$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa File: b53b1711-dad1-3ffa-b45e-b8a228976663.roa (raw, json) Hash identifier: 7nNNwjMhbJTrKSLZWUIMGAHBF0l6T0sBGOo7QdJIz7Q= Subject key identifier: E5:4F:C3:BD:53:2D:17:E6:36:B3:AD:F0:4D:0B:56:8E:22:52:E2:B0 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584B9012323474B54BE5BDE8B560 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 7018 IP address blocks: 170.39.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:32:34:74:b5:4b:e5:bd:e8:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=cddff7c7-7e78-40e8-94aa-c4abc8143d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:61:65:30:44:91:5f:f9:84:50:61:2e:9e: b4:22:04:18:cc:d9:aa:b5:6c:44:46:94:ae:bd:0e: 59:0b:c0:a8:79:0b:2c:d8:6c:d4:24:14:65:1b:91: a7:16:11:bc:1a:95:69:af:4f:94:9b:69:c3:b8:3c: 80:0e:6f:36:e4:72:55:3a:b7:d6:f3:3e:59:66:3e: 7a:c4:e7:06:15:cd:5b:b8:d5:f8:6f:65:e1:be:2a: 87:91:2e:c6:de:a0:cc:9f:37:ae:66:4d:cd:22:35: 10:0f:5e:eb:9a:4d:21:a7:a3:e6:e5:bb:9d:7b:52: 1b:78:f7:5f:a6:e3:bb:c7:de:ee:b9:49:42:23:80: 15:8a:29:a2:99:af:3a:14:b5:2f:55:81:ac:81:88: fc:12:d6:02:20:cf:6b:d5:92:1f:73:d7:64:63:70: 3d:ea:b7:54:c5:6e:0a:90:67:10:f0:95:4f:f2:e7: 8b:b9:c9:65:8b:75:c7:22:b1:1a:99:fc:c9:b8:2e: 00:76:ef:41:27:89:cf:b4:e6:1b:38:6d:b8:64:38: bd:d5:25:35:37:13:dc:0f:6e:08:28:b0:ba:d5:85: 26:e3:ac:2c:99:5a:b2:ab:ef:fe:d9:99:66:b7:20: 80:da:e5:6c:2d:ca:67:35:4d:06:0c:1c:a6:28:3f: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4F:C3:BD:53:2D:17:E6:36:B3:AD:F0:4D:0B:56:8E:22:52:E2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 170.39.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:35:96:4b:e0:89:85:84:01:c4:2b:86:dc:d3:d4:87:1c:61: cf:2b:1f:b7:37:40:c4:39:54:81:40:20:2b:2f:e8:52:01:cd: 1e:f8:21:1f:8e:40:5c:cd:07:7d:33:33:0d:55:cf:5f:85:5d: 7c:01:5c:a5:e1:63:41:c3:64:7a:b2:0c:c5:a4:a9:01:3e:52: 55:be:cb:67:e9:c4:c7:5b:ab:ed:ce:f5:01:5b:db:4b:b3:01: 97:a8:fe:db:be:2f:15:70:f0:a6:2a:94:04:24:b1:fd:1e:99: 12:93:d5:3f:70:cf:0f:23:03:8a:d5:34:fc:10:db:32:92:03: 2b:91:13:2c:d5:f7:8b:88:3d:ea:ca:e9:f6:0e:ff:9a:21:85: 5d:77:9f:f8:82:33:6f:90:cc:d2:30:f0:3a:f2:19:e5:95:ff: 25:16:3c:b1:ee:a4:d1:c4:36:e7:62:44:9b:93:ea:44:de:db: 03:4c:a6:62:3b:c2:86:0a:b7:8c:84:07:ec:00:20:cb:a4:01: 45:5c:12:c0:ab:75:f5:cf:f3:9b:b9:08:26:f6:53:cc:43:c9: f3:18:23:7e:fe:e1:a7:42:fa:0e:b9:96:9a:ed:8c:ac:70:58: 4b:cc:bb:11:8b:c8:3c:42:39:ef:03:19:f8:3f:5b:5a:61:fc: f7:e6:47:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQEjI0dLVL5b3otWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk Y2RkZmY3YzctN2U3OC00MGU4LTk0YWEtYzRhYmM4MTQzZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8lhZTBEkV/5hFBhLp60IgQYzNmqtWxERpSu vQ5ZC8CoeQss2GzUJBRlG5GnFhG8GpVpr0+Um2nDuDyADm825HJVOrfW8z5ZZj56 xOcGFc1buNX4b2XhviqHkS7G3qDMnzeuZk3NIjUQD17rmk0hp6Pm5bude1IbePdf puO7x97uuUlCI4AViimima86FLUvVYGsgYj8EtYCIM9r1ZIfc9dkY3A96rdUxW4K kGcQ8JVP8ueLuclli3XHIrEamfzJuC4Adu9BJ4nPtOYbOG24ZDi91SU1NxPcD24I KLC61YUm46wsmVqyq+/+2ZlmtyCA2uVsLcpnNU0GDBymKD/l0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVPw71TLRfmNrOt8E0LVo4iUuKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvYjUzYjE3MTEtZGFkMS0z ZmZhLWI0NWUtYjhhMjI4OTc2NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqiemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw1lkvgiYWEAcQrhtzT1IccYc8rH7c3QMQ5VIFAICsv6FIBzR74IR+O QFzNB30zMw1Vz1+FXXwBXKXhY0HDZHqyDMWkqQE+UlW+y2fpxMdbq+3O9QFb20uz AZeo/tu+LxVw8KYqlAQksf0emRKT1T9wzw8jA4rVNPwQ2zKSAyuREyzV94uIPerK 6fYO/5ohhV13n/iCM2+QzNIw8DryGeWV/yUWPLHupNHENudiRJuT6kTe2wNMpmI7 woYKt4yEB+wAIMukAUVcEsCrdfXP85u5CCb2U8xDyfMYI37+4adC+g65lprtjKxw WEvMuxGLyDxCOe8DGfg/W1ph/PfmR9Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:55 2025 by rpki-client