$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa File: a33fbf21-f50e-3e09-8ce9-64c806432986.roa (raw, json) Hash identifier: 2ioBPF9TFsqrIj2WRGuznckQE94zHORjQxQp+4mzsBc= Subject key identifier: 97:F5:86:2A:25:39:74:42:6C:EE:9A:89:7A:58:C1:8D:D9:BB:B4:B4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821D77A7F6809B80DCAE0B80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20115 IP address blocks: 159.111.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:77:a7:f6:80:9b:80:dc:ae:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=cff20894-9f46-4c87-bdad-dd4b13eecfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:77:27:67:5f:d2:c7:88:d1:16:85:87:92: 86:81:d2:8f:e7:bf:ef:11:80:6c:ba:98:22:a9:17: 33:8c:01:19:f2:d1:23:47:7c:61:93:26:1d:1c:7e: 40:43:c5:07:1d:a6:95:8f:3e:4f:02:95:2f:43:17: 45:bf:2d:f1:01:70:88:34:79:2f:07:92:37:15:cf: 15:06:1e:94:85:28:bd:37:2b:6b:52:c6:d3:04:1b: 5e:45:ea:f4:b8:03:36:db:f2:12:ea:81:98:0c:02: 0b:29:0c:a0:f1:3e:7c:8f:20:bb:48:df:8b:e1:22: 7a:56:9c:c8:c2:b8:01:53:f9:b3:15:13:a4:b5:1b: 5a:b0:d5:62:d8:c0:6b:15:80:85:71:50:ae:83:53: dc:f4:7a:d6:7c:6b:83:e9:b4:cf:e7:92:0a:11:15: e9:c4:87:72:54:5f:a0:34:87:27:2d:61:81:a6:57: b6:8b:8d:4c:a1:bf:64:5f:0b:f1:95:90:1f:12:9a: 1a:04:dd:dd:04:71:80:c4:04:ae:14:4e:eb:30:79: b7:8b:0b:d3:0d:bd:83:94:2d:a6:2c:ff:3b:a9:44: 2f:24:f4:cf:db:2f:ec:ae:98:ce:28:3b:de:e7:80: 0c:93:58:1e:bf:08:c1:86:08:03:83:36:1c:45:bc: 5d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:86:2A:25:39:74:42:6C:EE:9A:89:7A:58:C1:8D:D9:BB:B4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0e:8c:d4:69:51:6e:ad:76:ed:fe:bb:89:45:38:7a:e0:63: 89:6c:2e:67:90:2e:de:5f:e5:d6:7b:11:85:70:ff:14:9e:b7: bf:68:45:43:2f:13:f8:1a:80:e7:ae:ee:05:08:18:30:42:ab: 37:b1:ae:31:b5:ee:94:ae:ff:47:54:b6:77:71:9f:6c:90:6e: ce:e2:1a:89:79:46:d9:6f:71:4b:0f:d1:84:70:6f:97:ae:c3: 49:96:79:b5:cb:cd:25:9b:ef:b5:dd:51:31:5c:22:e2:8f:51: 71:50:70:69:d5:ba:68:1d:46:42:cd:44:17:ac:42:69:a3:38: e5:43:09:ee:27:c3:0e:e0:99:31:4c:72:ab:e2:d5:be:8e:ff: 33:59:7c:ee:57:b5:ef:d6:13:11:66:1a:56:74:9a:d3:1a:9f: df:d4:cc:04:37:f9:01:82:92:d4:4a:87:a2:e6:f3:58:ce:e7: aa:7c:d8:95:54:ae:0b:5a:a1:18:58:37:ea:04:e1:4d:71:22: e8:d1:38:63:bc:e8:fc:30:07:3c:ab:dd:00:99:ad:f2:86:90: 99:c1:15:71:9c:c4:1e:ad:82:43:cc:06:a4:ae:2b:23:dd:11: e6:85:11:6d:38:4f:72:b1:11:17:84:18:d6:8d:9b:89:23:9a: 40:16:f7:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHXen9oCbgNyuC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Y2ZmMjA4OTQtOWY0Ni00Yzg3LWJkYWQtZGQ0YjEzZWVjZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLB3J2df0seI0RaFh5KGgdKP57/vEYBsupgi qRczjAEZ8tEjR3xhkyYdHH5AQ8UHHaaVjz5PApUvQxdFvy3xAXCINHkvB5I3Fc8V Bh6UhSi9NytrUsbTBBteRer0uAM22/IS6oGYDAILKQyg8T58jyC7SN+L4SJ6VpzI wrgBU/mzFROktRtasNVi2MBrFYCFcVCug1Pc9HrWfGuD6bTP55IKERXpxIdyVF+g NIcnLWGBple2i41Mob9kXwvxlZAfEpoaBN3dBHGAxASuFE7rMHm3iwvTDb2DlC2m LP87qUQvJPTP2y/srpjOKDve54AMk1gevwjBhggDgzYcRbxdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf1hiolOXRCbO6aiXpYwY3Zu7S0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTMzZmJmMjEtZjUwZS0z ZTA5LThjZTktNjRjODA2NDMyOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgOjNRpUW6tdu3+u4lFOHrgY4lsLmeQLt5f5dZ7EYVw/xSet79oRUMv E/gagOeu7gUIGDBCqzexrjG17pSu/0dUtndxn2yQbs7iGol5RtlvcUsP0YRwb5eu w0mWebXLzSWb77XdUTFcIuKPUXFQcGnVumgdRkLNRBesQmmjOOVDCe4nww7gmTFM cqvi1b6O/zNZfO5Xte/WExFmGlZ0mtMan9/UzAQ3+QGCktRKh6Lm81jO56p82JVU rgtaoRhYN+oE4U1xIujROGO86PwwBzyr3QCZrfKGkJnBFXGcxB6tgkPMBqSuKyPd EeaFEW04T3KxEReEGNaNm4kjmkAW9/8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:22 2025 by rpki-client