$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dcd8d76e-4a39-309c-849d-7ddd7feae30f.roa File: dcd8d76e-4a39-309c-849d-7ddd7feae30f.roa (raw, json) Hash identifier: LgOtRMf45JkaJhBo19hv1kpnc9Pt6+1EPt7YPQbWPhM= Subject key identifier: 3F:38:0B:AD:C9:99:07:47:71:87:E4:A4:70:7F:EC:24:E6:30:D8:21 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B4E0591A8F7598E17F0842A40 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dcd8d76e-4a39-309c-849d-7ddd7feae30f.roa Signing time: Wed 24 Sep 2025 21:11:58 +0000 ROA not before: Wed 24 Sep 2025 21:11:58 +0000 ROA not after: Tue 23 Dec 2025 22:11:58 +0000 asID: 39600 IP address blocks: 162.33.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:05:91:a8:f7:59:8e:17:f0:84:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 24 21:11:58 2025 GMT Not After : Dec 23 22:11:58 2025 GMT Subject: CN=a52480ff-b5de-4ee5-a1ed-8e5c7f42bc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:48:76:14:9d:0f:b1:34:45:8d:37:e3:60: 34:10:44:24:ca:e0:3a:66:f4:3d:bb:55:01:8b:d3: 6c:09:f9:55:cf:eb:38:2f:2e:e8:ef:f3:8b:29:af: da:44:c3:77:ec:cc:fc:a1:9e:87:fb:3c:3d:4e:fb: 0f:28:01:bf:09:bd:20:ff:c6:c4:82:04:56:48:e6: 34:9a:00:58:1c:02:28:05:2e:22:14:68:00:5a:b6: e7:14:0f:a1:e5:24:dc:be:f8:eb:ee:1c:00:2c:44: df:d0:9d:54:89:d3:70:b3:72:6a:2d:ec:f5:bf:47: e1:34:d6:2d:0d:4b:2c:d1:4c:1c:84:6d:d2:92:6f: 35:fd:e0:0d:e9:ee:78:f6:a2:4b:4e:10:7b:db:a0: d4:92:5b:b2:d7:e4:ea:c8:c3:23:1a:ce:e4:f9:c2: 85:93:6a:48:3d:ec:4e:98:02:20:c7:52:e1:63:12: 01:19:af:e4:d2:db:0f:05:8b:c1:c2:6d:09:77:3d: 4a:c5:fb:26:7c:1f:5f:30:d9:90:67:56:b9:2d:4f: 53:3e:e8:75:4a:c5:d9:d8:fb:f1:7b:0e:65:87:c1: 8f:b6:0e:37:0d:c0:ea:f8:7e:56:e2:8b:ea:86:8e: 23:3b:75:67:18:89:d7:c6:16:f3:14:8d:c9:c5:ac: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:38:0B:AD:C9:99:07:47:71:87:E4:A4:70:7F:EC:24:E6:30:D8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dcd8d76e-4a39-309c-849d-7ddd7feae30f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 162.33.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:16:ef:e7:1e:23:c6:8e:82:0e:48:2e:30:d9:e0:99:c4:0a: aa:19:40:90:a2:10:f7:5b:7b:0d:2e:63:0f:6b:8d:a0:39:e8: 55:4c:17:f2:42:d1:7e:94:12:8a:98:04:b6:dc:d0:c2:ee:49: ab:bc:ae:14:6f:3a:43:a4:50:34:36:49:ac:b6:48:18:63:e1: 59:68:69:71:cd:db:00:f5:cc:65:61:65:3e:28:18:35:58:cb: 30:8c:5a:8d:8f:76:1c:43:b5:52:40:4b:f2:36:8e:a9:85:f1: d6:f0:51:1c:3f:e9:24:b3:f4:2b:55:76:e8:12:09:f3:15:a9: 4b:e2:51:c9:d4:9e:a7:79:17:1d:cb:f9:f8:79:43:c2:1d:f7: 49:cd:ac:b8:6d:a7:7e:12:cb:0c:0c:03:d6:77:a4:2b:f4:dd: 05:f6:ee:37:b2:06:b6:5c:23:eb:b6:0c:38:3d:e4:ef:02:c4: 37:45:98:89:66:b8:ed:a8:61:89:21:ab:dc:9a:fe:c2:f2:14: 01:27:46:99:8e:e6:1a:06:96:f8:15:5c:6b:71:18:b2:5b:8f: c2:35:97:a1:9f:80:fa:8b:48:3e:6d:ca:71:d1:f9:78:e1:30: 67:e9:48:25:cd:b3:92:42:10:79:4f:04:df:29:28:c6:03:d8: cf:d0:94:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOBZGo91mOF/CEKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkyNDIxMTE1OFoXDTI1MTIyMzIyMTE1OFowLzEtMCsGA1UEAxMk YTUyNDgwZmYtYjVkZS00ZWU1LWExZWQtOGU1YzdmNDJiYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ5IdhSdD7E0RY0342A0EEQkyuA6ZvQ9u1UB i9NsCflVz+s4Ly7o7/OLKa/aRMN37Mz8oZ6H+zw9TvsPKAG/Cb0g/8bEggRWSOY0 mgBYHAIoBS4iFGgAWrbnFA+h5STcvvjr7hwALETf0J1UidNws3JqLez1v0fhNNYt DUss0UwchG3Skm81/eAN6e549qJLThB726DUkluy1+TqyMMjGs7k+cKFk2pIPexO mAIgx1LhYxIBGa/k0tsPBYvBwm0Jdz1KxfsmfB9fMNmQZ1a5LU9TPuh1SsXZ2Pvx ew5lh8GPtg43DcDq+H5W4ovqho4jO3VnGInXxhbzFI3Jxax68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD84C63JmQdHcYfkpHB/7CTmMNghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZGNkOGQ3NmUtNGEzOS0z MDljLTg0OWQtN2RkZDdmZWFlMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYW7+ceI8aOgg5ILjDZ4JnECqoZQJCiEPdbew0uYw9rjaA56FVMF/JC 0X6UEoqYBLbc0MLuSau8rhRvOkOkUDQ2Say2SBhj4VloaXHN2wD1zGVhZT4oGDVY yzCMWo2PdhxDtVJAS/I2jqmF8dbwURw/6SSz9CtVdugSCfMVqUviUcnUnqd5Fx3L +fh5Q8Id90nNrLhtp34SywwMA9Z3pCv03QX27jeyBrZcI+u2DDg95O8CxDdFmIlm uO2oYYkhq9ya/sLyFAEnRpmO5hoGlvgVXGtxGLJbj8I1l6GfgPqLSD5tynHR+Xjh MGfpSCXNs5JCEHlPBN8pKMYD2M/QlAo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:33:30 2025 by rpki-client