$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa File: 8de8b227-fe31-33fc-a576-6a0493f26446.roa (raw, json) Hash identifier: KxYVV0KqsmArzm6k70zizoyVswumPYzwKThI7rmicro= Subject key identifier: BD:35:68:46:E2:AB:A1:AC:D0:41:DD:CF:D5:79:C7:46:72:8F:DC:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CC0A2FE621AF1C5C0C27C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa Signing time: Thu 23 Oct 2025 02:01:56 +0000 ROA not before: Thu 23 Oct 2025 02:01:56 +0000 ROA not after: Wed 21 Jan 2026 03:01:56 +0000 asID: 22394 IP address blocks: 166.166.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:c0:a2:fe:62:1a:f1:c5:c0:c2:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 02:01:56 2025 GMT Not After : Jan 21 03:01:56 2026 GMT Subject: CN=37a168e7-54f7-4f1e-9b4a-15d9c14277ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:82:de:ad:32:76:f7:e6:11:f2:f8:28:8b: 57:22:49:d4:4c:6b:f6:7d:74:4e:a4:4e:95:10:3b: 96:7f:17:6e:cc:68:0a:12:6a:82:59:be:90:b4:ae: 5f:93:cf:a3:21:63:f3:1f:9c:89:24:99:12:f5:9c: 36:0e:09:c5:f5:29:e5:fc:cf:c2:c4:d1:e3:08:5b: 7f:dc:30:d7:f9:42:5e:99:ba:28:d3:6e:7c:9a:bb: 80:33:83:5d:e8:5e:41:26:5d:c3:0e:64:27:62:27: 97:26:b5:34:20:2c:ea:61:a4:ae:2a:e2:f6:36:aa: 51:a9:da:f0:59:a1:36:a4:ca:b4:08:72:f9:c5:1e: ca:25:16:e3:d0:c3:cc:bb:65:04:5b:67:ca:1a:d0: 17:96:7e:b9:cf:93:85:81:4e:25:da:49:a4:35:6b: 70:dd:2f:44:18:2a:61:93:55:3c:c1:a4:b0:a8:98: e2:04:f4:90:28:cb:68:dd:ea:12:91:e9:ec:b1:a6: 52:14:35:a0:ff:98:40:5b:78:4d:98:3a:fe:6b:84: e8:25:16:8d:c6:8e:f7:5c:74:2a:00:d0:96:b7:cf: be:db:b4:0c:3b:ec:c5:08:7c:cf:26:45:6a:b4:4c: 30:09:08:53:2b:4a:d6:39:16:62:76:54:e8:5d:d1: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:68:46:E2:AB:A1:AC:D0:41:DD:CF:D5:79:C7:46:72:8F:DC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8de8b227-fe31-33fc-a576-6a0493f26446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.166.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4b:0e:66:3a:b1:e1:d2:aa:32:de:e7:83:ed:64:9c:18:09: 12:04:65:eb:70:68:bd:1d:01:bd:1f:1b:16:c7:c9:4e:c0:7c: ca:0e:43:5d:27:9c:da:73:0c:e8:97:f1:15:90:b1:78:37:8e: fb:8d:ab:2f:7d:61:96:46:a1:54:00:81:eb:dc:64:36:3e:7a: e3:e0:b6:d5:f0:f7:87:c3:90:d9:4a:a3:c5:c9:e1:fb:46:0a: dd:8d:9c:3f:18:34:d2:9b:ce:90:2d:f5:6a:d0:b5:b5:89:d1: e0:3a:aa:02:c8:3e:9b:93:71:e6:66:62:29:6f:17:39:ac:9b: c9:ca:b3:24:3f:33:3a:6b:f5:65:a3:57:6a:2f:89:ca:ae:ff: 05:1d:e6:c8:2c:27:0e:fb:55:06:e3:8a:5b:0f:a8:46:45:46: a3:34:28:27:91:2d:5c:e9:f5:22:a0:12:07:39:94:2b:92:d0: 3a:7c:f4:31:06:15:33:51:e1:d7:e6:e1:e4:21:cc:38:a9:17: 7a:c4:6d:fe:ec:14:2f:ea:b3:ad:19:7a:0f:7c:8a:d1:21:5e: 89:ea:9a:a5:f9:ba:32:31:22:d6:83:20:26:f8:31:e6:a7:3d: eb:54:80:84:13:9b:72:22:12:e8:d2:02:04:be:58:5a:1c:9e: 9a:27:1c:e7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEucwKL+YhrxxcDCfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAyMDE1NloXDTI2MDEyMTAzMDE1NlowLzEtMCsGA1UEAxMk MzdhMTY4ZTctNTRmNy00ZjFlLTliNGEtMTVkOWMxNDI3N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikCC3q0ydvfmEfL4KItXIknUTGv2fXROpE6V EDuWfxduzGgKEmqCWb6QtK5fk8+jIWPzH5yJJJkS9Zw2DgnF9Snl/M/CxNHjCFt/ 3DDX+UJemboo0258mruAM4Nd6F5BJl3DDmQnYieXJrU0ICzqYaSuKuL2NqpRqdrw WaE2pMq0CHL5xR7KJRbj0MPMu2UEW2fKGtAXln65z5OFgU4l2kmkNWtw3S9EGCph k1U8waSwqJjiBPSQKMto3eoSkenssaZSFDWg/5hAW3hNmDr+a4ToJRaNxo73XHQq ANCWt8++27QMO+zFCHzPJkVqtEwwCQhTK0rWORZidlToXdG53wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL01aEbiq6Gs0EHdz9V5x0Zyj9wxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGRlOGIyMjctZmUzMS0z M2ZjLWE1NzYtNmEwNDkzZjI2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBpqYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAF0sOZjqx4dKqMt7ng+1knBgJEgRl63BovR0BvR8bFsfJTsB8yg5DXSec 2nMM6JfxFZCxeDeO+42rL31hlkahVACB69xkNj564+C21fD3h8OQ2Uqjxcnh+0YK 3Y2cPxg00pvOkC31atC1tYnR4DqqAsg+m5Nx5mZiKW8XOaybycqzJD8zOmv1ZaNX ai+Jyq7/BR3myCwnDvtVBuOKWw+oRkVGozQoJ5EtXOn1IqASBzmUK5LQOnz0MQYV M1Hh1+bh5CHMOKkXesRt/uwUL+qzrRl6D3yK0SFeieqapfm6MjEi1oMgJvgx5qc9 61SAhBObciIS6NICBL5YWhyemicc5w== -----END CERTIFICATE-----Generated at Sat Nov 1 15:21:45 2025 by rpki-client