$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa File: 461aabaf-95c0-3092-b23c-127e90c3f101.roa (raw, json) Hash identifier: rDxST7VmM2mEgghOj816TUm2/sNnQA+7JZ1rP1xgjFU= Subject key identifier: E1:9D:C8:A3:29:FE:C4:25:45:3B:B4:1D:04:49:04:73:51:E2:AE:8E Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B398705384376C9ABEB5D44C0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398420 IP address blocks: 74.126.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:05:38:43:76:c9:ab:eb:5d:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=da81b8d8-0a70-4bed-af24-ee5cefa87347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:a6:c5:c9:85:02:99:4d:19:58:d4:09:21: 64:34:5b:82:49:47:7a:5b:1c:3a:d5:52:c5:e6:8a: 40:33:98:62:3d:d7:64:61:20:40:da:cd:1d:df:f0: 08:f9:e3:ee:0b:ec:ae:3a:89:8e:54:cb:b8:30:2f: 42:e2:59:4c:a8:7a:d2:52:77:21:0f:70:8a:85:a9: 15:9d:49:0a:03:4e:a1:52:b0:1b:52:ca:d9:38:da: e0:0c:ee:c7:ba:db:42:d5:84:cc:10:30:88:63:d5: 45:93:27:05:40:7f:4a:9c:a8:31:65:ea:28:56:e4: f7:60:21:4b:bb:cc:32:a5:35:88:f9:5f:73:14:97: 42:c7:ca:10:2b:3f:c2:e7:be:2d:d4:3b:d5:e8:db: 42:d0:79:21:63:7c:dd:5a:19:3f:b3:96:86:6a:3f: 02:88:d4:81:b0:92:91:a7:ef:32:08:6e:39:3f:f0: a7:a1:90:2b:a4:13:c7:38:d2:b5:a6:08:56:2a:7d: 9e:66:20:05:08:d9:33:96:3b:38:e9:e5:1e:69:34: 60:3e:20:1d:df:62:fe:85:f3:da:38:63:43:c5:63: 5f:84:a1:59:87:bc:fb:4d:0a:d6:18:b4:0e:61:ea: c5:8e:78:34:6a:a4:aa:28:31:59:87:1f:2d:48:a6: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:C8:A3:29:FE:C4:25:45:3B:B4:1D:04:49:04:73:51:E2:AE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/461aabaf-95c0-3092-b23c-127e90c3f101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a9:fe:06:81:1c:8d:8c:2b:de:66:5a:5a:ff:5f:60:fc:21: e1:7e:9c:67:2f:82:93:4c:e0:f5:0d:f4:9c:d8:64:ff:08:21: fe:25:47:6d:ce:d7:5a:eb:99:a7:f8:11:93:24:58:6a:08:75: f8:92:57:64:59:7c:01:20:30:b5:17:8e:75:4d:9d:48:c4:a1: 4a:a8:af:a2:98:5e:be:ce:0b:b1:fb:fc:38:55:68:dc:45:fa: e5:06:f8:54:a3:e8:ef:bf:b8:4c:cc:2e:39:35:57:0b:d8:e3: 06:45:d5:8c:91:f9:99:57:24:a6:32:f5:eb:42:07:8e:dc:e9: 50:80:dd:7a:e8:3e:d7:59:a9:32:c9:e9:b7:bf:18:e8:03:30: 94:8d:9a:fe:ae:95:37:78:f2:86:37:8d:71:03:7d:66:e5:a7: 67:af:90:8d:21:02:ac:ef:91:78:79:86:49:00:1a:0d:93:69: 93:2d:40:5a:dd:05:69:1c:cf:8e:c9:29:23:cf:f1:f2:04:fb: e3:98:2a:3d:4b:c4:65:4c:32:93:62:78:eb:bf:d5:60:6a:18: df:4d:41:b1:61:2b:d2:84:a2:d0:27:4a:8b:04:82:fe:79:06: 75:99:bb:51:b0:c6:53:81:d9:08:c2:ee:67:6b:14:85:8b:17: 40:6f:c3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwU4Q3bJq+tdRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZGE4MWI4ZDgtMGE3MC00YmVkLWFmMjQtZWU1Y2VmYTg3MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzamxcmFAplNGVjUCSFkNFuCSUd6Wxw61VLF 5opAM5hiPddkYSBA2s0d3/AI+ePuC+yuOomOVMu4MC9C4llMqHrSUnchD3CKhakV nUkKA06hUrAbUsrZONrgDO7HuttC1YTMEDCIY9VFkycFQH9KnKgxZeooVuT3YCFL u8wypTWI+V9zFJdCx8oQKz/C574t1DvV6NtC0HkhY3zdWhk/s5aGaj8CiNSBsJKR p+8yCG45P/CnoZArpBPHONK1pghWKn2eZiAFCNkzljs46eUeaTRgPiAd32L+hfPa OGNDxWNfhKFZh7z7TQrWGLQOYerFjng0aqSqKDFZhx8tSKalawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGdyKMp/sQlRTu0HQRJBHNR4q6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNDYxYWFiYWYtOTVjMC0z MDkyLWIyM2MtMTI3ZTkwYzNmMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyp/gaBHI2MK95mWlr/X2D8IeF+nGcvgpNM4PUN9JzYZP8IIf4lR23O 11rrmaf4EZMkWGoIdfiSV2RZfAEgMLUXjnVNnUjEoUqor6KYXr7OC7H7/DhVaNxF +uUG+FSj6O+/uEzMLjk1VwvY4wZF1YyR+ZlXJKYy9etCB47c6VCA3XroPtdZqTLJ 6be/GOgDMJSNmv6ulTd48oY3jXEDfWblp2evkI0hAqzvkXh5hkkAGg2TaZMtQFrd BWkcz47JKSPP8fIE++OYKj1LxGVMMpNieOu/1WBqGN9NQbFhK9KEotAnSosEgv55 BnWZu1GwxlOB2QjC7mdrFIWLF0Bvw2M= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:32 2025 by rpki-client