$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa File: 86496a16-88a9-3767-866b-3cfa90b5926b.roa (raw, json) Hash identifier: kkkQVsegfTThWhAi6IS/AtPCLSX+MRFI4nYTU/X/TA0= Subject key identifier: 1D:0C:42:45:3B:A3:C0:9D:FF:39:98:75:C1:4D:CC:D7:9C:6C:A4:B7 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B7B21F76E1BDFB904FC58BE00 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 5662 IP address blocks: 157.166.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f7:6e:1b:df:b9:04:fc:58:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=3a89aa1c-3c4a-4028-a125-5dda2597fd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:a1:0f:d7:85:91:cf:84:3d:c7:35:82:93: 8c:9a:03:e1:fb:f3:11:0c:82:b8:5b:79:e0:4e:18: 70:f6:77:61:32:92:eb:88:c6:6d:b4:37:63:d4:e9: 68:29:78:ab:8d:c6:a1:32:33:0e:49:18:fc:a5:80: c1:63:1e:e9:31:89:8f:c2:67:d1:bb:d3:82:22:18: 80:ff:75:8d:5e:a3:6c:18:36:c7:f2:88:1a:2c:e8: 43:55:3e:a3:d6:24:23:75:e9:e7:aa:d0:4f:4f:b1: bd:8d:c1:96:5e:73:d7:73:f8:a3:42:9a:84:c6:c7: 80:04:04:86:f9:8a:43:d5:d7:a9:36:f7:12:40:d2: 64:bf:4c:f3:87:0d:20:cc:df:cb:4c:3d:fd:17:6e: bd:2c:30:b3:7d:74:26:e7:32:e9:2c:8a:f9:a8:20: 41:9c:96:66:65:aa:a0:71:93:20:56:1c:f7:b2:e6: 92:06:0f:f3:18:91:41:de:fd:b3:3e:83:0d:f0:c6: 42:80:bf:a8:5c:19:26:09:40:8d:c8:e1:79:53:c2: a1:3d:26:5f:c1:f9:42:cc:27:97:ee:47:0f:12:3d: c9:a4:43:26:22:12:ca:98:f7:99:07:45:cb:20:e6: 03:6d:0f:b0:06:fe:1a:16:0d:66:d5:1b:37:33:0a: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:42:45:3B:A3:C0:9D:FF:39:98:75:C1:4D:CC:D7:9C:6C:A4:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:50:41:4d:81:af:7d:fc:c9:4e:d9:87:d7:c9:9a:ea:1f:0d: f4:f9:6d:30:e2:41:e6:c7:c5:c4:78:7b:47:4d:78:3c:b4:d2: b2:ca:14:cc:3f:18:b3:dd:f4:3d:e8:7c:c1:34:da:f4:4b:16: 9f:a3:85:e4:36:33:ef:3c:ff:a5:60:b4:8f:8b:b8:b8:50:70: d4:a7:a5:3b:68:e9:2a:3f:e3:67:31:54:ef:9c:a6:dd:ba:af: 34:4c:2c:dd:49:35:e6:5a:70:53:79:be:24:34:61:47:b0:39: cc:5c:0f:2c:1d:cd:96:83:ef:59:7e:c6:93:91:af:20:bb:7a: 5a:5d:3a:8e:89:06:8e:c5:9f:6f:e3:43:93:93:17:b4:19:02: 5a:0a:18:0e:ee:41:77:01:ab:a3:84:46:45:80:c6:38:77:27: b5:d6:d4:3a:19:81:51:ff:67:d6:b9:d0:17:8e:f9:f4:41:c0: 0b:24:32:6e:ff:e8:df:f4:e2:f1:ba:ca:90:9d:fd:27:83:6f: a2:91:f3:6a:0f:b8:52:e7:14:c6:e0:c6:35:13:46:3e:d2:79: 82:66:75:fb:ba:59:2a:e0:d5:de:bc:6a:b0:07:0e:ec:85:71: c7:b3:3b:fa:e6:b1:2c:8b:b7:69:f2:52:31:1b:af:80:1c:ba: 46:1a:c5:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfduG9+5BPxYvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk M2E4OWFhMWMtM2M0YS00MDI4LWExMjUtNWRkYTI1OTdmZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSihD9eFkc+EPcc1gpOMmgPh+/MRDIK4W3ng Thhw9ndhMpLriMZttDdj1OloKXirjcahMjMOSRj8pYDBYx7pMYmPwmfRu9OCIhiA /3WNXqNsGDbH8ogaLOhDVT6j1iQjdennqtBPT7G9jcGWXnPXc/ijQpqExseABASG +YpD1depNvcSQNJkv0zzhw0gzN/LTD39F269LDCzfXQm5zLpLIr5qCBBnJZmZaqg cZMgVhz3suaSBg/zGJFB3v2zPoMN8MZCgL+oXBkmCUCNyOF5U8KhPSZfwflCzCeX 7kcPEj3JpEMmIhLKmPeZB0XLIOYDbQ+wBv4aFg1m1Rs3MwqVawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0MQkU7o8Cd/zmYdcFNzNecbKS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODY0OTZhMTYtODhhOS0z NzY3LTg2NmItM2NmYTkwYjU5MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1QQU2Br338yU7Zh9fJmuofDfT5bTDiQebHxcR4e0dNeDy00rLKFMw/ GLPd9D3ofME02vRLFp+jheQ2M+88/6VgtI+LuLhQcNSnpTto6So/42cxVO+cpt26 rzRMLN1JNeZacFN5viQ0YUewOcxcDywdzZaD71l+xpORryC7elpdOo6JBo7Fn2/j Q5OTF7QZAloKGA7uQXcBq6OERkWAxjh3J7XW1DoZgVH/Z9a50BeO+fRBwAskMm7/ 6N/04vG6ypCd/SeDb6KR82oPuFLnFMbgxjUTRj7SeYJmdfu6WSrg1d68arAHDuyF ccezO/rmsSyLt2nyUjEbr4AcukYaxYk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:17:15 2025 by rpki-client