$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa File: 60570c79-bb16-3b4c-a1e3-6b396870d864.roa (raw, json) Hash identifier: 4QzVHiv2+okZ6fryQ62zq13Dqp83qkMkOg1kSGNt1Vc= Subject key identifier: BF:24:7A:21:A5:92:03:A9:01:15:BD:8E:57:8A:E7:24:3A:9B:43:20 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B92DCE0E8990D3A1F144A9700 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 157.166.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e0:e8:99:0d:3a:1f:14:4a:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=07577cf5-9e42-4196-9908-56014041d6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:d1:36:b6:e0:76:04:99:74:6c:95:53:89: f8:dc:10:c2:52:d7:a3:f0:65:79:8e:79:dd:e2:72: 29:1e:b9:4f:cb:33:1e:ee:b3:c5:25:40:29:9b:db: cf:05:18:49:f4:f4:4b:ae:37:33:0e:06:6a:9d:aa: ed:68:e7:ec:66:48:9b:dd:cb:22:fa:29:a7:db:8e: ac:49:5f:d5:ef:7f:c3:5a:9c:67:bc:f7:ea:c6:1b: d1:ac:c8:da:fb:86:8c:f3:b7:bb:a1:68:4b:12:42: 36:4c:78:80:d0:3b:4b:98:2c:fa:49:52:5b:cf:9e: de:0e:a4:7b:c7:6c:55:70:ca:60:b4:f4:aa:66:63: ad:80:ec:b2:9a:00:de:35:19:90:3a:15:27:c2:7a: ea:fe:b3:fc:67:b2:c1:af:dc:87:10:33:d5:9e:12: 74:9a:35:43:6f:2b:91:36:81:af:3e:6d:64:0a:67: 9a:84:cf:eb:34:5a:97:e6:7d:62:54:b7:d4:ee:7d: d0:85:28:96:bf:4c:e1:33:01:d0:ee:95:6d:56:81: ea:62:c5:0e:8e:51:fa:d2:e2:6d:6b:54:e0:c6:83: f9:cf:1c:e4:b3:53:f6:0a:af:78:fb:e5:bc:03:aa: 13:24:33:9f:a4:27:37:81:c2:b9:44:95:5f:ab:78: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:7A:21:A5:92:03:A9:01:15:BD:8E:57:8A:E7:24:3A:9B:43:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/60570c79-bb16-3b4c-a1e3-6b396870d864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9b:75:73:dd:26:b1:99:44:34:ec:79:e3:55:c4:2f:db:2f: 92:5f:9f:d9:ef:eb:85:f2:ff:a9:c0:9a:8e:6a:36:3f:9e:3b: 4b:07:da:92:76:ac:25:cc:fd:ac:08:06:f9:29:61:de:cc:a8: 62:bb:11:28:76:fc:0b:b3:a3:b3:fe:66:34:d7:92:a8:21:1b: 8f:7d:7a:3b:ac:0a:be:b9:d8:3a:fa:a5:4b:1b:26:09:79:8b: 97:14:c9:91:2a:ba:da:70:68:47:0c:d3:78:32:2a:5e:94:96: 0e:6a:bf:b0:df:95:16:7d:8d:41:91:54:35:50:aa:1f:f7:57: c1:2d:76:f0:55:cc:ba:28:31:a8:a5:a8:dd:ad:e9:d7:7e:70: 20:d3:14:9b:bc:37:38:1a:03:9e:48:2f:1e:42:21:43:c6:16: cf:52:50:af:54:46:bc:05:45:3d:90:92:f7:95:fe:52:e9:b2: 92:f1:69:38:8f:1e:4d:c1:15:2c:18:3f:17:94:c0:fb:dc:8a: 55:76:30:b3:ea:39:37:75:9b:da:df:5c:b0:65:78:7c:24:e8: ab:1d:3b:b0:cd:f1:b3:21:2a:52:93:3e:fe:a1:cc:80:28:e0: 43:c8:9f:4f:54:66:c8:33:f4:4c:90:4f:b7:b8:b5:2f:42:ea: 32:2d:42:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ODomQ06HxRKlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDc1NzdjZjUtOWU0Mi00MTk2LTk5MDgtNTYwMTQwNDFkNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ3RNrbgdgSZdGyVU4n43BDCUtej8GV5jnnd 4nIpHrlPyzMe7rPFJUApm9vPBRhJ9PRLrjczDgZqnartaOfsZkib3csi+imn246s SV/V73/DWpxnvPfqxhvRrMja+4aM87e7oWhLEkI2THiA0DtLmCz6SVJbz57eDqR7 x2xVcMpgtPSqZmOtgOyymgDeNRmQOhUnwnrq/rP8Z7LBr9yHEDPVnhJ0mjVDbyuR NoGvPm1kCmeahM/rNFqX5n1iVLfU7n3QhSiWv0zhMwHQ7pVtVoHqYsUOjlH60uJt a1TgxoP5zxzks1P2Cq94++W8A6oTJDOfpCc3gcK5RJVfq3hLrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8keiGlkgOpARW9jleK5yQ6m0MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNjA1NzBjNzktYmIxNi0z YjRjLWExZTMtNmIzOTY4NzBkODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASbdXPdJrGZRDTseeNVxC/bL5Jfn9nv64Xy/6nAmo5qNj+eO0sH2pJ2 rCXM/awIBvkpYd7MqGK7ESh2/Auzo7P+ZjTXkqghG499ejusCr652Dr6pUsbJgl5 i5cUyZEqutpwaEcM03gyKl6Ulg5qv7DflRZ9jUGRVDVQqh/3V8EtdvBVzLooMail qN2t6dd+cCDTFJu8NzgaA55ILx5CIUPGFs9SUK9URrwFRT2QkveV/lLpspLxaTiP Hk3BFSwYPxeUwPvcilV2MLPqOTd1m9rfXLBleHwk6KsdO7DN8bMhKlKTPv6hzIAo 4EPIn09UZsgz9EyQT7e4tS9C6jItQmU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:01 2025 by rpki-client