$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa File: 51c8001a-1279-34b7-87ce-25625e69123b.roa (raw, json) Hash identifier: XlF3mnK32jLpnU/fZ1/UYUCdPAcSDadr6Ps/JeZTBNs= Subject key identifier: 65:8C:80:76:10:1D:09:18:0C:7E:85:3D:55:16:5F:33:93:95:C6:6C Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584B970CE7DAC81C0819C906C840 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 6360 IP address blocks: 166.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e7:da:c8:1c:08:19:c9:06:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0d783c93-f738-4afe-a649-b7bacc8cdaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:73:8f:20:e8:7e:fb:51:a3:56:65:2a:64: 08:94:85:b0:27:19:37:47:56:e8:ab:f4:b6:06:77: 33:a5:5b:a6:87:7f:55:31:4c:62:f9:01:f2:db:d0: 90:38:cd:f6:74:80:ef:f9:13:4d:18:cc:b6:a6:b7: 8c:8e:6b:d1:27:e0:ab:52:04:02:a5:72:b9:22:18: ba:a4:8b:72:23:cd:a8:fe:98:80:b7:86:05:a6:ee: 4b:e2:17:c1:51:cf:1c:ce:60:29:2c:aa:ca:c6:48: 52:61:18:1e:91:5a:c8:e7:ab:15:39:d1:92:47:c9: fa:fa:ca:20:42:a3:74:8c:76:fa:08:dc:9e:63:1e: f3:1a:ea:b8:b6:c5:79:19:7c:37:3b:dc:e7:3e:1d: 6f:1e:45:72:82:7b:87:97:d5:e2:77:3e:b5:9e:58: 7a:99:32:2c:70:01:54:e5:16:4d:dc:f1:20:08:b9: 3a:b7:53:39:f6:e9:e4:98:af:f2:9a:8c:5d:30:84: 7b:da:34:bd:48:d2:f6:b7:38:1c:7e:a2:cc:cb:a0: 7a:b6:3f:e2:82:83:20:30:f9:70:40:53:95:af:fe: 83:03:0f:45:17:6a:5c:aa:e8:ad:43:df:84:7b:4a: b6:84:29:5b:98:54:49:2f:71:a2:82:49:4c:90:7f: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8C:80:76:10:1D:09:18:0C:7E:85:3D:55:16:5F:33:93:95:C6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/51c8001a-1279-34b7-87ce-25625e69123b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 166.122.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:3e:86:11:86:a1:be:f3:5a:db:f2:27:50:94:26:47:90:a9: 40:c6:15:31:36:41:5e:81:ef:ce:03:73:b1:dd:4e:1f:d0:84: c4:11:10:25:37:4d:b8:2a:62:81:70:7c:75:63:76:2f:42:ec: f1:7b:c2:8b:57:fc:7b:1b:74:32:cd:5d:b5:5a:6e:b1:92:9b: 25:b6:1f:1f:a8:d3:21:09:c5:76:e5:55:6a:3a:c5:72:b1:5d: 80:39:e2:c4:da:74:a5:d8:60:a6:5b:4e:72:3c:c4:b3:e8:4c: 58:5e:09:97:9b:85:98:22:f8:65:13:46:90:72:14:05:94:20: e0:60:29:df:a3:a6:79:c3:48:57:3b:d6:a9:7f:da:12:c3:bc: 13:cf:ea:40:61:c2:b7:a8:7f:70:e0:88:5a:16:ac:55:da:3b: df:e2:94:db:8b:57:45:de:a2:22:33:30:8c:ba:ab:f5:4d:23: 29:db:d5:e0:8f:57:a1:0d:44:aa:93:d9:93:db:d2:c2:2a:e5: ed:16:cc:a9:4b:61:8c:5c:8a:17:36:f1:59:f7:6f:7c:fb:81: d3:b1:60:fa:ba:70:11:5d:2f:f5:17:8a:10:54:53:db:66:a0: f6:01:8a:ac:58:69:cf:a5:fc:a8:ff:44:4d:88:6e:98:20:15: c8:bf:06:11 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDOfayBwIGckGyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGQ3ODNjOTMtZjczOC00YWZlLWE2NDktYjdiYWNjOGNkYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1NzjyDofvtRo1ZlKmQIlIWwJxk3R1boq/S2 BnczpVumh39VMUxi+QHy29CQOM32dIDv+RNNGMy2preMjmvRJ+CrUgQCpXK5Ihi6 pItyI82o/piAt4YFpu5L4hfBUc8czmApLKrKxkhSYRgekVrI56sVOdGSR8n6+sog QqN0jHb6CNyeYx7zGuq4tsV5GXw3O9znPh1vHkVygnuHl9Xidz61nlh6mTIscAFU 5RZN3PEgCLk6t1M59unkmK/ymoxdMIR72jS9SNL2tzgcfqLMy6B6tj/igoMgMPlw QFOVr/6DAw9FF2pcquitQ9+Ee0q2hClbmFRJL3GigklMkH82RwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGWMgHYQHQkYDH6FPVUWXzOTlcZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvNTFjODAwMWEtMTI3OS0z NGI3LTg3Y2UtMjU2MjVlNjkxMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApnowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVj6GEYahvvNa2/InUJQmR5CpQMYVMTZBXoHvzgNzsd1OH9CExBEQJTdN uCpigXB8dWN2L0Ls8XvCi1f8ext0Ms1dtVpusZKbJbYfH6jTIQnFduVVajrFcrFd gDnixNp0pdhgpltOcjzEs+hMWF4Jl5uFmCL4ZRNGkHIUBZQg4GAp36OmecNIVzvW qX/aEsO8E8/qQGHCt6h/cOCIWhasVdo73+KU24tXRd6iIjMwjLqr9U0jKdvV4I9X oQ1EqpPZk9vSwirl7RbMqUthjFyKFzbxWfdvfPuB07Fg+rpwEV0v9ReKEFRT22ag 9gGKrFhpz6X8qP9ETYhumCAVyL8GEQ== -----END CERTIFICATE-----Generated at Tue Nov 4 09:49:27 2025 by rpki-client