$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa File: f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa (raw, json) Hash identifier: bEiNBSfBtP6GCpagpqz1UNp4cLDTjMtZuCvg/X0N7w8= Subject key identifier: C1:18:F9:3E:33:1F:D8:27:3C:4B:1C:6A:54:CD:55:46:E2:25:AB:13 Certificate issuer: /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Certificate serial: 010D0C9F4328584BB02D013291046AFE591B2D00 Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13506 IP address blocks: 166.123.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:01:32:91:04:6a:fe:59:1b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=5d3c911f-e976-4901-8183-ac66226908d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:cc:33:b2:ed:11:8d:6c:fd:3d:3b:41:76: a5:47:3a:33:02:cd:6d:e3:e4:26:9b:2d:7b:2e:5e: c6:fe:99:79:b9:4b:08:f7:df:01:2e:72:32:95:58: b7:6f:b2:06:58:73:ab:36:84:c5:5d:ed:e6:c5:06: 39:c5:e0:f1:a1:c9:5c:79:61:12:ee:28:21:8e:49: 97:11:03:47:ed:87:19:38:e6:d6:e6:09:6a:84:7e: f3:eb:b6:52:43:e2:ec:a4:9d:39:4a:e9:ea:96:cd: 7a:6d:8f:cb:37:12:fb:29:3c:9b:04:2d:11:6e:f2: 87:68:cf:5b:a6:0f:3b:d7:00:2b:8e:6a:23:d6:2f: 9a:18:cb:ad:50:86:72:71:3d:1c:8b:09:6f:46:b7: d4:39:8f:dc:a3:17:db:dd:bc:b4:0e:67:37:dd:36: e6:2e:be:e6:73:80:c2:06:2a:4f:78:cd:c1:59:d9: 6c:33:40:bf:65:99:4a:c6:9e:89:aa:27:a4:1c:b2: 0a:41:88:37:df:aa:2f:2c:13:5b:af:9d:0e:2d:e1: b0:2c:7c:9d:25:bc:6d:5d:47:98:ae:72:80:02:2f: f4:65:79:f9:e9:96:77:ec:25:73:f9:d4:db:18:25: 07:25:50:fd:8d:d1:f3:e4:34:c0:fc:c1:7a:56:18: 99:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:18:F9:3E:33:1F:D8:27:3C:4B:1C:6A:54:CD:55:46:E2:25:AB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl X509v3 Authority Key Identifier: keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer sbgp-ipAddrBlock: critical IPv4: 166.123.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:48:1d:22:a1:07:5d:32:c5:31:94:3a:b8:1a:7d:57:ea:b5: c5:3a:55:54:29:e6:be:f6:46:61:3e:3d:65:44:bf:31:d0:a5: a6:1a:94:ff:a5:d6:ed:7e:50:58:aa:9e:3b:27:cf:2d:5a:9c: 44:24:03:5e:15:1a:9c:91:f9:ff:70:40:20:c9:17:99:22:ed: 5a:34:7d:09:8f:40:1c:c5:ab:ea:33:34:b3:39:90:f8:b3:d6: d4:73:b2:e8:ed:36:0a:a3:d7:9e:bb:97:0d:f5:51:c3:ac:bc: 47:75:b3:2a:20:92:2f:4e:95:fd:98:4b:8f:f7:a9:54:82:18: ed:b1:f3:f9:a5:e6:bf:80:5d:b5:6c:d6:e0:9f:27:9d:10:fc: 65:33:01:cc:bb:9f:a7:9c:e3:c4:14:95:61:f3:09:a4:d7:6c: 5c:99:00:04:0f:4b:41:9a:20:94:1a:0b:67:7e:e8:a4:d8:ac: 14:2f:b0:e4:35:49:c5:4d:09:05:ca:9d:4d:19:5c:4b:af:73: be:c3:01:e9:ec:a8:65:e4:df:9e:e1:cb:94:78:cf:93:52:d7: fd:e3:16:ab:90:06:df:59:f8:d6:cf:0b:92:c1:c0:e6:ac:d4: b4:d6:a8:50:95:f3:3d:20:87:29:c2:67:1e:6a:ec:b7:2b:91: ce:d3:09:fe -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuwLQEykQRq/lkbLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz ZTNhMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NWQzYzkxMWYtZTk3Ni00OTAxLTgxODMtYWM2NjIyNjkwOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbnMM7LtEY1s/T07QXalRzozAs1t4+Qmmy17 Ll7G/pl5uUsI998BLnIylVi3b7IGWHOrNoTFXe3mxQY5xeDxoclceWES7ighjkmX EQNH7YcZOObW5glqhH7z67ZSQ+LspJ05Sunqls16bY/LNxL7KTybBC0RbvKHaM9b pg871wArjmoj1i+aGMutUIZycT0ciwlvRrfUOY/coxfb3by0Dmc33TbmLr7mc4DC BipPeM3BWdlsM0C/ZZlKxp6JqiekHLIKQYg336ovLBNbr50OLeGwLHydJbxtXUeY rnKAAi/0ZXn56ZZ37CVz+dTbGCUHJVD9jdHz5DTA/MF6VhiZowIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMEY+T4zH9gnPEscalTNVUbiJasTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvZjdkY2Q3MWQtY2NiNi0z Y2RhLWJjZWYtMjIzODllMzBlYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1 ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx MWQ0YzNlM2EuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApnswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADUgdIqEHXTLFMZQ6uBp9V+q1xTpVVCnmvvZGYT49ZUS/MdClphqU/6XW 7X5QWKqeOyfPLVqcRCQDXhUanJH5/3BAIMkXmSLtWjR9CY9AHMWr6jM0szmQ+LPW 1HOy6O02CqPXnruXDfVRw6y8R3WzKiCSL06V/ZhLj/epVIIY7bHz+aXmv4BdtWzW 4J8nnRD8ZTMBzLufp5zjxBSVYfMJpNdsXJkABA9LQZoglBoLZ37opNisFC+w5DVJ xU0JBcqdTRlcS69zvsMB6eyoZeTfnuHLlHjPk1LX/eMWq5AG31n41s8LksHA5qzU tNaoUJXzPSCHKcJnHmrstyuRztMJ/g== -----END CERTIFICATE-----Generated at Wed Nov 5 15:57:59 2025 by rpki-client