$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa File: 01ec5871-ae4b-3568-b911-9714c4ac218c.roa (raw, json) Hash identifier: FJVi1QorRT8fgJILXzxn5Mnc31iaAE2w8dk+9kAcOxg= Subject key identifier: 68:64:0D:9E:A5:0F:1A:A8:09:04:0C:97:72:43:D1:07:D8:B4:8D:EE Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B92DCE0D48C22B5A64A732EC0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e0:d4:8c:22:b5:a6:4a:73:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=816a7416-ca00-4701-8408-34fd38f0241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:e1:1c:b6:e3:e1:33:42:17:86:7d:46:11: d1:8a:63:a5:47:be:fc:21:4d:ea:6a:81:51:6b:55: 28:8b:2c:0b:1d:99:ed:1d:0f:81:f1:8e:39:70:b1: f8:4f:9b:2d:01:b5:42:69:fb:05:40:1e:3c:a0:4b: d6:da:5b:8a:ca:17:cc:d9:8b:29:43:86:93:56:ef: bb:26:ec:2e:f2:73:ba:97:07:34:06:4f:cd:93:c0: 5f:f8:e1:9e:e5:1b:4e:0e:64:86:0a:05:e0:29:85: 08:94:7c:ce:90:ae:54:62:16:5f:0e:55:39:e6:91: 90:b0:62:d0:4f:65:45:b7:bc:5f:45:a6:9b:f1:e4: 3b:7b:a0:39:da:a4:1d:8e:e6:9b:86:78:47:3a:71: 8e:66:b1:eb:ff:80:df:7c:31:e4:55:88:12:ac:64: 45:0d:42:c5:3b:a1:b7:67:76:8c:2f:96:80:f2:b5: 66:8e:4e:58:16:81:70:12:50:0b:5d:55:6f:db:ee: f5:46:f0:3f:de:44:ba:68:65:4b:c6:c4:50:9f:32: c3:6e:76:da:ce:39:3f:15:55:e7:1f:89:7d:91:00: 52:58:97:82:83:8e:3b:8b:de:dd:15:83:cc:a3:72: 96:c8:60:4d:99:8f:e7:42:32:9d:ce:14:e5:bc:d4: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:0D:9E:A5:0F:1A:A8:09:04:0C:97:72:43:D1:07:D8:B4:8D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/01ec5871-ae4b-3568-b911-9714c4ac218c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a2:94:6d:bb:31:95:6b:9a:47:9f:87:23:4c:4e:33:bb:5d: 33:4a:79:70:dc:e9:8f:2d:60:99:fe:5c:53:7d:7d:61:1d:1c: a1:01:82:bb:cd:25:bd:ff:ac:58:ac:de:b5:7e:01:99:91:be: 47:26:6b:1f:24:a6:65:c1:ca:c4:ae:ef:36:55:9f:ac:08:05: 07:03:51:ca:65:a8:de:b7:47:17:65:74:5d:a0:d1:7d:41:33: 53:f4:76:01:a1:3b:01:ec:10:b2:56:3d:8f:c5:c0:df:2f:c3: f5:60:24:a8:ba:d7:96:06:8e:1c:1a:f3:b7:c7:b3:8b:4b:c8: 58:14:8d:e4:b1:ee:28:93:f6:d2:27:f4:d0:b4:a9:f2:dc:2f: d6:e3:fc:e9:6f:77:cc:38:95:99:6f:b4:ac:de:55:fe:7d:bd: 5f:07:1c:63:52:cd:d0:a1:7c:83:04:2e:21:88:0e:4f:89:f4: a7:3a:dd:df:e7:0d:2e:6a:01:36:eb:26:a3:e1:e1:bd:a9:81: 73:ef:5e:b1:e3:dd:e5:97:d5:01:0a:a6:02:ff:49:0d:0b:00: 35:cd:ec:a7:25:2d:2d:75:0a:a6:d5:6b:67:6b:74:47:2b:f0: d2:5c:b1:20:1a:f7:f1:a6:d5:2c:d3:42:14:b8:84:52:09:a5: 71:4d:ff:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ODUjCK1pkpzLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ODE2YTc0MTYtY2EwMC00NzAxLTg0MDgtMzRmZDM4ZjAyNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfhHLbj4TNCF4Z9RhHRimOlR778IU3qaoFR a1UoiywLHZntHQ+B8Y45cLH4T5stAbVCafsFQB48oEvW2luKyhfM2YspQ4aTVu+7 Juwu8nO6lwc0Bk/Nk8Bf+OGe5RtODmSGCgXgKYUIlHzOkK5UYhZfDlU55pGQsGLQ T2VFt7xfRaab8eQ7e6A52qQdjuabhnhHOnGOZrHr/4DffDHkVYgSrGRFDULFO6G3 Z3aML5aA8rVmjk5YFoFwElALXVVv2+71RvA/3kS6aGVLxsRQnzLDbnbazjk/FVXn H4l9kQBSWJeCg447i97dFYPMo3KWyGBNmY/nQjKdzhTlvNQwOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhkDZ6lDxqoCQQMl3JD0QfYtI3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMDFlYzU4NzEtYWU0Yi0z NTY4LWI5MTEtOTcxNGM0YWMyMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ilG27MZVrmkefhyNMTjO7XTNKeXDc6Y8tYJn+XFN9fWEdHKEBgrvN Jb3/rFis3rV+AZmRvkcmax8kpmXBysSu7zZVn6wIBQcDUcplqN63RxdldF2g0X1B M1P0dgGhOwHsELJWPY/FwN8vw/VgJKi615YGjhwa87fHs4tLyFgUjeSx7iiT9tIn 9NC0qfLcL9bj/Olvd8w4lZlvtKzeVf59vV8HHGNSzdChfIMELiGIDk+J9Kc63d/n DS5qATbrJqPh4b2pgXPvXrHj3eWX1QEKpgL/SQ0LADXN7KclLS11CqbVa2drdEcr 8NJcsSAa9/Gm1SzTQhS4hFIJpXFN/4U= -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:55 2025 by rpki-client