$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa File: a1599c49-20bf-390c-9d21-4c927a2074e3.roa (raw, json) Hash identifier: 9Av98/SYnFIF9gcOBuadVx7XRksnrmhxA1tsSfitKiU= Subject key identifier: 50:84:EE:8C:E0:3A:18:4C:10:CC:5C:EF:2B:19:2A:02:5B:7B:7F:A8 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584BA39D0CF8F8CCF31A6693E800 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 66.178.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:0c:f8:f8:cc:f3:1a:66:93:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=d9c1ed17-e5e6-4881-97e8-e800229aaf9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:70:65:d5:8f:f5:56:93:b3:64:c4:29:ca: 47:d6:04:2e:c0:75:cf:be:e4:7e:d0:1a:3a:97:ce: bf:8b:b5:a1:02:66:c9:58:1f:3c:e1:02:67:af:9c: ea:8f:f6:67:d6:0e:1b:ac:76:bf:a5:e5:c4:da:6d: 3b:90:8a:8a:6d:07:73:44:bc:f2:a9:38:a5:55:c3: df:d6:89:76:40:1f:01:08:48:d7:54:d5:e6:81:53: 1c:69:0a:ee:9b:d7:b7:05:72:36:49:ed:7d:4c:98: 72:e7:7c:a8:c6:21:b6:de:e6:66:f1:c4:17:e7:89: 7b:1d:2f:79:c5:15:bf:3b:81:bb:47:ff:01:33:27: 6c:a1:e1:d8:e4:5e:57:a1:fb:51:c3:7f:6c:d3:99: 50:ba:5b:fd:4b:04:cb:db:d5:fa:af:a4:c9:a7:6e: 11:07:b0:25:06:8b:78:cd:16:14:bc:f4:6d:67:47: f6:ba:7d:8c:82:b8:ff:7c:67:01:95:1b:4a:4f:c9: 8c:7c:74:d3:c8:4f:8d:59:ab:0d:78:58:0d:c9:bf: f2:bc:99:51:42:9b:cc:fd:58:fd:58:de:02:89:34: 39:d9:a7:eb:5a:25:91:e2:af:51:d4:d0:fa:bb:9c: ff:ef:a9:59:12:c4:7b:00:7c:99:ea:0e:4b:c9:36: d9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:84:EE:8C:E0:3A:18:4C:10:CC:5C:EF:2B:19:2A:02:5B:7B:7F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/a1599c49-20bf-390c-9d21-4c927a2074e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6a:f6:cc:4f:cc:41:d6:f5:ed:25:f2:e9:94:73:79:19:7e: 8a:76:ae:97:48:52:d7:fe:58:1a:9b:01:3c:8f:8d:47:31:cc: 01:29:98:9c:46:6e:88:54:6a:d8:9d:4c:cb:60:1d:3c:88:0b: 74:66:df:1f:36:68:75:89:19:40:21:51:89:f3:65:ca:f4:71: 5d:17:34:20:63:69:5e:31:55:0d:4f:fc:9e:83:18:41:6d:08: 52:b7:4c:c7:86:64:af:27:70:73:41:40:2b:0c:6e:c2:86:ad: 2d:af:08:36:88:56:c1:74:11:05:33:cb:22:97:ba:c8:42:92: aa:b8:43:da:3f:ec:2d:a7:93:44:d6:6d:16:65:e5:bc:f0:ea: cb:25:c3:b6:85:0d:9f:62:0f:25:96:26:e5:91:c9:18:76:9b: 41:8e:09:ad:0b:88:95:e8:69:28:78:66:bf:e6:9b:22:01:c8: cd:85:7a:5e:a1:8a:84:f2:28:00:f7:d2:2d:ac:03:9f:df:fc: 5d:26:fa:70:dc:a1:b3:af:6a:38:4c:63:65:d8:77:d1:02:18: ab:22:33:e9:9e:b9:45:ef:ac:b9:43:d3:35:95:25:f5:a3:8c: 67:c0:10:39:37:35:98:a9:76:46:4d:8c:1e:88:75:2e:1d:64: d6:5a:22:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQz4+MzzGmaT6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDljMWVkMTctZTVlNi00ODgxLTk3ZTgtZTgwMDIyOWFhZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJpwZdWP9VaTs2TEKcpH1gQuwHXPvuR+0Bo6 l86/i7WhAmbJWB884QJnr5zqj/Zn1g4brHa/peXE2m07kIqKbQdzRLzyqTilVcPf 1ol2QB8BCEjXVNXmgVMcaQrum9e3BXI2Se19TJhy53yoxiG23uZm8cQX54l7HS95 xRW/O4G7R/8BMydsoeHY5F5XoftRw39s05lQulv9SwTL29X6r6TJp24RB7AlBot4 zRYUvPRtZ0f2un2Mgrj/fGcBlRtKT8mMfHTTyE+NWasNeFgNyb/yvJlRQpvM/Vj9 WN4CiTQ52afrWiWR4q9R1ND6u5z/76lZEsR7AHyZ6g5LyTbZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCE7ozgOhhMEMxc7ysZKgJbe3+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvYTE1OTljNDktMjBiZi0z OTBjLTlkMjEtNGM5MjdhMjA3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtq9sxPzEHW9e0l8umUc3kZfop2rpdIUtf+WBqbATyPjUcxzAEpmJxG bohUatidTMtgHTyIC3Rm3x82aHWJGUAhUYnzZcr0cV0XNCBjaV4xVQ1P/J6DGEFt CFK3TMeGZK8ncHNBQCsMbsKGrS2vCDaIVsF0EQUzyyKXushCkqq4Q9o/7C2nk0TW bRZl5bzw6sslw7aFDZ9iDyWWJuWRyRh2m0GOCa0LiJXoaSh4Zr/mmyIByM2Fel6h ioTyKAD30i2sA5/f/F0m+nDcobOvajhMY2XYd9ECGKsiM+meuUXvrLlD0zWVJfWj jGfAEDk3NZipdkZNjB6IdS4dZNZaIr8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:28 2025 by rpki-client