$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa File: 4f857680-6d43-32b8-9d58-a4dfa622acf3.roa (raw, json) Hash identifier: 9USAt+pEq989yLPCDrqqAwuIwxIN7KgFCn84uUzHZ+E= Subject key identifier: C4:0F:EA:F2:39:56:6D:13:E5:1B:BA:D4:DC:1B:B4:DC:EC:BC:7A:A1 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584BA39CFC9FE9A4400D4C5FAB80 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 66.178.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fc:9f:e9:a4:40:0d:4c:5f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a9867663-02cb-4506-9005-09a6b9215ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:9e:4f:5a:fd:62:76:ca:d9:f3:87:79:58: 4b:45:f6:b5:82:0f:1b:4e:f2:9d:ec:05:87:cd:db: 6a:1c:dd:16:af:2e:7f:4b:0d:bf:30:1b:3e:4d:e2: 42:2d:21:d7:be:15:05:a2:ce:ad:7f:e7:ce:27:66: 4b:00:55:44:b7:5c:f5:6f:e9:fb:53:1a:81:9c:c0: 33:73:d8:88:b9:04:e4:0d:b0:de:87:66:83:b7:bd: 0d:c6:06:34:25:3f:50:74:6f:f8:45:b2:b5:74:e1: 71:8f:7d:9c:72:f9:a2:f1:29:c6:b0:d5:c7:fb:d5: cb:a2:59:10:40:99:b1:ea:3d:26:6e:18:fb:4d:10: 68:a8:19:86:aa:56:50:35:7a:7a:5e:73:cc:14:d2: 10:40:07:5c:0a:b2:f9:11:46:39:a9:aa:a1:db:9a: 00:0e:74:53:9a:88:4b:76:15:29:37:ca:8a:0d:3b: a2:ce:93:37:4d:71:b4:4b:29:65:3f:2e:2e:fe:d8: a6:d5:70:2e:43:0e:0b:c9:74:1b:67:68:13:b0:43: dc:8d:63:38:17:26:6b:b1:e2:e7:7f:b6:1f:ea:de: 9e:65:9f:bb:83:5a:70:ce:d3:f6:11:56:a8:72:bb: 26:fd:f5:2b:47:5f:6d:b9:e1:2a:1d:1b:38:6b:71: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0F:EA:F2:39:56:6D:13:E5:1B:BA:D4:DC:1B:B4:DC:EC:BC:7A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/4f857680-6d43-32b8-9d58-a4dfa622acf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:10:2e:71:f7:1e:53:32:cb:98:65:d1:ea:fc:73:6e:b0:9b: 7b:5b:79:09:94:0e:82:b1:2c:dc:42:b4:c9:6d:43:f6:ae:cb: c3:c8:8f:44:44:0e:a6:47:cd:31:36:93:ff:b0:f2:f5:11:cc: d2:3d:7b:07:33:54:92:d7:32:d4:dd:a3:0c:cd:bc:49:e7:87: 0d:ea:b4:1a:41:ab:63:50:68:a0:9f:23:e8:7e:37:a8:f8:cf: 6b:cf:18:c3:7a:aa:df:97:29:49:64:66:69:7d:b4:f3:03:89: b0:7a:90:e8:f4:4f:24:83:c4:3e:8f:19:7e:bd:78:07:e4:2c: 3f:ad:30:ef:79:4b:4c:c1:cc:7e:60:78:2c:2b:e6:3c:b5:f1: d2:5a:e6:0c:1e:22:08:fe:40:53:d8:c9:e9:7d:4d:61:5f:56: cb:81:ed:da:b3:ef:d1:a4:b2:c5:5c:84:b4:71:9f:5a:fc:a6: e9:bf:ab:32:51:57:83:69:f6:4a:b5:3b:a1:d0:bc:66:68:af: d5:a7:d2:91:fa:5f:7d:d5:65:ea:20:8a:b0:a9:77:c9:6d:cf: 82:30:cd:f6:52:8c:ac:44:80:93:2e:c3:11:77:66:3e:ee:e6: 17:b3:bf:bc:3c:d9:52:10:48:77:03:66:00:8f:48:6e:6d:72: 52:81:f6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPyf6aRADUxfq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTk4Njc2NjMtMDJjYi00NTA2LTkwMDUtMDlhNmI5MjE1YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZieT1r9YnbK2fOHeVhLRfa1gg8bTvKd7AWH zdtqHN0Wry5/Sw2/MBs+TeJCLSHXvhUFos6tf+fOJ2ZLAFVEt1z1b+n7UxqBnMAz c9iIuQTkDbDeh2aDt70NxgY0JT9QdG/4RbK1dOFxj32ccvmi8SnGsNXH+9XLolkQ QJmx6j0mbhj7TRBoqBmGqlZQNXp6XnPMFNIQQAdcCrL5EUY5qaqh25oADnRTmohL dhUpN8qKDTuizpM3TXG0SyllPy4u/tim1XAuQw4LyXQbZ2gTsEPcjWM4FyZrseLn f7Yf6t6eZZ+7g1pwztP2EVaocrsm/fUrR19tueEqHRs4a3FLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQP6vI5Vm0T5Ru61NwbtNzsvHqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvNGY4NTc2ODAtNmQ0My0z MmI4LTlkNTgtYTRkZmE2MjJhY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYQLnH3HlMyy5hl0er8c26wm3tbeQmUDoKxLNxCtMltQ/auy8PIj0RE DqZHzTE2k/+w8vURzNI9ewczVJLXMtTdowzNvEnnhw3qtBpBq2NQaKCfI+h+N6j4 z2vPGMN6qt+XKUlkZml9tPMDibB6kOj0TySDxD6PGX69eAfkLD+tMO95S0zBzH5g eCwr5jy18dJa5gweIgj+QFPYyel9TWFfVsuB7dqz79GkssVchLRxn1r8pum/qzJR V4Np9kq1O6HQvGZor9Wn0pH6X33VZeogirCpd8ltz4IwzfZSjKxEgJMuwxF3Zj7u 5hezv7w82VIQSHcDZgCPSG5tclKB9vs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:42 2025 by rpki-client