$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae61d76e-1e2a-34aa-86a7-83a38af4a9f0.roa File: ae61d76e-1e2a-34aa-86a7-83a38af4a9f0.roa (raw, json) Hash identifier: CgV5mgMmmt/Qw62CR/N6PWcnPBmNR/mr/G3veRiiaU4= Subject key identifier: 39:EC:16:50:2B:45:1C:25:4E:69:52:68:AC:D7:90:F3:E4:23:98:8F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B3FAC95424C3259B5A402D9C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae61d76e-1e2a-34aa-86a7-83a38af4a9f0.roa Signing time: Fri 19 Sep 2025 17:51:22 +0000 ROA not before: Fri 19 Sep 2025 17:51:22 +0000 ROA not after: Thu 18 Dec 2025 18:51:22 +0000 asID: 0 IP address blocks: 170.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:ac:95:42:4c:32:59:b5:a4:02:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Sep 19 17:51:22 2025 GMT Not After : Dec 18 18:51:22 2025 GMT Subject: CN=821bc3dc-043d-4d9e-9098-48db72f7ef2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:3d:fa:0f:a5:d8:df:2b:94:d6:28:58:e1: 34:4a:4e:dc:c3:9b:6a:40:33:7c:ff:eb:e5:e3:35: 00:19:ac:db:24:b5:6c:83:e9:65:c3:be:26:23:7f: f6:b4:7e:5a:c9:a6:bf:a9:af:e3:d7:67:45:2c:a0: 0e:7b:3a:86:c5:73:27:12:96:b0:14:76:25:ba:3f: 8d:4e:7b:d6:59:8d:a8:c6:d2:fa:1c:c3:99:12:a6: ff:2b:6b:c2:ca:fb:60:75:57:2c:82:cb:e2:6f:d0: df:9f:bf:53:ab:d5:78:e4:4f:b1:bf:66:eb:e7:3d: 8c:fc:16:46:f6:39:00:c0:bb:86:d8:96:3c:2d:0e: 42:61:08:97:35:66:aa:84:d9:d7:8c:95:35:b0:27: 73:b5:83:35:15:12:bd:5c:0f:57:4f:21:7a:7e:b5: 83:f5:0c:36:35:07:0a:1a:ed:b5:a5:38:f2:0a:27: 85:2c:ee:89:b8:d0:4e:5a:93:37:6f:27:d3:34:50: ad:e9:c1:01:e8:13:3f:3e:25:7b:2d:74:62:26:83: b4:82:00:c4:00:52:60:cb:76:94:21:6c:88:a5:d6: 3e:55:0a:e9:60:a7:3f:af:c3:16:3c:b2:d6:42:2f: e3:2d:1c:08:2b:09:85:f0:22:9b:37:5c:90:76:1f: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:16:50:2B:45:1C:25:4E:69:52:68:AC:D7:90:F3:E4:23:98:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ae61d76e-1e2a-34aa-86a7-83a38af4a9f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 170.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:49:c7:b4:eb:1a:e0:94:24:e6:94:7c:9e:c7:85:9a:a6:56: 05:6a:d5:b1:27:23:02:cb:b7:c0:7c:e6:39:68:fc:3d:23:74: cb:64:44:c9:22:45:15:89:9f:da:63:6f:d4:41:d0:47:98:db: 2f:b1:00:a4:39:89:12:28:17:de:af:3c:86:c0:06:4d:f7:8f: e4:f0:20:1f:1a:24:42:5a:e5:97:cc:8c:f7:5b:f2:a0:f3:53: 3a:52:c2:1c:59:59:a3:e1:14:cd:47:b0:7e:72:77:4c:44:a5: 04:bf:1c:1f:6b:fd:37:a9:f8:b3:4c:75:3b:94:97:ce:ff:ef: bd:76:86:97:e9:5f:a0:2c:69:f5:72:99:a6:55:54:d4:7a:98: fb:3a:4e:42:0a:69:3a:02:af:1a:ad:14:69:54:ce:fb:c1:fe: 27:c6:b9:b7:b1:c9:a9:f2:c6:69:63:0f:dd:61:5f:03:11:5c: 8d:c1:3a:f3:79:f1:f4:63:79:1f:f7:76:2c:cd:38:7f:4a:ec: 19:7b:df:53:ee:7f:37:96:b3:10:40:9c:b0:3d:3c:77:b8:56: 6c:46:70:4c:ee:e3:70:e4:80:e5:f5:c6:40:31:10:9a:df:d8: cf:38:e7:67:54:65:9c:7a:96:81:59:a8:78:e1:35:47:c5:0c: bf:5e:9e:08 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs/rJVCTDJZtaQC2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDkxOTE3NTEyMloXDTI1MTIxODE4NTEyMlowLzEtMCsGA1UEAxMk ODIxYmMzZGMtMDQzZC00ZDllLTkwOTgtNDhkYjcyZjdlZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04o9+g+l2N8rlNYoWOE0Sk7cw5tqQDN8/+vl 4zUAGazbJLVsg+llw74mI3/2tH5ayaa/qa/j12dFLKAOezqGxXMnEpawFHYluj+N TnvWWY2oxtL6HMOZEqb/K2vCyvtgdVcsgsvib9Dfn79Tq9V45E+xv2br5z2M/BZG 9jkAwLuG2JY8LQ5CYQiXNWaqhNnXjJU1sCdztYM1FRK9XA9XTyF6frWD9Qw2NQcK Gu21pTjyCieFLO6JuNBOWpM3byfTNFCt6cEB6BM/PiV7LXRiJoO0ggDEAFJgy3aU IWyIpdY+VQrpYKc/r8MWPLLWQi/jLRwIKwmF8CKbN1yQdh+jMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDnsFlArRRwlTmlSaKzXkPPkI5iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWU2MWQ3NmUtMWUyYS0z NGFhLTg2YTctODNhMzhhZjRhOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqpcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqEnHtOsa4JQk5pR8nseFmqZWBWrVsScjAsu3wHzmOWj8PSN0y2REySJF FYmf2mNv1EHQR5jbL7EApDmJEigX3q88hsAGTfeP5PAgHxokQlrll8yM91vyoPNT OlLCHFlZo+EUzUewfnJ3TESlBL8cH2v9N6n4s0x1O5SXzv/vvXaGl+lfoCxp9XKZ plVU1HqY+zpOQgppOgKvGq0UaVTO+8H+J8a5t7HJqfLGaWMP3WFfAxFcjcE683nx 9GN5H/d2LM04f0rsGXvfU+5/N5azEECcsD08d7hWbEZwTO7jcOSA5fXGQDEQmt/Y zzjnZ1RlnHqWgVmoeOE1R8UMv16eCA== -----END CERTIFICATE-----Generated at Wed Oct 8 13:57:47 2025 by rpki-client