$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa File: dbfc0664-0294-36d7-b0bb-77ae346459b8.roa (raw, json) Hash identifier: sIaI1ycE1O2iU50zcIvH8ytKFVD6fBvZjibXJFLkOAA= Subject key identifier: A8:59:4B:AB:55:72:F6:2A:EA:06:59:A5:54:5F:FD:49:1F:C6:2E:0B Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B8EACCBADF7682CD7B4FD32C0 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 40703 IP address blocks: 157.166.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:cb:ad:f7:68:2c:d7:b4:fd:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=00623917-7aa8-4aeb-9e7b-b6a646d5d2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:18:b9:53:5a:88:62:17:b6:cd:b0:2d:87: 1b:13:78:99:fc:3b:a4:e6:97:a1:26:74:11:42:d0: 9c:55:d1:5d:5b:32:02:89:c1:11:92:f6:1a:a4:29: cf:ed:f8:c8:5f:fb:11:64:b4:8b:ce:0a:1b:bc:92: a7:b4:4b:9d:27:f8:68:c5:3a:65:b8:cf:bd:f9:21: 98:76:c5:77:07:44:3a:5c:6d:e2:d3:84:bd:75:04: 56:2f:45:56:7e:1c:65:cf:ab:04:b9:85:16:87:34: 92:e1:9b:d3:4f:b0:0f:e9:dd:ec:be:7a:9f:c2:85: 30:c7:76:b8:e2:1f:94:70:98:10:4d:17:b7:14:02: bc:60:b6:f7:15:3c:88:e1:1b:72:47:db:aa:42:6e: 83:5c:44:ae:74:be:79:73:cc:4a:96:ff:48:a8:ab: 13:10:64:92:97:67:54:9f:c2:31:68:ea:c0:2f:9c: 5d:a1:6d:61:4e:a0:f1:74:df:80:03:99:c2:c4:8f: 8b:1a:7f:6b:d2:09:e0:20:bb:95:b2:db:82:75:d8: 48:69:f4:ec:b1:21:9d:59:88:9a:8d:3a:b4:46:32: 31:b4:09:4e:89:50:c9:15:4e:1c:75:ca:22:17:cf: 49:7b:1d:cd:6c:9c:da:06:a9:4c:71:cd:45:68:73: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:59:4B:AB:55:72:F6:2A:EA:06:59:A5:54:5F:FD:49:1F:C6:2E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dbfc0664-0294-36d7-b0bb-77ae346459b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:31:9c:89:9f:04:1e:24:95:0d:1a:12:ed:e6:e5:88:a2:5f: 9f:15:66:e9:16:80:eb:fe:db:12:3c:39:bf:49:b8:54:fb:7e: 36:e1:3a:1f:05:52:5e:f9:60:60:8c:62:c1:ae:68:32:95:9c: ba:a7:fc:31:dd:af:b6:41:e7:7c:35:2d:28:81:75:ae:c1:dc: 8d:e9:73:e0:6d:94:a6:a0:36:53:29:ce:f9:e5:99:87:fc:ec: 9a:9e:f9:83:ad:4d:9a:49:07:db:61:12:8f:e3:d2:1b:01:36: 3e:15:e9:4e:44:20:76:a1:64:1f:c6:4a:48:75:76:4a:07:c3: 2e:c3:e1:fe:22:44:1d:bf:3a:3f:44:af:90:00:27:fd:7e:ad: c1:97:5e:b2:50:f6:39:60:6c:12:66:e3:ab:e0:ef:d1:4d:da: f6:35:86:9f:c0:e5:13:45:d2:b2:f5:77:b0:43:9c:07:8b:e8: 2c:1e:68:69:2a:34:50:30:84:2c:2b:32:97:e5:8d:fb:f6:6a: 79:4c:32:23:7a:f9:02:2b:56:68:cd:f5:37:e4:4e:01:93:e7: ee:95:a8:fe:28:c8:82:c6:ca:b5:ba:bc:5b:ed:c7:08:94:e5: da:42:0a:a4:d4:8f:5d:61:8a:80:76:ee:86:09:54:fe:f2:80: 7f:54:65:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMut92gs17T9MsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDA2MjM5MTctN2FhOC00YWViLTllN2ItYjZhNjQ2ZDVkMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy4YuVNaiGIXts2wLYcbE3iZ/Duk5pehJnQR QtCcVdFdWzICicERkvYapCnP7fjIX/sRZLSLzgobvJKntEudJ/hoxTpluM+9+SGY dsV3B0Q6XG3i04S9dQRWL0VWfhxlz6sEuYUWhzSS4ZvTT7AP6d3svnqfwoUwx3a4 4h+UcJgQTRe3FAK8YLb3FTyI4RtyR9uqQm6DXESudL55c8xKlv9IqKsTEGSSl2dU n8IxaOrAL5xdoW1hTqDxdN+AA5nCxI+LGn9r0gngILuVstuCddhIafTssSGdWYia jTq0RjIxtAlOiVDJFU4cdcoiF89Jex3NbJzaBqlMcc1FaHPNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhZS6tVcvYq6gZZpVRf/Ukfxi4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZGJmYzA2NjQtMDI5NC0z NmQ3LWIwYmItNzdhZTM0NjQ1OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnaaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMxnImfBB4klQ0aEu3m5YiiX58VZukWgOv+2xI8Ob9JuFT7fjbhOh8F Ul75YGCMYsGuaDKVnLqn/DHdr7ZB53w1LSiBda7B3I3pc+BtlKagNlMpzvnlmYf8 7Jqe+YOtTZpJB9thEo/j0hsBNj4V6U5EIHahZB/GSkh1dkoHwy7D4f4iRB2/Oj9E r5AAJ/1+rcGXXrJQ9jlgbBJm46vg79FN2vY1hp/A5RNF0rL1d7BDnAeL6CweaGkq NFAwhCwrMpfljfv2anlMMiN6+QIrVmjN9TfkTgGT5+6VqP4oyILGyrW6vFvtxwiU 5dpCCqTUj11hioB27oYJVP7ygH9UZW0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:08 2025 by rpki-client