$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b2523ff-d444-3ca4-8847-76abef040d4d.roa File: 3b2523ff-d444-3ca4-8847-76abef040d4d.roa (raw, json) Hash identifier: D5dX4XQ7ilsLofbSnwftPeSoq3Z4NqVmmK6LodB81oc= Subject key identifier: A5:D3:BF:36:94:0A:FE:3A:15:CF:00:20:15:4E:4A:3A:09:F5:31:5A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DC9CC0CB362B7E3FAA380 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b2523ff-d444-3ca4-8847-76abef040d4d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 19115 IP address blocks: 170.151.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:c9:cc:0c:b3:62:b7:e3:fa:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b2d5ff30-013b-4e1d-83b1-f553e3fd9eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:5a:f1:29:66:a2:c2:8c:13:90:f8:b5:ea: 68:ce:08:21:6a:aa:43:b9:d2:e3:ea:52:8d:cf:12: 39:b4:bd:7e:b5:eb:bc:60:1e:48:8c:a5:02:f6:c9: 8f:2c:aa:79:0f:a5:5a:94:93:d4:4a:86:a4:24:a2: 2f:a3:49:53:97:5f:69:66:78:05:6a:08:16:62:97: 56:32:46:e7:42:71:72:f7:f5:34:94:0f:03:e2:54: 3e:03:40:b2:19:07:5b:79:83:25:f1:0b:a1:67:c6: a7:6b:1f:87:ac:19:80:5b:5e:e0:fd:04:c1:bb:e4: e4:11:e2:9d:a0:37:d2:7b:71:e8:77:9f:2d:58:73: 14:84:f1:60:2f:80:f0:5e:e2:be:40:28:fe:7e:a4: 39:e7:7d:36:ef:0f:e0:35:6c:bf:3e:39:89:fb:29: 11:f9:f1:9e:68:b5:3a:2e:a3:38:e8:d1:e1:d0:d2: a3:b6:a3:43:7d:57:c2:08:00:44:df:8c:7e:31:a6: e0:3b:0b:f2:48:a5:da:f0:71:15:c1:93:a9:b1:23: 1d:b9:b0:b6:fd:53:a7:62:29:d6:72:25:6a:5b:21: be:0a:cb:72:70:4d:b6:f6:08:6e:39:1a:ff:15:88: 57:04:a0:50:31:60:c5:96:62:ff:61:a8:8b:e9:29: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D3:BF:36:94:0A:FE:3A:15:CF:00:20:15:4E:4A:3A:09:F5:31:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3b2523ff-d444-3ca4-8847-76abef040d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 170.151.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:db:0a:e0:7e:5b:11:af:8e:1e:d5:65:5e:10:21:6b:90:7a: 4b:f6:45:d8:2b:7a:a2:51:af:ab:2c:59:7d:ad:72:fb:23:b0: 31:fd:1f:19:6a:c0:65:aa:56:84:b6:c6:aa:2f:76:2f:28:a2: a6:4d:ac:99:be:f5:dc:35:e8:87:e5:ab:57:d1:d6:80:50:53: 00:a1:d1:96:2b:2a:21:0b:df:6a:13:0b:81:00:d8:dc:9a:4b: 59:9c:d5:3e:b2:f8:36:bf:64:c8:56:db:33:05:50:32:e4:9c: 67:68:a2:5b:03:a1:f8:33:3d:fc:1b:95:d8:02:a1:e4:37:a1: 9f:a1:e8:1f:f4:fa:d8:54:2c:c4:be:1b:9c:6e:f7:a3:95:a1: 74:84:aa:59:0e:b7:bd:70:a1:92:c9:f5:f1:28:09:95:b4:26: 31:a0:eb:62:62:a0:2f:a0:64:ef:78:31:ee:9e:31:2e:1b:c8: c0:c0:38:9a:ef:0a:00:6f:ae:0d:f3:5d:3e:ad:eb:5e:0c:ba: df:ce:61:3d:a9:e7:46:2f:38:c1:75:f9:0a:16:6d:59:43:e8: 6f:05:48:ec:ee:4b:a5:63:45:2a:88:2a:e6:ea:df:ef:2f:5a: 10:0e:8d:9c:0e:1e:2f:cd:aa:9f:1a:4a:a5:4b:45:e1:9e:c8: 6b:1e:ff:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHcnMDLNit+P6o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YjJkNWZmMzAtMDEzYi00ZTFkLTgzYjEtZjU1M2UzZmQ5ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieda8SlmosKME5D4tepozgghaqpDudLj6lKN zxI5tL1+teu8YB5IjKUC9smPLKp5D6ValJPUSoakJKIvo0lTl19pZngFaggWYpdW MkbnQnFy9/U0lA8D4lQ+A0CyGQdbeYMl8QuhZ8anax+HrBmAW17g/QTBu+TkEeKd oDfSe3Hod58tWHMUhPFgL4DwXuK+QCj+fqQ553027w/gNWy/PjmJ+ykR+fGeaLU6 LqM46NHh0NKjtqNDfVfCCABE34x+MabgOwvySKXa8HEVwZOpsSMdubC2/VOnYinW ciVqWyG+CstycE229ghuORr/FYhXBKBQMWDFlmL/YaiL6SmMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXTvzaUCv46Fc8AIBVOSjoJ9TFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2IyNTIzZmYtZDQ0NC0z Y2E0LTg4NDctNzZhYmVmMDQwZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqpcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrbCuB+WxGvjh7VZV4QIWuQekv2RdgreqJRr6ssWX2tcvsjsDH9Hxlq wGWqVoS2xqovdi8ooqZNrJm+9dw16Iflq1fR1oBQUwCh0ZYrKiEL32oTC4EA2Nya S1mc1T6y+Da/ZMhW2zMFUDLknGdoolsDofgzPfwbldgCoeQ3oZ+h6B/0+thULMS+ G5xu96OVoXSEqlkOt71woZLJ9fEoCZW0JjGg62JioC+gZO94Me6eMS4byMDAOJrv CgBvrg3zXT6t614Mut/OYT2p50YvOMF1+QoWbVlD6G8FSOzuS6VjRSqIKubq3+8v WhAOjZwOHi/Nqp8aSqVLReGeyGse/1A= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:06 2025 by rpki-client