$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/843f386c-bb92-3f54-8bbe-0da7ec22da44.roa File: 843f386c-bb92-3f54-8bbe-0da7ec22da44.roa (raw, json) Hash identifier: /NWrESHc07RXMnwB1hrhcSkxT4Ka+PE5wXBY39empFo= Subject key identifier: 66:2B:93:3A:11:19:E7:48:5C:B1:DC:28:D0:FA:0C:DE:6A:52:94:44 Certificate issuer: /CN=534fe87f-16d4-4637-8a54-569383f5ef1b Certificate serial: 010D0C9F4328584BACC8AAE91D539F835D4FD800 Authority key identifier: 16:9E:81:7A:C9:66:CA:1C:52:EC:0F:2C:62:EB:37:23:56:A3:63:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/843f386c-bb92-3f54-8bbe-0da7ec22da44.roa Signing time: Tue 28 Oct 2025 19:51:03 +0000 ROA not before: Tue 28 Oct 2025 19:51:03 +0000 ROA not after: Mon 26 Jan 2026 20:51:03 +0000 asID: 8075 IP address blocks: 170.75.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/534fe87f-16d4-4637-8a54-569383f5ef1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/534fe87f-16d4-4637-8a54-569383f5ef1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ac:c8:aa:e9:1d:53:9f:83:5d:4f:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=534fe87f-16d4-4637-8a54-569383f5ef1b Validity Not Before: Oct 28 19:51:03 2025 GMT Not After : Jan 26 20:51:03 2026 GMT Subject: CN=3453d62a-0f6f-4339-94a1-534276c516b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:60:43:35:e4:58:10:53:a0:27:dc:73:a2: 4a:b4:b0:dc:53:32:29:4f:ac:e5:e5:14:ce:8d:30: d0:27:0a:e1:c1:8c:ca:0a:a7:ff:05:fc:65:94:00: ab:d8:af:d5:a2:4f:e9:3a:a0:6f:e5:bc:43:8d:70: 37:77:90:10:c5:2e:bd:0e:f4:9e:d6:90:94:be:29: a4:68:48:dd:75:6a:e1:9f:48:61:79:26:bc:df:e4: ed:55:9f:ed:94:ff:5d:b7:74:c6:5b:3a:bc:16:89: e4:98:4c:1d:0e:a7:81:1b:94:3a:a5:e8:ca:e7:53: 4b:ef:41:90:f2:97:52:a0:fc:5a:2e:84:18:31:52: a0:c4:c3:d7:44:0c:e9:ac:bf:65:62:cc:b2:b2:6b: 78:ef:bd:e9:c4:06:03:de:6a:18:8a:81:69:62:fe: ea:99:65:d9:34:fe:ec:b9:2c:4b:ea:15:b9:8c:b8: 3c:7c:0e:4a:53:5f:98:c6:b9:70:77:2f:f1:01:48: 1c:b7:1a:fb:1c:8e:c3:c0:20:a8:a4:35:52:e9:75: d3:2d:3f:4c:f3:3b:f6:11:1f:5f:21:a9:95:d5:37: 56:09:a7:b0:3b:72:b3:b3:7d:c8:15:f9:2f:45:40: 1c:d4:67:37:29:41:c5:ab:9f:fe:c0:4e:ab:f4:1f: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:93:3A:11:19:E7:48:5C:B1:DC:28:D0:FA:0C:DE:6A:52:94:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/843f386c-bb92-3f54-8bbe-0da7ec22da44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b/534fe87f-16d4-4637-8a54-569383f5ef1b.crl X509v3 Authority Key Identifier: keyid:16:9E:81:7A:C9:66:CA:1C:52:EC:0F:2C:62:EB:37:23:56:A3:63:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/534fe87f-16d4-4637-8a54-569383f5ef1b.cer sbgp-ipAddrBlock: critical IPv4: 170.75.