$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json) Hash identifier: wIRapM59oFbzy2NvF2Ha4NYqPzAR/ISZApCF3Z/lhG8= Subject key identifier: 77:01:D1:F5:C3:A4:E0:81:C3:A4:2A:43:B8:57:31:D8:28:9F:5B:51 Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Certificate serial: 010D0C9F4328584B80B7534CCBAC75B7363397C0 Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 399507 IP address blocks: 91.106.220.0/22 maxlen: 24 204.52.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:53:4c:cb:ac:75:b7:36:33:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=c7bd5f5b-0cea-402c-8a44-1136a42c1a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:45:1c:18:f3:bc:b8:5c:f2:fa:c2:83:d6:a7: 1a:0f:8b:e8:ed:5f:b0:ba:87:85:75:18:6b:2e:da: 55:56:07:64:74:fa:98:27:c1:8c:b9:60:1b:ad:56: 1d:ad:78:7e:fa:ea:d0:a6:95:52:d2:70:53:49:66: 63:0b:4b:3e:77:b1:2e:ed:2f:bc:d9:39:2c:db:99: 21:0c:5c:2f:4c:d5:7d:3e:ef:2f:5a:91:0b:71:d0: a8:e7:17:b2:4d:d5:70:fc:e7:a3:3f:81:9a:4a:0a: d6:5d:22:e2:3a:1d:c7:28:b4:62:8c:13:57:44:70: 22:e3:aa:bb:42:01:44:e3:3e:22:ae:c0:b2:47:0f: d7:d7:fc:b0:ab:4b:5d:5c:1f:82:0f:d6:ab:0a:ed: c0:3a:b8:cf:78:88:b2:ef:96:a9:5e:50:bb:77:5b: 56:f3:36:1f:50:7c:01:49:3f:d9:61:13:70:d4:70: 67:8b:28:21:cf:96:98:35:6c:22:c1:6f:9f:e4:6a: dd:a2:c5:b0:9c:a1:6b:90:23:a6:1f:e4:f8:ce:21: a8:65:c8:d2:53:57:6d:08:5a:fb:17:46:11:ab:3e: a7:7a:9a:2a:0d:e9:f8:64:db:9b:c0:cf:89:55:56: 5f:05:5b:4b:58:72:ff:d3:10:65:54:80:4c:b9:93: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:01:D1:F5:C3:A4:E0:81:C3:A4:2A:43:B8:57:31:D8:28:9F:5B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl X509v3 Authority Key Identifier: keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer sbgp-ipAddrBlock: critical IPv4: 91.106.220.0/22 204.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:46:c1:e5:62:7e:22:e1:c7:bb:fc:c2:13:5a:99:f7:d9:78: db:68:5b:6f:f2:c4:53:f5:28:4f:2c:df:14:81:e7:0a:6b:b8: 30:8c:1b:b6:a8:76:bc:cb:0a:f0:bd:51:bf:f9:e5:88:10:82: 1b:91:41:cc:87:ae:ef:34:e4:66:b2:fc:a2:37:7e:bb:0f:58: d4:ad:fd:ce:6f:e4:4c:b7:36:b0:9c:49:41:2a:36:fb:3b:f8: c7:c4:29:17:2e:ab:a6:36:73:46:d8:d6:a0:77:df:d7:54:ee: c1:04:48:f7:0e:24:d3:00:a7:23:56:b0:67:48:19:78:1f:d6: 62:b4:36:20:1a:e0:00:3e:31:52:87:a1:03:99:0a:9d:e1:b6: 87:e8:51:16:fa:3f:60:0e:43:f1:01:5b:12:83:f3:23:72:0a: f5:68:70:1b:fb:b8:50:a6:02:05:4f:6d:28:8d:35:18:32:44: 7a:dd:aa:4e:2d:40:f8:9b:57:94:6d:02:65:33:88:4f:da:c7: f2:7c:c0:99:6a:f5:35:3c:78:7c:a4:24:13:1a:4a:fa:71:db: 7d:2d:9f:3f:aa:ee:80:f4:2d:aa:c8:c3:90:1a:d0:e7:20:1d: db:8e:3e:50:08:86:26:da:99:6c:08:12:62:4d:d6:7f:bd:9d: 77:e0:b0:02 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuAt1NMy6x1tzYzl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3OGQyMWItOWJmMC00MTcyLTllY2UtNGE0ZDg0ZmM2 NmU3MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YzdiZDVmNWItMGNlYS00MDJjLThhNDQtMTEzNmE0MmMxYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UUcGPO8uFzy+sKD1qcaD4vo7V+wuoeFdRhr LtpVVgdkdPqYJ8GMuWAbrVYdrXh++urQppVS0nBTSWZjC0s+d7Eu7S+82Tks25kh DFwvTNV9Pu8vWpELcdCo5xeyTdVw/OejP4GaSgrWXSLiOh3HKLRijBNXRHAi46q7 QgFE4z4irsCyRw/X1/ywq0tdXB+CD9arCu3AOrjPeIiy75apXlC7d1tW8zYfUHwB ST/ZYRNw1HBniyghz5aYNWwiwW+f5GrdosWwnKFrkCOmH+T4ziGoZcjSU1dtCFr7 F0YRqz6nepoqDen4ZNubwM+JVVZfBVtLWHL/0xBlVIBMuZMWcQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHcB0fXDpOCBw6QqQ7hXMdgon1tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4 ZDIxYi05YmYwLTQxNzItOWVjZS00YTRkODRmYzY2ZTcvODZlMzRlNmMtMGUwNi0z NDJiLTljODgtZjNmMDgwZjQ2ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzE3OGQyMWItOWJmMC00MTcyLTll Y2UtNGE0ZDg0ZmM2NmU3L2MxNzhkMjFiLTliZjAtNDE3Mi05ZWNlLTRhNGQ4NGZj NjZlNy5jcmwwHwYDVR0jBBgwFoAUmBsiJHtMzI26D1mpAZmK2c++z4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4ZDIxYi05YmYwLTQxNzItOWVjZS00YTRk ODRmYzY2ZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW2rcAwQE zDQQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABNGweVifiLhx7v8whNamffZeNtoW2/yxFP1KE8s3xSB5wpr uDCMG7aodrzLCvC9Ub/55YgQghuRQcyHru805Gay/KI3frsPWNSt/c5v5Ey3NrCc SUEqNvs7+MfEKRcuq6Y2c0bY1qB339dU7sEESPcOJNMApyNWsGdIGXgf1mK0NiAa 4AA+MVKHoQOZCp3htofoURb6P2AOQ/EBWxKD8yNyCvVocBv7uFCmAgVPbSiNNRgy RHrdqk4tQPibV5RtAmUziE/ax/J8wJlq9TU8eHykJBMaSvpx230tnz+q7oD0LarI w5Aa0OcgHduOPlAIhibamWwIEmJN1n+9nXfgsAI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:21:29 2025 by rpki-client