$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: DfDyuPkSrXvzuzzvvLQKi9LI1KN2koniYe1HMEi20qE= Subject key identifier: 57:35:07:4C:37:A5:CA:39:55:45:FB:14:7B:1D:9F:95:99:6A:F7:83 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F4328584B6D2C9020EE41059BAC20A5F8 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:90:20:ee:41:05:9b:ac:20:a5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=438847c4-df40-4ddd-b8dc-a544973a835e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:02:e0:89:cf:d2:f7:67:91:e0:8b:39:96: 2c:c9:c1:33:57:af:20:25:8b:f5:40:e9:c1:0e:00: c1:1a:64:eb:0c:06:66:ea:a1:34:c3:3b:eb:92:b2: 44:82:db:cb:e9:14:31:b7:35:22:18:db:aa:7d:91: 21:e2:1b:82:3e:6c:02:a9:45:ff:1f:56:04:7a:2d: b8:fa:62:01:49:91:08:d5:72:2e:5a:f0:b8:a7:24: 95:83:df:57:10:5d:ca:2a:50:cf:e5:f5:4b:8d:d0: 81:10:32:c2:d5:47:07:ca:18:e2:40:54:99:b7:79: 80:cb:e9:ee:c9:a2:aa:a9:2e:bc:cf:1b:a1:da:31: 7c:28:da:ba:84:8a:57:19:db:3e:e4:c7:53:53:12: f8:7b:09:c0:b2:80:be:4c:ce:3b:14:9a:9e:70:40: bd:c4:0e:6f:7c:4e:75:d2:27:d9:10:b1:bb:b0:ff: ea:b0:23:a2:45:2a:20:30:fa:95:8b:5f:7e:10:2f: fc:f6:80:0a:5e:f3:ed:5d:94:37:8a:cd:1c:9d:70: 0a:b7:5a:f0:03:16:2c:35:49:8b:92:41:d6:69:04: b6:2c:03:1a:d9:57:80:d6:de:64:d5:cd:d2:2e:80: f7:a0:76:50:2e:d9:e9:f9:bf:1a:85:04:36:04:f2: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:35:07:4C:37:A5:CA:39:55:45:FB:14:7B:1D:9F:95:99:6A:F7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:91:2e:71:d5:8e:4f:d0:ca:8e:84:99:5c:ee:79:2d:5d:48: 68:b0:57:55:64:95:30:6f:5f:40:e2:2f:9c:ac:6d:3d:fa:b8: aa:3c:7a:c5:37:73:9e:eb:7b:ee:b0:8e:73:45:b5:12:d4:47: f4:77:65:7f:85:5d:13:40:f7:1d:9d:79:40:18:0e:e4:10:b5: 53:da:94:ad:03:0f:e0:6a:4f:9c:05:08:85:de:cc:8f:c9:76: 75:9f:69:21:e8:4b:b5:61:8d:55:db:14:95:a1:a6:fb:cb:78: e1:4e:fb:60:3f:91:ab:41:fa:03:1e:1b:33:14:8d:0a:51:27: b6:6d:dc:e4:77:f5:a6:98:1c:33:b4:ad:84:6b:9e:98:bb:82: f9:87:ab:09:13:e9:0d:b6:8b:51:2a:22:a6:a7:e2:63:2c:3c: a1:1b:0e:a9:fc:8e:95:e7:38:ca:0e:69:54:6b:b5:69:44:85: 9e:db:31:22:8f:7a:32:9e:14:8f:d7:b8:c0:20:88:ac:4d:33: 9b:5c:97:3a:27:5b:79:2b:6c:e1:8e:b7:07:22:3d:20:c9:7f: d4:0c:7f:84:3d:df:e3:0c:ab:75:a9:62:fd:08:d1:ae:6c:50: 14:21:2d:ec:c1:96:4d:f9:9b:e8:b1:fb:16:f5:2f:da:55:2e: e2:35:d5:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJAg7kEFm6wgpfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NDM4ODQ3YzQtZGY0MC00ZGRkLWI4ZGMtYTU0NDk3M2E4MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXgC4InP0vdnkeCLOZYsycEzV68gJYv1QOnB DgDBGmTrDAZm6qE0wzvrkrJEgtvL6RQxtzUiGNuqfZEh4huCPmwCqUX/H1YEei24 +mIBSZEI1XIuWvC4pySVg99XEF3KKlDP5fVLjdCBEDLC1UcHyhjiQFSZt3mAy+nu yaKqqS68zxuh2jF8KNq6hIpXGds+5MdTUxL4ewnAsoC+TM47FJqecEC9xA5vfE51 0ifZELG7sP/qsCOiRSogMPqVi19+EC/89oAKXvPtXZQ3is0cnXAKt1rwAxYsNUmL kkHWaQS2LAMa2VeA1t5k1c3SLoD3oHZQLtnp+b8ahQQ2BPIeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc1B0w3pco5VUX7FHsdn5WZaveDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuRLnHVjk/Qyo6EmVzueS1dSGiwV1VklTBvX0DiL5ysbT36uKo8esU3 c57re+6wjnNFtRLUR/R3ZX+FXRNA9x2deUAYDuQQtVPalK0DD+BqT5wFCIXezI/J dnWfaSHoS7VhjVXbFJWhpvvLeOFO+2A/katB+gMeGzMUjQpRJ7Zt3OR39aaYHDO0 rYRrnpi7gvmHqwkT6Q22i1EqIqan4mMsPKEbDqn8jpXnOMoOaVRrtWlEhZ7bMSKP ejKeFI/XuMAgiKxNM5tclzonW3krbOGOtwciPSDJf9QMf4Q93+MMq3WpYv0I0a5s UBQhLezBlk35m+ix+xb1L9pVLuI11bs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:39 2025 by rpki-client