$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa File: 2540c3d9-443e-336a-8fd3-fe341f8f707f.roa (raw, json) Hash identifier: k2j7KWYHD79vRL84IphGF/2f+YkcNEWIQS05zo/FFug= Subject key identifier: 12:8A:55:90:9F:14:7C:31:F4:0C:FD:EA:77:8E:31:B1:C4:15:E2:D1 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584B21CC1B47084C099145E84800 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 157.166.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1b:47:08:4c:09:91:45:e8:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=c17dcc4d-b77f-4d53-bf35-755773b232e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:ed:72:04:2a:c6:d4:c6:63:8c:46:3c:65: 9a:51:13:cb:fb:74:d6:aa:23:90:15:f3:7b:1f:6d: 2d:80:c4:07:bb:11:16:6b:c6:86:24:e4:28:66:3c: a8:bb:69:6f:87:19:08:6d:41:28:3a:34:08:8e:7a: 51:07:11:be:a3:52:94:53:fb:91:aa:5f:30:9f:a2: 2a:bc:f9:f0:19:0e:ea:48:62:7e:8f:a6:ee:5a:12: 15:43:1d:15:18:a4:e7:20:dd:38:ab:ba:59:71:bf: 79:41:e7:a6:60:6e:a4:cd:d6:19:76:eb:be:03:de: 39:fd:99:d6:3f:18:e6:1b:67:7c:eb:e6:89:f6:e4: a8:1c:46:9f:1d:79:80:fa:89:0b:34:c1:a1:4f:ca: bf:52:19:ed:33:53:82:46:2b:bd:56:2d:d8:b3:d9: a4:4a:21:7f:a9:57:c2:22:ed:00:3a:ca:f9:4a:1b: 77:8e:e3:88:a7:0b:57:bf:bf:f1:f6:61:41:84:8b: 98:2c:aa:8f:43:04:2f:c2:24:12:4f:97:54:9a:0f: e7:45:35:0a:7f:0d:47:26:39:6f:cc:41:08:0b:09: e4:84:32:d2:b2:32:f2:b4:be:cc:c1:be:49:7d:26: 61:5d:aa:19:50:fb:92:0c:fa:07:a9:39:2a:9b:6f: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:55:90:9F:14:7C:31:F4:0C:FD:EA:77:8E:31:B1:C4:15:E2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/2540c3d9-443e-336a-8fd3-fe341f8f707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:cb:72:b9:57:a5:8d:f8:4e:23:77:71:be:19:d7:06:97:74: 7a:a2:7b:5f:23:19:28:cd:da:d1:0d:cd:23:74:7a:ba:cd:e2: 1f:c4:b2:83:ff:bc:c5:fe:ff:ee:c9:46:a1:a6:74:1e:31:1d: 76:a3:33:07:ce:cc:49:4d:7c:26:ac:77:5f:0d:64:b4:3c:a4: d3:76:b0:ba:2e:0a:ae:1e:b8:a0:d9:65:3f:2a:f8:19:e6:2c: 82:8e:5a:b7:8c:ab:15:e7:25:d7:0b:b6:58:bf:b9:3d:1d:dc: 0d:1d:9d:50:a5:52:84:fa:5e:95:a3:2c:a6:c4:61:b3:42:6e: fe:15:3c:be:a8:22:1b:65:d2:4b:da:a8:10:95:a5:91:a9:41: 53:d3:47:bd:b3:bc:54:98:9c:8e:05:cd:e0:fb:5b:dc:ef:88: a4:e6:c1:f1:45:a4:87:3a:bc:a8:85:1a:f6:ba:02:73:6d:4a: 15:72:2d:f3:40:b4:7d:94:87:fc:02:21:c5:f1:89:bc:e7:fc: 5f:6c:1c:8f:11:ae:9c:a0:6d:a1:aa:4c:11:9f:70:f9:09:7a: 85:d8:65:5a:f9:e7:b1:cb:7d:de:01:e1:47:bd:30:2a:46:43: 2f:f0:39:8e:c5:ef:f4:e0:e5:b0:e1:36:90:04:5b:c0:0d:33: 94:27:aa:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBtHCEwJkUXoSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YzE3ZGNjNGQtYjc3Zi00ZDUzLWJmMzUtNzU1NzczYjIzMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33tcgQqxtTGY4xGPGWaURPL+3TWqiOQFfN7 H20tgMQHuxEWa8aGJOQoZjyou2lvhxkIbUEoOjQIjnpRBxG+o1KUU/uRql8wn6Iq vPnwGQ7qSGJ+j6buWhIVQx0VGKTnIN04q7pZcb95QeemYG6kzdYZduu+A945/ZnW PxjmG2d86+aJ9uSoHEafHXmA+okLNMGhT8q/UhntM1OCRiu9Vi3Ys9mkSiF/qVfC Iu0AOsr5Sht3juOIpwtXv7/x9mFBhIuYLKqPQwQvwiQST5dUmg/nRTUKfw1HJjlv zEEICwnkhDLSsjLytL7Mwb5JfSZhXaoZUPuSDPoHqTkqm29IOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKKVZCfFHwx9Az96neOMbHEFeLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMjU0MGMzZDktNDQzZS0z MzZhLThmZDMtZmUzNDFmOGY3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnaaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjLcrlXpY34TiN3cb4Z1waXdHqie18jGSjN2tENzSN0errN4h/EsoP/ vMX+/+7JRqGmdB4xHXajMwfOzElNfCasd18NZLQ8pNN2sLouCq4euKDZZT8q+Bnm LIKOWreMqxXnJdcLtli/uT0d3A0dnVClUoT6XpWjLKbEYbNCbv4VPL6oIhtl0kva qBCVpZGpQVPTR72zvFSYnI4FzeD7W9zviKTmwfFFpIc6vKiFGva6AnNtShVyLfNA tH2Uh/wCIcXxibzn/F9sHI8RrpygbaGqTBGfcPkJeoXYZVr557HLfd4B4Ue9MCpG Qy/wOY7F7/Tg5bDhNpAEW8ANM5QnqvA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:20 2025 by rpki-client