$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa File: 811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa (raw, json) Hash identifier: XzTowQKfozQ2V5xGiu+LtRN0s5Kjs2fwp2CbpZH9B0k= Subject key identifier: A6:3B:8B:73:FA:47:93:71:08:6B:46:1E:4C:B4:90:22:BB:55:D2:87 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B5F37287BFFE8EB34C710AC00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 40703 IP address blocks: 157.166.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:28:7b:ff:e8:eb:34:c7:10:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=dedce5ff-2f5e-4fe0-83dd-4834a717fdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:fc:93:c3:27:a2:99:88:10:83:2d:ca:95: 10:ff:e0:c3:2b:97:a5:c8:89:a4:44:8b:7e:9b:78: 80:24:d1:ea:a8:6c:b5:93:4f:6e:99:e9:e8:08:41: 3a:d3:30:56:ae:2d:88:55:ba:a3:d3:03:db:c6:28: bd:ab:0d:e7:53:3a:62:09:ca:8d:dc:69:ce:b4:4d: e6:50:99:98:98:1d:3b:3c:92:54:3c:7a:7e:a7:36: 28:a2:af:5f:bb:71:05:71:e0:bc:be:5d:bf:f0:54: 90:ad:d6:e3:db:88:5e:fd:81:7c:fe:a6:08:02:ad: d9:64:72:2f:16:3f:b0:e8:59:e3:bf:85:e3:fd:af: b3:7a:49:6e:a0:e3:0c:32:7a:c6:6d:14:9c:29:ee: eb:82:5a:49:d9:eb:db:77:5f:fc:22:47:7f:a0:4b: b4:8a:c1:09:07:bc:06:36:cc:f0:07:28:b8:ae:93: c0:fe:b7:a6:f5:8a:11:0d:f3:a6:33:3a:e2:ad:6b: b5:c3:9a:76:3b:f2:68:ff:c6:8f:bc:6e:f7:31:66: 25:de:a3:68:c2:10:e3:67:d4:4b:2a:9c:2f:e8:0d: d6:b4:8e:62:57:6a:2b:af:97:92:cf:33:24:f7:b4: 80:77:e4:7a:ed:20:f8:f1:0a:9e:8a:4d:b8:50:a0: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:8B:73:FA:47:93:71:08:6B:46:1E:4C:B4:90:22:BB:55:D2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:23:53:3d:de:ad:71:fc:60:e3:8c:e3:1a:58:ff:32:f6:a6: eb:82:b5:71:f1:18:25:af:57:37:54:f3:9b:b2:96:13:7e:25: 0c:84:4d:d9:0d:ad:b1:23:b3:80:3f:96:a6:c0:ab:4f:f8:31: 19:0c:6c:2a:8a:8b:f0:78:f9:cd:d0:00:d8:9f:c2:fb:29:6f: 80:e9:56:78:2c:22:84:69:ed:33:34:3a:2a:0d:02:45:78:7c: da:51:35:5d:45:dc:5d:6b:ef:3e:fd:af:0a:30:cf:c8:53:74: b0:5f:8b:39:66:10:24:6a:48:c9:b7:eb:4f:8b:7c:55:39:35: 09:c2:df:ab:47:25:0e:bb:88:27:b1:e2:70:cf:ec:da:c1:6a: a9:9e:1f:0b:17:35:30:8b:76:f0:ac:7d:be:c1:a5:c3:cb:bc: a5:16:f2:1d:6f:23:73:52:c0:10:3b:8d:c0:e6:88:44:e7:49: 3a:6d:2c:7b:24:0e:39:ff:e3:82:b4:9d:58:a0:f7:0c:ab:fa: 0c:fd:c4:4d:67:1f:e8:cf:95:b3:71:6a:4d:2c:7f:b0:64:3f: 3a:e7:af:f8:1f:d1:31:7b:84:8d:e1:b0:fd:8c:da:ed:5d:d5: 7c:d3:87:97:b7:f9:f6:2d:fd:86:e5:2d:3d:ab:2a:1d:12:d0: 55:ad:6c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyh7/+jrNMcQrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGVkY2U1ZmYtMmY1ZS00ZmUwLTgzZGQtNDgzNGE3MTdmZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCr8k8MnopmIEIMtypUQ/+DDK5elyImkRIt+ m3iAJNHqqGy1k09umenoCEE60zBWri2IVbqj0wPbxii9qw3nUzpiCcqN3GnOtE3m UJmYmB07PJJUPHp+pzYooq9fu3EFceC8vl2/8FSQrdbj24he/YF8/qYIAq3ZZHIv Fj+w6Fnjv4Xj/a+zekluoOMMMnrGbRScKe7rglpJ2evbd1/8Ikd/oEu0isEJB7wG NszwByi4rpPA/rem9YoRDfOmMzrirWu1w5p2O/Jo/8aPvG73MWYl3qNowhDjZ9RL Kpwv6A3WtI5iV2orr5eSzzMk97SAd+R67SD48Qqeik24UKAJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY7i3P6R5NxCGtGHky0kCK7VdKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODExZTZhNWItZmZkNy0z YTNkLWE1OGUtZmYyODBkMWVmY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnabYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcjUz3erXH8YOOM4xpY/zL2puuCtXHxGCWvVzdU85uylhN+JQyETdkN rbEjs4A/lqbAq0/4MRkMbCqKi/B4+c3QANifwvspb4DpVngsIoRp7TM0OioNAkV4 fNpRNV1F3F1r7z79rwowz8hTdLBfizlmECRqSMm360+LfFU5NQnC36tHJQ67iCex 4nDP7NrBaqmeHwsXNTCLdvCsfb7BpcPLvKUW8h1vI3NSwBA7jcDmiETnSTptLHsk Djn/44K0nVig9wyr+gz9xE1nH+jPlbNxak0sf7BkPzrnr/gf0TF7hI3hsP2M2u1d 1XzTh5e3+fYt/YblLT2rKh0S0FWtbKU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:37 2025 by rpki-client