$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa File: 8568d632-f283-3040-a96b-7e1db65fc91c.roa (raw, json) Hash identifier: cF5kNiqPJg96fYn0pVu2U84kBidYz15ufR0zqaHkrJo= Subject key identifier: B5:B0:24:91:47:8E:E9:0F:96:E7:E5:61:8F:EF:AF:7A:0D:11:93:B9 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584BA9326EB9A02EBA0F4C2F4200 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 66.178.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6e:b9:a0:2e:ba:0f:4c:2f:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=5a266c21-211d-4bb3-b5bf-fc0cd57c122e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f9:b5:7e:34:63:e1:00:59:03:43:2d:e8:fc: 2e:11:d5:72:87:c1:bd:dc:9d:76:50:c0:14:cd:31: 37:ad:97:9a:d8:f9:29:db:84:23:e7:43:47:38:96: 17:10:e9:b2:83:00:54:d5:a1:60:2c:43:4a:1e:64: 8e:9d:ae:58:84:27:12:8b:2f:4e:d4:f3:17:63:d5: 82:81:6c:79:e5:26:3a:75:aa:c1:1e:9b:4c:de:6a: bb:de:1a:d8:f5:9a:a4:58:d4:b3:d6:b5:6d:7d:07: bc:e4:1f:b8:c0:0e:aa:dc:ff:3f:a2:29:33:f2:a0: 7e:42:51:ed:d4:51:3c:de:71:aa:38:17:a6:90:b9: ae:e9:5c:22:df:91:86:08:7d:94:78:69:58:3a:45: 36:f5:0f:b1:82:91:13:e2:6f:d0:ff:74:ec:5e:15: 09:c0:75:67:de:1c:03:e2:aa:e8:12:6f:55:1e:eb: 91:77:8c:50:bf:89:8d:2d:55:c7:5a:ca:97:fb:28: e7:77:0a:59:4f:15:42:1e:eb:48:4c:ab:97:98:b0: 04:8e:b3:0b:9d:a1:2d:e7:f1:0e:75:71:e4:88:fd: 39:29:75:f6:b4:57:8f:11:fc:da:31:55:e9:8a:16: c7:61:31:f0:aa:c8:41:aa:cf:4b:e0:d7:1b:e3:ed: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:24:91:47:8E:E9:0F:96:E7:E5:61:8F:EF:AF:7A:0D:11:93:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/8568d632-f283-3040-a96b-7e1db65fc91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:70:9e:03:bb:d3:f7:97:50:5f:64:d9:2b:ee:2f:67:ae:f7: 81:bd:7e:c3:25:b5:99:75:3e:69:8e:40:62:e1:28:ec:32:bf: ef:96:3b:70:09:93:26:91:74:ea:c3:f3:8c:c2:bb:09:cc:bd: 06:73:e3:7b:58:5f:e4:8a:36:d2:d8:e9:80:de:ed:b6:fc:28: 3f:74:79:6b:e5:68:15:62:51:78:df:80:78:58:d0:81:43:2a: 5c:46:fb:5d:21:09:d5:cb:a2:8a:aa:14:2b:80:19:e3:05:d5: 8e:57:76:db:c1:96:6c:20:21:e4:b8:a9:4c:04:a7:ab:d8:43: 51:ab:27:56:e5:84:75:31:db:08:13:02:1d:cd:72:f2:2f:9c: 8f:c8:3b:ac:1a:37:d5:00:3d:61:2d:84:47:63:b3:32:79:14: e6:42:ad:fb:14:b3:8c:8b:b9:30:bc:df:17:b7:2d:7c:c8:8b: db:e4:03:f5:f2:e5:71:b7:39:98:1b:e2:b2:ec:42:9d:8f:70: 99:88:94:39:c8:c2:c4:25:cd:0d:bc:78:39:e0:06:d0:75:66: 5f:d4:45:a2:45:81:4e:0c:7f:ab:9e:76:94:54:48:f0:08:bd: f8:02:4f:78:3c:6b:d4:de:72:0b:ef:5d:cf:4d:4b:af:dc:3a: 40:98:eb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMm65oC66D0wvQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NWEyNjZjMjEtMjExZC00YmIzLWI1YmYtZmMwY2Q1N2MxMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPm1fjRj4QBZA0Mt6PwuEdVyh8G93J12UMAU zTE3rZea2Pkp24Qj50NHOJYXEOmygwBU1aFgLENKHmSOna5YhCcSiy9O1PMXY9WC gWx55SY6darBHptM3mq73hrY9ZqkWNSz1rVtfQe85B+4wA6q3P8/oikz8qB+QlHt 1FE83nGqOBemkLmu6Vwi35GGCH2UeGlYOkU29Q+xgpET4m/Q/3TsXhUJwHVn3hwD 4qroEm9VHuuRd4xQv4mNLVXHWsqX+yjndwpZTxVCHutITKuXmLAEjrMLnaEt5/EO dXHkiP05KXX2tFePEfzaMVXpihbHYTHwqshBqs9L4Ncb4+2fjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWwJJFHjukPluflYY/vr3oNEZO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvODU2OGQ2MzItZjI4My0z MDQwLWE5NmItN2UxZGI2NWZjOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBwngO70/eXUF9k2SvuL2eu94G9fsMltZl1PmmOQGLhKOwyv++WO3AJ kyaRdOrD84zCuwnMvQZz43tYX+SKNtLY6YDe7bb8KD90eWvlaBViUXjfgHhY0IFD KlxG+10hCdXLooqqFCuAGeMF1Y5XdtvBlmwgIeS4qUwEp6vYQ1GrJ1blhHUx2wgT Ah3NcvIvnI/IO6waN9UAPWEthEdjszJ5FOZCrfsUs4yLuTC83xe3LXzIi9vkA/Xy 5XG3OZgb4rLsQp2PcJmIlDnIwsQlzQ28eDngBtB1Zl/URaJFgU4Mf6uedpRUSPAI vfgCT3g8a9TecgvvXc9NS6/cOkCY6yk= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:28 2025 by rpki-client