:ca:55:77:7c: 0b:43:9b:91:2e:a5:e6:7e:a1:dd:2a:ba:ad:c3:2b: 79:77:da:c2:ee:e0:00:06:a9:1e:79:46:40:ae:10: b4:cb:51:bd:0f:57:b9:7c:d1:b7:68:fb:cd:d7:f4: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D4:FE:33:E5:40:63:A3:9F:1F:C9:57:A2:3F:5D:5D:7E:B0:AF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/f6b3f6a6-3a8c-3e07-80ab-28a8f432897a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.crl X509v3 Authority Key Identifier: keyid:FC:36:F7:61:29:EA:46:F6:6C:7D:D6:76:22:B8:83:8B:D5:F0:48:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7f5bb86-0dc0-441a-8698-f65ab3faa30a.cer sbgp-ipAddrBlock: critical IPv4: 167.253.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:80:6d:12:a1:2b:e0:36:09:5f:18:ac:17:31:cd:3a:ff:25: 0d:56:8a:ca:b8:58:47:50:f7:50:ad:2c:c0:92:a1:8a:d8:45: 18:1e:07:3f:e9:10:f0:5d:7b:61:a1:0e:b1:45:6f:b4:fa:7e: 3a:d0:4d:f9:32:9d:c0:53:1a:fa:cb:01:bc:29:4b:98:8d:1b: 28:58:7b:94:9d:4b:15:73:68:4a:06:8a:b2:2e:d1:36:c6:19: 2f:59:1a:e5:9d:09:bd:ba:bc:73:ba:01:78:c5:ac:c9:70:2d: 2f:7e:d3:c7:8e:31:17:ec:99:fc:86:48:72:8c:b9:d6:cd:ad: 20:d0:e1:f2:54:b6:81:de:c0:7c:19:da:e6:dd:f6:93:52:f4: dc:c4:8e:41:7a:ab:27:10:3c:b3:63:c2:f9:32:7d:00:67:5c: 79:ec:d7:32:96:d0:55:13:57:7e:0b:63:0f:55:54:14:b6:04: 6f:d3:80:30:41:4c:4d:85:ef:f6:8f:b0:61:ae:9e:15:d6:fe: 2b:df:0e:fa:fb:05:ac:de:8a:c9:6e:3d:aa:82:06:56:da:bd: 02:16:ec:e3:6c:29:05:56:60:72:3a:d1:a8:5b:0f:fb:54:a0: 36:9d:a9:00:e7:a1:32:6e:ab:68:9d:06:45:46:5e:5f:40:ed: a0:04:9e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8MhNzpRPAK+3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdmNWJiODYtMGRjMC00NDFhLTg2OTgtZjY1YWIzZmFh MzBhMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjBhZjliZTAtOTM2Yy00NDgxLWE2YzMtNDVhMzUwNWIxYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD2mMxYb0Ad3XZ5TBEXaQFjA3+uG+aCg6NHM EXu4leZ0UVw5CD2qRKlzltq1UUtaPaY60OMLBxzWl0er33bT8/temviv4bVMQNa+ XhwicOu0bDT5WcUks37Z2lmfngJwN9QVi8NLvgmCY8y7aXTZPWzSK3l9KmQw5ziD MKUmMCbcYJggJIsOOXuOt7uj1quc4X+0gzqtSQxDI4g2WwaPsWrP/tmccEcqcfha fOFXRhFMTbNazVKOIqyLOFiiKv02aUcwvLxMVNiw195JWcpVd3wLQ5uRLqXmfqHd Krqtwyt5d9rC7uAABqkeeUZArhC0y1G9D1e5fNG3aPvN1/TfUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7U/jPlQGOjnx/JV6I/XV1+sK95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1 YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVhYjNmYWEzMGEvZjZiM2Y2YTYtM2E4Yy0z ZTA3LTgwYWItMjhhOGY0MzI4OTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDdmNWJiODYtMGRjMC00NDFhLTg2 OTgtZjY1YWIzZmFhMzBhL2Q3ZjViYjg2LTBkYzAtNDQxYS04Njk4LWY2NWFiM2Zh YTMwYS5jcmwwHwYDVR0jBBgwFoAU/Db3YSnqRvZsfdZ2IriDi9XwSO8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kN2Y1YmI4Ni0wZGMwLTQ0MWEtODY5OC1mNjVh YjNmYWEzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSAbRKhK+A2CV8YrBcxzTr/JQ1Wisq4WEdQ91CtLMCSoYrYRRgeBz/p EPBde2GhDrFFb7T6fjrQTfkyncBTGvrLAbwpS5iNGyhYe5SdSxVzaEoGirIu0TbG GS9ZGuWdCb26vHO6AXjFrMlwLS9+08eOMRfsmfyGSHKMudbNrSDQ4fJUtoHewHwZ 2ubd9pNS9NzEjkF6qycQPLNjwvkyfQBnXHns1zKW0FUTV34LYw9VVBS2BG/TgDBB TE2F7/aPsGGunhXW/ivfDvr7BazeisluPaqCBlbavQIW7ONsKQVWYHI60ahbD/tU oDadqQDnoTJuq2idBkVGXl9A7aAEngs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:48:10 2025 by rpki-client