$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa File: 1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa (raw, json) Hash identifier: 27ZJaW2IAkZPWkzNZ3CHrUqyipeMVsxBVifsCydlp9w= Subject key identifier: 60:7F:BC:10:6B:62:F1:AD:84:46:A5:E7:09:3F:E8:1C:5B:18:5E:34 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584BB88D1E241BFC5C232D9977A9 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 5662 IP address blocks: 157.166.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:1e:24:1b:fc:5c:23:2d:99:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=743f2782-c91a-4c9b-91c2-4ed408af88a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:52:f6:84:87:97:c7:22:50:55:0f:9b:f3: e0:22:bc:83:a8:e3:80:cd:63:58:9d:5b:85:ae:e0: 2a:33:f2:10:25:0d:55:7f:e7:fa:8a:5b:f6:63:5f: 34:1c:13:ce:70:08:17:31:86:8f:02:81:24:44:fc: 02:27:d3:cf:99:5b:4e:4f:d1:37:45:9b:94:38:2f: 9a:1e:ec:b0:50:a5:37:3d:82:83:3e:48:d5:c6:fe: 10:8e:e6:39:18:29:e3:7f:4d:40:d9:18:d5:8e:08: e1:3f:17:8e:4f:45:eb:66:8f:91:ed:72:d7:39:93: e6:97:32:97:82:c8:67:a2:dd:80:46:6a:3c:21:12: b9:ef:99:b1:e5:bb:7e:0c:c9:05:64:fa:72:d4:95: 26:58:62:b6:ec:ae:c6:eb:2d:5a:8b:35:e8:bf:76: b9:d8:f9:30:86:89:ec:8a:9f:bd:35:60:37:bc:19: 9a:0d:84:80:e3:93:45:a5:8a:6a:e0:5c:fd:fa:dc: 40:00:2e:cf:0a:5f:f3:ab:46:99:66:b7:77:6e:43: 7c:e9:ee:03:d9:0c:a2:b4:79:61:81:d8:70:f7:18: 3a:b9:54:f1:76:af:1c:50:4b:05:12:4c:67:3f:d7: 1f:51:1f:19:ee:c9:7e:e5:de:d2:12:c8:94:1c:95: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:BC:10:6B:62:F1:AD:84:46:A5:E7:09:3F:E8:1C:5B:18:5E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fd:fb:35:f2:5f:da:74:9f:58:77:cb:ae:49:30:11:1f:8e: 74:14:62:42:d4:40:6e:d2:f9:4c:07:9c:2e:51:e7:70:e9:9b: 6f:ed:72:74:00:2c:15:f6:e2:ca:e6:9b:49:8a:8f:99:8c:ea: b5:4d:d6:cc:76:64:d5:d6:59:90:df:5e:f5:b9:33:ee:e8:0d: c9:db:4e:8d:44:3f:f8:9b:92:e7:f9:d8:3c:6f:09:86:43:de: c1:80:76:99:15:01:79:b9:34:d9:31:e1:c9:15:16:0b:a3:dc: 8b:35:49:fb:1b:fb:7f:7f:f8:b2:11:5b:ac:c2:d5:ca:fe:f8: 5a:06:3e:86:30:96:f8:6b:1c:75:08:48:f0:14:1d:81:f8:6b: b1:c9:36:63:2d:bc:ea:1a:9c:16:fe:05:8c:fd:29:21:50:18: 71:e0:f7:d2:ad:58:26:f4:7e:b5:aa:c7:4c:60:66:91:43:cf: 38:d0:6e:d5:29:fb:7b:48:0c:33:36:1c:11:d4:59:8d:b9:01: 3f:9a:03:3a:19:8e:aa:1c:42:47:67:b9:5c:fd:0f:0d:4f:58: e3:bf:cb:0b:99:90:3e:cb:66:7d:01:fe:74:c1:c8:f4:01:1b: ba:54:d1:9a:bd:11:77:09:b9:66:b7:91:ce:19:c1:5e:03:e2: 54:cd:cf:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jR4kG/xcIy2Zd6kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzQzZjI3ODItYzkxYS00YzliLTkxYzItNGVkNDA4YWY4OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxhS9oSHl8ciUFUPm/PgIryDqOOAzWNYnVuF ruAqM/IQJQ1Vf+f6ilv2Y180HBPOcAgXMYaPAoEkRPwCJ9PPmVtOT9E3RZuUOC+a HuywUKU3PYKDPkjVxv4QjuY5GCnjf01A2RjVjgjhPxeOT0XrZo+R7XLXOZPmlzKX gshnot2ARmo8IRK575mx5bt+DMkFZPpy1JUmWGK27K7G6y1aizXov3a52Pkwhons ip+9NWA3vBmaDYSA45NFpYpq4Fz9+txAAC7PCl/zq0aZZrd3bkN86e4D2QyitHlh gdhw9xg6uVTxdq8cUEsFEkxnP9cfUR8Z7sl+5d7SEsiUHJXNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB/vBBrYvGthEal5wk/6BxbGF40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMWVlNjhkYjAtNzM0Zi0z MWQ2LThhYzUtYjVmZDk3MzcyMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnabRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv9+zXyX9p0n1h3y65JMBEfjnQUYkLUQG7S+UwHnC5R53Dpm2/tcnQA LBX24srmm0mKj5mM6rVN1sx2ZNXWWZDfXvW5M+7oDcnbTo1EP/ibkuf52DxvCYZD 3sGAdpkVAXm5NNkx4ckVFguj3Is1Sfsb+39/+LIRW6zC1cr++FoGPoYwlvhrHHUI SPAUHYH4a7HJNmMtvOoanBb+BYz9KSFQGHHg99KtWCb0frWqx0xgZpFDzzjQbtUp +3tIDDM2HBHUWY25AT+aAzoZjqocQkdnuVz9Dw1PWOO/ywuZkD7LZn0B/nTByPQB G7pU0Zq9EXcJuWa3kc4ZwV4D4lTNzxM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:31 2025 by rpki-client