$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa File: 66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa (raw, json) Hash identifier: XzDIZbrbTGgwLnufBGPZ6m5KTj+nL63Y8wDeSyqO1jo= Subject key identifier: 5E:32:AC:F2:38:83:D8:A5:E5:8F:97:33:31:95:4D:3D:F8:81:3A:FE Certificate issuer: /CN=26dda032-79f9-423e-9994-33fdb1cd44db Certificate serial: 010D0C9F4328584B99D78B598F672C5B38AD3960 Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 162.253.3.0/24 maxlen: 24 162.253.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8b:59:8f:67:2c:5b:38:ad:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=687f5342-7494-45eb-9199-a757be137264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:b9:78:c8:38:eb:b4:02:7d:fd:3d:05:64: 6e:bf:e9:bc:23:e9:a1:c7:2a:e9:3a:e3:b8:a4:7f: 17:f7:84:89:7c:28:51:ff:de:ee:c5:9c:71:a3:0f: 92:6a:ec:8c:aa:fb:6f:b9:a5:5a:fd:04:b3:eb:00: 1c:b8:fb:21:31:34:18:33:80:98:94:cb:79:3b:23: 46:41:2b:1c:5a:9e:c1:22:bb:76:11:fc:fd:9a:e1: 99:10:29:03:89:51:ed:36:a3:71:11:7c:d6:62:80: 6f:d6:53:1c:5b:3f:a9:87:ad:09:b6:85:e3:78:47: e3:c6:49:f4:ec:68:ad:85:d7:66:91:14:ba:bd:fe: da:c0:8f:aa:73:5a:32:de:3f:f1:33:6e:39:b8:91: 84:bd:1c:ba:fa:a5:b3:07:e6:c5:8e:21:e2:bc:bc: 56:86:3d:3c:00:06:7a:93:65:d9:90:7f:4a:7e:66: 3f:ff:c2:a6:df:58:df:fe:78:34:5d:c7:73:e8:61: bf:7b:2e:af:37:a3:93:6b:d0:59:8c:a4:fa:db:af: d9:7d:11:87:34:fc:39:61:cd:d7:7b:8e:73:de:fa: 84:9f:9a:be:fc:78:d7:92:4e:80:15:de:f3:83:89: 70:61:f3:7f:b7:fb:62:35:40:ef:98:31:0b:f8:f8: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:AC:F2:38:83:D8:A5:E5:8F:97:33:31:95:4D:3D:F8:81:3A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/66f1f6be-4fa7-308b-a8ad-a44280aa94e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl X509v3 Authority Key Identifier: keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer sbgp-ipAddrBlock: critical IPv4: 162.253.3.0-162.253.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:61:8c:d4:27:e9:cb:27:10:05:62:42:b1:57:eb:71:d2:65: c2:a3:87:81:ea:ed:e3:35:dd:dd:63:2d:f4:35:db:2a:22:73: 9d:f7:27:3b:7e:06:26:cb:44:20:91:95:3d:3c:95:18:35:fa: 4a:7a:ac:7d:90:87:f4:a8:fb:26:c0:ad:e9:16:40:ed:eb:a5: 36:99:3e:50:f8:ce:4e:83:47:66:dc:ef:d6:6d:90:41:20:93: 20:96:2f:80:a9:95:1c:b1:c7:2f:d4:5f:5d:52:96:ab:f9:29: 96:71:91:e6:d0:cd:75:91:df:74:a4:fa:ab:e4:f7:fe:3f:38: d9:90:b0:9c:3d:3c:59:fa:c9:f4:49:8f:8b:58:2f:14:1f:3f: 54:b6:a7:60:35:26:2f:6f:96:a6:8a:c1:70:1f:e1:d8:8b:6b: f7:af:88:fb:67:29:8b:93:e2:c0:50:c3:51:be:d4:7c:8d:cc: 54:5a:24:6a:dd:df:37:01:78:85:9e:64:e1:c6:a7:cd:a4:3c: d2:7c:20:0e:99:61:41:63:cd:a5:3b:ff:f9:36:79:2b:29:35: bc:b5:85:e4:25:69:76:7f:44:64:34:93:a4:b7:71:aa:29:d7: 3d:e1:85:39:fd:1f:32:20:5d:41:72:30:09:f3:ff:0c:2c:f0: aa:4f:4f:40 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuZ14tZj2csWzitOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjZkZGEwMzItNzlmOS00MjNlLTk5OTQtMzNmZGIxY2Q0 NGRiMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Njg3ZjUzNDItNzQ5NC00NWViLTkxOTktYTc1N2JlMTM3MjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4i5eMg467QCff09BWRuv+m8I+mhxyrpOuO4 pH8X94SJfChR/97uxZxxow+SauyMqvtvuaVa/QSz6wAcuPshMTQYM4CYlMt5OyNG QSscWp7BIrt2Efz9muGZECkDiVHtNqNxEXzWYoBv1lMcWz+ph60JtoXjeEfjxkn0 7GithddmkRS6vf7awI+qc1oy3j/xM245uJGEvRy6+qWzB+bFjiHivLxWhj08AAZ6 k2XZkH9KfmY//8Km31jf/ng0Xcdz6GG/ey6vN6OTa9BZjKT626/ZfRGHNPw5Yc3X e45z3vqEn5q+/HjXkk6AFd7zg4lwYfN/t/tiNUDvmDEL+PjJNwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF4yrPI4g9il5Y+XMzGVTT34gTr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRk YTAzMi03OWY5LTQyM2UtOTk5NC0zM2ZkYjFjZDQ0ZGIvNjZmMWY2YmUtNGZhNy0z MDhiLWE4YWQtYTQ0MjgwYWE5NGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjZkZGEwMzItNzlmOS00MjNlLTk5 OTQtMzNmZGIxY2Q0NGRiLzI2ZGRhMDMyLTc5ZjktNDIzZS05OTk0LTMzZmRiMWNk NDRkYi5jcmwwHwYDVR0jBBgwFoAUlOxHNSwx7ERB/+Hh13pxBU8VHbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNmRkYTAzMi03OWY5LTQyM2UtOTk5NC0zM2Zk YjFjZDQ0ZGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACi/QMD BACi/QQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAc2GM1CfpyycQBWJCsVfrcdJlwqOHgert4zXd3WMt9DXb KiJznfcnO34GJstEIJGVPTyVGDX6SnqsfZCH9Kj7JsCt6RZA7eulNpk+UPjOToNH Ztzv1m2QQSCTIJYvgKmVHLHHL9RfXVKWq/kplnGR5tDNdZHfdKT6q+T3/j842ZCw nD08WfrJ9EmPi1gvFB8/VLanYDUmL2+WporBcB/h2Itr96+I+2cpi5PiwFDDUb7U fI3MVFokat3fNwF4hZ5k4canzaQ80nwgDplhQWPNpTv/+TZ5Kyk1vLWF5CVpdn9E ZDSTpLdxqinXPeGFOf0fMiBdQXIwCfP/DCzwqk9PQA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:20 2025 by rpki-client