$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa File: 86496a16-88a9-3767-866b-3cfa90b5926b.roa (raw, json) Hash identifier: qN0ibog3iE5bEkRerUOFIyLgq9VaH6WvkuCuPzKQpng= Subject key identifier: AE:48:DF:5F:1B:EA:3A:12:04:2E:78:FD:BD:69:AA:95:4D:DC:A9:91 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584A9A663361B9A6C1EC7601E940 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 5662 IP address blocks: 157.166.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:33:61:b9:a6:c1:ec:76:01:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=a2324bb3-9412-474b-b1b9-a508ca41ae02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:a8:5d:2b:e7:e5:0f:73:c4:b7:b7:87:a2: e5:73:28:a7:d7:b6:21:9b:6e:a9:77:f3:e7:20:66: bd:9b:89:e5:b0:bd:91:81:bb:f0:3e:d6:c0:b0:db: 3a:d9:8e:0e:73:f5:d9:e4:9c:fb:35:3b:f5:2d:2c: ac:e8:18:7b:76:ca:0e:5e:65:50:78:33:af:6f:1c: 35:d1:72:2d:a8:a5:1d:30:f4:3f:96:ea:10:c6:ab: c1:ef:5b:0f:1f:f8:d3:7d:40:d5:f4:fd:e5:78:a6: 54:95:59:de:bd:c7:d4:94:b8:9e:06:b4:25:61:34: 00:82:75:36:50:16:87:d2:6e:43:17:3e:3b:fe:40: 19:58:62:ff:11:ba:74:86:87:2b:cb:11:54:15:37: 67:fd:ba:5c:95:a0:7f:da:ed:55:a3:1c:f4:39:0f: 19:e8:71:71:6d:b7:d8:ed:0d:a3:4f:21:fa:a1:37: be:b3:ed:43:14:ac:18:ba:35:a4:ce:d2:60:2f:24: 74:a4:bf:7c:53:2f:e4:03:35:b3:c2:c3:6a:74:cd: 10:e5:66:9a:07:e6:b8:c2:86:b0:7c:5e:5a:eb:1a: 04:56:b3:5c:74:5f:31:5c:06:68:1c:30:3f:47:9b: e4:a7:c1:e7:a7:ed:51:38:14:35:3a:5f:08:bc:da: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:48:DF:5F:1B:EA:3A:12:04:2E:78:FD:BD:69:AA:95:4D:DC:A9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:41:c0:e4:55:e8:b1:57:5f:e5:61:c5:a7:09:d7:19:58:1a: da:9f:02:4d:58:55:3d:59:ef:de:90:e8:9c:b0:14:67:0f:7f: 2b:86:c9:7d:2d:b9:9e:52:b8:65:87:de:5f:a7:34:56:4b:2e: 8d:da:89:09:a7:93:b3:b9:49:b4:b5:d7:55:49:64:d0:a7:c5: 40:19:27:e6:66:02:7a:a8:6a:57:85:2c:56:b3:b7:e1:a5:48: 12:dc:0a:c7:ae:9c:a5:e1:d1:78:63:d2:65:6d:21:25:84:1a: 60:0e:5c:47:fd:0d:3a:4e:0c:90:74:72:b4:9f:a6:ff:35:f2: 41:f8:5e:fd:fb:f9:37:49:ac:75:7b:86:45:fb:bb:e6:55:24: 8f:3e:b0:78:a2:b4:5d:ef:82:3d:fc:c1:8b:66:3e:2b:d8:5f: 4d:6b:b8:ba:db:f7:cd:20:02:59:8e:05:ab:13:d8:6e:c8:cb: cc:9d:e6:cc:8a:da:7b:09:d0:25:b0:07:86:0f:72:60:35:69: 3b:b1:36:2d:f8:b1:71:f1:92:0a:01:ec:99:b9:7c:7f:30:60: 48:dd:0a:79:ab:e9:2c:96:d5:3d:69:18:27:5c:e1:d4:c0:1c: d4:12:2b:64:27:51:f3:33:fa:c3:30:83:53:70:67:1b:45:e8: fd:8b:cb:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjNhuabB7HYB6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YTIzMjRiYjMtOTQxMi00NzRiLWIxYjktYTUwOGNhNDFhZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LSoXSvn5Q9zxLe3h6Llcyin17Yhm26pd/Pn IGa9m4nlsL2RgbvwPtbAsNs62Y4Oc/XZ5Jz7NTv1LSys6Bh7dsoOXmVQeDOvbxw1 0XItqKUdMPQ/luoQxqvB71sPH/jTfUDV9P3leKZUlVnevcfUlLieBrQlYTQAgnU2 UBaH0m5DFz47/kAZWGL/Ebp0hocryxFUFTdn/bpclaB/2u1Voxz0OQ8Z6HFxbbfY 7Q2jTyH6oTe+s+1DFKwYujWkztJgLyR0pL98Uy/kAzWzwsNqdM0Q5WaaB+a4woaw fF5a6xoEVrNcdF8xXAZoHDA/R5vkp8Hnp+1ROBQ1Ol8IvNqXNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5I318b6joSBC54/b1pqpVN3KmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvODY0OTZhMTYtODhhOS0z NzY3LTg2NmItM2NmYTkwYjU5MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtBwORV6LFXX+VhxacJ1xlYGtqfAk1YVT1Z796Q6JywFGcPfyuGyX0t uZ5SuGWH3l+nNFZLLo3aiQmnk7O5SbS111VJZNCnxUAZJ+ZmAnqoaleFLFazt+Gl SBLcCseunKXh0Xhj0mVtISWEGmAOXEf9DTpODJB0crSfpv818kH4Xv37+TdJrHV7 hkX7u+ZVJI8+sHiitF3vgj38wYtmPivYX01ruLrb980gAlmOBasT2G7Iy8yd5syK 2nsJ0CWwB4YPcmA1aTuxNi34sXHxkgoB7Jm5fH8wYEjdCnmr6SyW1T1pGCdc4dTA HNQSK2QnUfMz+sMwg1NwZxtF6P2Ly/c= -----END CERTIFICATE-----Generated at Sun Jul 27 15:53:10 2025 by rpki-client