$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa File: e05ef529-0d11-3c74-8d7a-600d0f31de61.roa (raw, json) Hash identifier: b5gsRRrQAwPHlHSbhdre1B18llbcOyueeJWdkYmVRwc= Subject key identifier: 1E:68:20:55:06:58:7E:CE:B8:4E:7E:71:A7:C2:18:22:BD:29:CF:F8 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584BA93268ECCA9BDEA9DD73F640 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 5662 IP address blocks: 157.166.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:68:ec:ca:9b:de:a9:dd:73:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c79b1ea8-4b60-497c-a80e-dc6a728e4930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:d0:6e:5b:ca:26:c2:47:12:d4:35:4a:a7: 6d:ad:c5:e5:9f:d3:ec:29:57:b4:9f:a4:4e:b2:62: 9f:cd:82:2e:b3:a0:e2:67:7a:3e:49:30:71:63:60: 9f:e2:96:cf:6d:55:7c:f2:d1:e6:80:53:be:f3:9f: 91:e3:7a:d4:5b:85:dd:da:fc:9b:43:09:c6:b2:ef: ea:e1:61:4d:b1:12:45:6c:46:46:af:f4:d4:ef:03: 7d:ad:16:55:5b:90:bc:33:b6:32:f3:34:b5:08:83: 16:a3:b5:30:ec:d7:4c:55:25:c4:e8:f9:49:e8:17: da:b2:fa:d4:72:6d:32:73:21:86:9a:dd:47:b0:09: a0:04:a4:d5:62:11:3f:89:f4:ec:0e:41:c0:21:2b: 76:e7:74:f8:8e:85:77:be:73:a7:30:ec:5e:a9:3f: 05:58:80:f4:3d:e8:c7:91:8f:32:6f:74:b1:85:b6: 62:38:03:81:d6:ef:f7:5b:7c:d2:21:8c:f6:ce:d8: 73:2b:4a:8e:d1:6d:88:d1:61:2b:64:08:9b:d9:6a: 4d:99:7b:33:69:6b:f8:86:cb:de:e1:51:28:c3:ab: 1c:31:4f:2b:bf:27:c3:ba:27:dc:2b:8d:7e:8b:a3: 07:1e:2c:45:db:cd:e3:69:ee:41:a5:29:5d:b3:21: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:68:20:55:06:58:7E:CE:B8:4E:7E:71:A7:C2:18:22:BD:29:CF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/e05ef529-0d11-3c74-8d7a-600d0f31de61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ea:33:7c:3f:dd:97:43:18:fc:0a:28:2d:fd:d1:a3:42:ea: 3d:0c:d8:5a:81:6c:e1:eb:1b:09:14:bd:98:94:1b:ff:cc:53: 47:6d:64:91:bc:c1:81:20:82:8e:fc:fb:77:ac:07:03:7f:b8: cc:a7:61:4c:d0:46:38:83:26:6d:86:3f:ef:26:ed:89:3f:d4: 9b:bd:07:c4:d0:4b:74:93:11:97:cf:df:da:04:ef:70:21:40: d3:4e:3d:02:43:db:5a:72:50:0d:83:68:03:fe:29:e9:1e:50: 61:08:ab:58:71:0d:b5:1a:8f:1e:23:21:40:05:78:1d:e4:b8: da:79:9f:d4:dc:60:9a:00:78:f1:fd:46:f3:e5:10:3a:62:4b: 86:7c:67:27:fc:9a:f5:c3:cb:38:a9:89:29:34:33:de:80:05: 68:1b:34:f1:0c:be:c5:3b:b5:98:50:14:3c:3c:4f:7a:bd:f1: 55:6c:87:0b:94:f6:86:37:83:87:ba:0b:e9:c7:d9:83:49:1f: e6:ee:7c:4e:45:f9:6b:c9:c1:a6:16:4d:02:78:0a:ea:36:66: cb:19:a0:7f:a5:81:24:79:ce:4e:3d:cc:b9:36:8c:ad:89:22: ef:f9:4c:c7:67:1e:4a:d0:29:7e:0e:e0:5a:ef:e3:4c:10:fa: ee:0d:90:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmjsypveqd1z9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Yzc5YjFlYTgtNGI2MC00OTdjLWE4MGUtZGM2YTcyOGU0OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1LQblvKJsJHEtQ1SqdtrcXln9PsKVe0n6RO smKfzYIus6DiZ3o+STBxY2Cf4pbPbVV88tHmgFO+85+R43rUW4Xd2vybQwnGsu/q 4WFNsRJFbEZGr/TU7wN9rRZVW5C8M7Yy8zS1CIMWo7Uw7NdMVSXE6PlJ6BfasvrU cm0ycyGGmt1HsAmgBKTVYhE/ifTsDkHAISt253T4joV3vnOnMOxeqT8FWID0PejH kY8yb3SxhbZiOAOB1u/3W3zSIYz2zthzK0qO0W2I0WErZAib2WpNmXszaWv4hsve 4VEow6scMU8rvyfDuifcK41+i6MHHixF283jae5BpSldsyHZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5oIFUGWH7OuE5+cafCGCK9Kc/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvZTA1ZWY1MjktMGQxMS0z Yzc0LThkN2EtNjAwZDBmMzFkZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnaa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnqM3w/3ZdDGPwKKC390aNC6j0M2FqBbOHrGwkUvZiUG//MU0dtZJG8 wYEggo78+3esBwN/uMynYUzQRjiDJm2GP+8m7Yk/1Ju9B8TQS3STEZfP39oE73Ah QNNOPQJD21pyUA2DaAP+KekeUGEIq1hxDbUajx4jIUAFeB3kuNp5n9TcYJoAePH9 RvPlEDpiS4Z8Zyf8mvXDyzipiSk0M96ABWgbNPEMvsU7tZhQFDw8T3q98VVshwuU 9oY3g4e6C+nH2YNJH+bufE5F+WvJwaYWTQJ4Cuo2ZssZoH+lgSR5zk49zLk2jK2J Iu/5TMdnHkrQKX4O4Frv40wQ+u4NkOE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:10 2025 by rpki-client