$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af86b20-281a-3d6c-b3cd-a6561d328b11.roa File: 3af86b20-281a-3d6c-b3cd-a6561d328b11.roa (raw, json) Hash identifier: Ax5Qzth6XOXodaCBuc+PvnuKsBursdm8TGUXieDi6jM= Subject key identifier: 96:F1:CB:2D:13:1F:6C:8A:59:BD:02:74:B0:AA:42:83:D2:6D:1D:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CB120CE6A555DF091FAFC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af86b20-281a-3d6c-b3cd-a6561d328b11.roa Signing time: Thu 23 Oct 2025 01:30:42 +0000 ROA not before: Thu 23 Oct 2025 01:30:42 +0000 ROA not after: Wed 21 Jan 2026 02:30:42 +0000 asID: 6167 IP address blocks: 166.211.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:b1:20:ce:6a:55:5d:f0:91:fa:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 01:30:42 2025 GMT Not After : Jan 21 02:30:42 2026 GMT Subject: CN=3c0b9366-51b1-4d69-bdbf-9ad462f7b641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f8:f5:9e:8f:ca:91:64:99:c4:5b:92:d5:30: 1f:7f:ff:5a:84:03:ad:6c:04:06:cd:b1:b6:8b:b6: c4:9b:11:6f:46:2c:a4:cd:7b:22:3a:70:8d:eb:a9: 99:99:33:cf:5a:6c:9a:a3:5c:2c:ff:1f:89:1c:f7: e5:a1:b6:b6:dd:a0:d7:66:e0:0a:95:5a:0b:96:72: c3:8f:6d:74:26:c6:e9:4e:2e:57:65:ef:5b:58:7f: 97:8a:5a:49:61:f1:76:62:0e:6f:e0:57:dc:ee:88: 02:bc:15:4c:1d:d0:db:97:e7:23:9d:c5:5b:f7:9c: df:68:d6:4f:d2:81:ac:3e:89:4b:c9:5f:ba:e6:9e: e9:09:b5:5d:5e:2f:5b:5d:f1:68:b1:f3:da:c6:ae: d7:0b:1c:af:ce:16:a6:cc:dc:6a:61:0c:54:76:a8: 74:65:c0:eb:66:39:51:dc:1d:a9:66:28:e9:05:53: b6:32:e8:91:cd:76:6b:35:c0:0a:9a:ce:32:f3:2d: 0e:18:d0:49:e1:3d:4a:86:1f:18:b3:a6:e9:07:7c: cf:f9:b1:17:7c:d3:f3:ff:f9:92:fd:a3:20:45:8f: 45:47:4b:14:47:fd:20:6b:0a:44:f1:c9:22:51:73: 4f:cd:64:db:72:ce:0f:8c:65:b3:0b:8f:0d:4d:fa: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:CB:2D:13:1F:6C:8A:59:BD:02:74:B0:AA:42:83:D2:6D:1D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3af86b20-281a-3d6c-b3cd-a6561d328b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.211.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e1:b7:80:5b:09:29:b5:04:a5:65:54:65:5f:38:6d:eb:2b: a1:c4:44:78:27:33:83:e2:1a:8c:06:62:2a:cb:1b:ee:fb:e2: d2:a9:ad:4c:03:03:27:0a:ed:10:30:d6:bc:74:8d:75:6e:94: 3f:1c:ec:f7:d8:2c:30:f0:a9:69:60:2b:3c:68:37:8d:c9:63: 02:f9:43:2d:ab:c0:d5:0c:0b:41:c6:21:14:19:a2:14:b3:d7: d4:14:6c:17:01:45:01:3b:b5:7a:5e:38:b0:12:2c:40:17:1a: 49:5b:cb:ba:fb:55:72:9f:c6:7a:af:e1:c1:ca:2b:f1:87:ab: 4e:03:d8:f2:f7:b0:e8:10:ef:bf:32:1f:a9:8a:81:89:ba:89: 93:d5:85:72:63:ba:56:37:94:85:4d:be:8b:ce:de:26:9b:54: 21:11:f6:30:0e:df:2d:2b:4d:0d:ed:c0:ed:79:22:a3:f4:bd: 76:c4:c4:5c:64:02:ae:9d:bb:c9:fd:40:25:fb:f1:9f:86:69: 7d:63:d6:43:0c:a3:f1:dc:5c:23:8d:b3:c4:ec:63:fc:5c:43: 98:cf:7a:2b:9b:89:c8:96:c9:7a:16:a2:df:a6:1c:ae:e2:dc: 61:e6:da:e0:fa:a2:53:a2:49:4c:87:b4:56:14:40:c2:db:51: e0:5d:61:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucsSDOalVd8JH6/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAxMzA0MloXDTI2MDEyMTAyMzA0MlowLzEtMCsGA1UEAxMk M2MwYjkzNjYtNTFiMS00ZDY5LWJkYmYtOWFkNDYyZjdiNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfj1no/KkWSZxFuS1TAff/9ahAOtbAQGzbG2 i7bEmxFvRiykzXsiOnCN66mZmTPPWmyao1ws/x+JHPfloba23aDXZuAKlVoLlnLD j210JsbpTi5XZe9bWH+XilpJYfF2Yg5v4Ffc7ogCvBVMHdDbl+cjncVb95zfaNZP 0oGsPolLyV+65p7pCbVdXi9bXfFosfPaxq7XCxyvzhamzNxqYQxUdqh0ZcDrZjlR 3B2pZijpBVO2MuiRzXZrNcAKms4y8y0OGNBJ4T1Khh8Ys6bpB3zP+bEXfNPz//mS /aMgRY9FR0sUR/0gawpE8ckiUXNPzWTbcs4PjGWzC48NTfoTGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbxyy0TH2yKWb0CdLCqQoPSbR28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FmODZiMjAtMjgxYS0z ZDZjLWIzY2QtYTY1NjFkMzI4YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHptOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrht4BbCSm1BKVlVGVfOG3rK6HERHgnM4PiGowGYirLG+774tKprUwD AycK7RAw1rx0jXVulD8c7PfYLDDwqWlgKzxoN43JYwL5Qy2rwNUMC0HGIRQZohSz 19QUbBcBRQE7tXpeOLASLEAXGklby7r7VXKfxnqv4cHKK/GHq04D2PL3sOgQ778y H6mKgYm6iZPVhXJjulY3lIVNvovO3iabVCER9jAO3y0rTQ3twO15IqP0vXbExFxk Aq6du8n9QCX78Z+GaX1j1kMMo/HcXCONs8TsY/xcQ5jPeiubiciWyXoWot+mHK7i 3GHm2uD6olOiSUyHtFYUQMLbUeBdYUU= -----END CERTIFICATE-----Generated at Sat Oct 25 10:49:05 2025 by rpki-client