$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa File: ecd9439b-df70-304d-a65a-4712a2c669ef.roa (raw, json) Hash identifier: sgyN/EXgCPz0lhnTStHqzd0jUJkSEGY0fkJDikqwFCo= Subject key identifier: C3:68:37:C8:89:59:A8:DA:06:D5:6C:D8:C1:AA:BF:15:F0:1D:FF:0B Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B33F1A98E1DD5C43E1D9F1600 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 16509 IP address blocks: 157.166.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a9:8e:1d:d5:c4:3e:1d:9f:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=545f595c-45e4-49b9-a31b-90c24d0b48b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:8d:21:0d:38:3a:ea:3e:e5:e5:da:e4:ad: 05:30:55:8e:ce:da:c3:5e:43:0d:f9:39:de:01:09: f0:14:d7:50:39:94:14:1d:46:a4:6f:8f:d6:0f:ee: 60:2a:25:6f:39:c5:a3:cf:99:01:15:ec:60:5a:8d: 21:e6:f7:df:80:37:f0:44:7c:92:c9:3d:86:6a:50: 05:11:af:49:a2:cf:00:f9:1d:e9:d8:20:0d:a9:5f: a6:02:29:63:a6:48:72:98:ad:94:cd:1f:17:26:af: ba:f6:24:eb:bc:65:e0:fa:38:ac:5d:9c:98:fb:4e: d7:60:2f:1b:74:81:cb:2b:fd:d9:6c:3e:08:ec:af: 2b:b8:ea:62:d3:16:bd:00:8a:ef:63:0f:b2:0d:5f: 6e:a0:7b:a3:c7:7e:0d:ed:01:29:e0:61:c4:d0:01: 9f:b4:d1:b2:4a:18:11:41:e4:1e:6a:5a:df:b2:ce: 25:34:aa:2a:9f:c7:a1:4b:99:91:14:3a:4c:93:d0: 81:de:a6:f7:a7:b3:32:fa:bc:4a:6d:fa:58:70:9f: 04:50:e6:77:e9:bc:f6:58:fc:d2:1e:20:5a:18:45: 80:73:c5:7d:e2:8e:ff:64:e0:1f:c8:be:8b:c0:b2: 5e:8c:7b:9d:16:02:06:ff:e8:c6:db:72:bb:4d:0a: af:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:68:37:C8:89:59:A8:DA:06:D5:6C:D8:C1:AA:BF:15:F0:1D:FF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ecd9439b-df70-304d-a65a-4712a2c669ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:09:7f:0f:7e:24:78:f9:7d:f0:71:67:52:bf:72:55:9a: 19:0c:a0:97:fe:65:20:b4:53:6d:7b:b2:54:ad:a2:87:ca:1b: 0a:41:18:b3:af:68:55:31:1e:d1:95:ee:bd:7b:72:1c:14:4e: d2:82:46:82:10:7b:be:7c:61:dd:78:2f:03:67:c8:0f:f4:a8: 71:dc:b6:24:65:2b:64:97:29:d6:41:90:71:45:36:14:d0:de: e8:4b:93:98:34:da:a4:7b:9d:9a:21:ed:18:80:0b:69:1c:fe: 62:d3:2c:f0:4f:82:19:c1:d1:f4:e0:90:8f:ee:be:f9:93:e3: da:67:04:27:54:bf:7b:46:de:50:ed:62:cb:b5:62:a5:6b:4d: d7:84:ec:97:cc:33:10:05:58:ef:e2:d8:38:f5:b2:08:6d:72: b7:f4:a8:02:e7:ed:89:89:cc:d6:99:82:c4:73:9d:38:ce:18: 73:c8:bc:7f:c1:d4:aa:50:66:b5:74:d7:2c:11:b5:b9:ba:05: 99:da:d3:e3:af:d2:d4:2c:c4:9a:ed:e3:9a:78:67:68:d2:7c: 2f:de:38:c5:eb:ed:19:e9:92:48:79:2d:74:45:fd:fa:bd:d0: 65:6b:c9:c9:c5:f5:58:ab:e6:80:75:eb:dc:01:55:c3:91:b9: 77:4e:a6:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8amOHdXEPh2fFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NTQ1ZjU5NWMtNDVlNC00OWI5LWEzMWItOTBjMjRkMGI0OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ONIQ04Ouo+5eXa5K0FMFWOztrDXkMN+Tne AQnwFNdQOZQUHUakb4/WD+5gKiVvOcWjz5kBFexgWo0h5vffgDfwRHySyT2GalAF Ea9Jos8A+R3p2CANqV+mAiljpkhymK2UzR8XJq+69iTrvGXg+jisXZyY+07XYC8b dIHLK/3ZbD4I7K8ruOpi0xa9AIrvYw+yDV9uoHujx34N7QEp4GHE0AGftNGyShgR QeQealrfss4lNKoqn8ehS5mRFDpMk9CB3qb3p7My+rxKbfpYcJ8EUOZ36bz2WPzS HiBaGEWAc8V94o7/ZOAfyL6LwLJejHudFgIG/+jG23K7TQqvLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNoN8iJWajaBtVs2MGqvxXwHf8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZWNkOTQzOWItZGY3MC0z MDRkLWE2NWEtNDcxMmEyYzY2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoICX8PfiR4+X3wcWdSv3JVmhkMoJf+ZSC0U217slStoofKGwpBGLOv aFUxHtGV7r17chwUTtKCRoIQe758Yd14LwNnyA/0qHHctiRlK2SXKdZBkHFFNhTQ 3uhLk5g02qR7nZoh7RiAC2kc/mLTLPBPghnB0fTgkI/uvvmT49pnBCdUv3tG3lDt Ysu1YqVrTdeE7JfMMxAFWO/i2Dj1sghtcrf0qALn7YmJzNaZgsRznTjOGHPIvH/B 1KpQZrV01ywRtbm6BZna0+Ov0tQsxJrt45p4Z2jSfC/eOMXr7Rnpkkh5LXRF/fq9 0GVrycnF9Vir5oB169wBVcORuXdOpvk= -----END CERTIFICATE-----Generated at Mon Sep 15 22:50:23 2025 by rpki-client