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c8:52:f6:dd:33:81:40:43:ee:1d:b5:4d:13:b4:00:30:96: b0:c1:4c:db:c1:4c:d5:e6:a4:5d:fa:9d:0d:d1:bd:a4:cd:2d: 9c:b2:5f:f9:9c:4e:8a:ab:2f:8a:00:32:95:91:54:98:63:85: 37:cd:8e:de:fb:b8:c5:09:56:3b:19:e2:f6:a8:44:6a:c8:0e: e6:c5:2c:8a:4f:44:e1:4e:8e:d7:0d:fd:5a:c1:0f:b4:ae:c8: 24:9d:d6:75:75:27:f4:79:53:62:d6:6c:80:1b:14:83:fa:17: 40:cc:0c:98:87:08:2e:80:16:8a:1c:e0:b3:ae:52:dc:c3:fd: 03:d4:69:a8:e5:a9:75:9f:ec:41:7c:fd:18:3a:21:41:5f:b5: 54:17:30:2c:15:01:d0:cf:6b:cd:f9:de:30:c1:69:6b:50:b2: 4d:ae:32:f9:7e:1c:03:d3:6e:8a:01:71:44:40:be:9b:14:df: ed:ba:37:e4:f0:6d:34:1e:8e:46:72:10:f5:90:98:5b:3c:9d: be:23:71:37:ed:c7:cc:10:03:fc:ad:77:28:c6:29:d1:97:9b: 1c:60:cd:87:fe:e8:ff:fe:ba:46:38:6c:e5:d2:51:90:d6:60: 5d:93:fd:f8:a6:4e:d3:8b:ba:98:58:ad:8c:68:1a:31:4b:3d: e2:da:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEusyKrpHVOfg11P2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTM0ZmU4N2YtMTZkNC00NjM3LThhNTQtNTY5MzgzZjVl ZjFiMB4XDTI1MTAyODE5NTEwM1oXDTI2MDEyNjIwNTEwM1owLzEtMCsGA1UEAxMk MzQ1M2Q2MmEtMGY2Zi00MzM5LTk0YTEtNTM0Mjc2YzUxNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp9gQzXkWBBToCfcc6JKtLDcUzIpT6zl5RTO jTDQJwrhwYzKCqf/BfxllACr2K/Vok/pOqBv5bxDjXA3d5AQxS69DvSe1pCUvimk aEjddWrhn0hheSa83+TtVZ/tlP9dt3TGWzq8FonkmEwdDqeBG5Q6pejK51NL70GQ 8pdSoPxaLoQYMVKgxMPXRAzprL9lYsyysmt4773pxAYD3moYioFpYv7qmWXZNP7s uSxL6hW5jLg8fA5KU1+Yxrlwdy/xAUgctxr7HI7DwCCopDVS6XXTLT9M8zv2ER9f IamV1TdWCaewO3Kzs33IFfkvRUAc1Gc3KUHFq5/+wE6r9B9/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYrkzoRGedIXLHcKND6DN5qUpREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81MzRm ZTg3Zi0xNmQ0LTQ2MzctOGE1NC01NjkzODNmNWVmMWIvODQzZjM4NmMtYmI5Mi0z ZjU0LThiYmUtMGRhN2VjMjJkYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTM0ZmU4N2YtMTZkNC00NjM3LThh NTQtNTY5MzgzZjVlZjFiLzUzNGZlODdmLTE2ZDQtNDYzNy04YTU0LTU2OTM4M2Y1 ZWYxYi5jcmwwHwYDVR0jBBgwFoAUFp6BeslmyhxS7A8sYus3I1ajY7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81MzRmZTg3Zi0xNmQ0LTQ2MzctOGE1NC01Njkz ODNmNWVmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqkuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHIUvbdM4FAQ+4dtU0TtAAwlrDBTNvBTNXmpF36nQ3RvaTNLZyyX/mc ToqrL4oAMpWRVJhjhTfNjt77uMUJVjsZ4vaoRGrIDubFLIpPROFOjtcN/VrBD7Su yCSd1nV1J/R5U2LWbIAbFIP6F0DMDJiHCC6AFooc4LOuUtzD/QPUaajlqXWf7EF8 /Rg6IUFftVQXMCwVAdDPa8353jDBaWtQsk2uMvl+HAPTbooBcURAvpsU3+26N+Tw bTQejkZyEPWQmFs8nb4jcTftx8wQA/ytdyjGKdGXmxxgzYf+6P/+ukY4bOXSUZDW YF2T/fimTtOLuphYrYxoGjFLPeLaojg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:13:52 2025 by rpki-client