$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa File: e289bffb-83d4-374a-b0ae-085e30cda0d5.roa (raw, json) Hash identifier: Jd8/K9Fxmxe4H0nu8zdD3mpYJFDOmZMhIlaD4495axc= Subject key identifier: 0B:A6:15:9A:1C:EB:A5:8D:4F:5B:7F:FA:C8:51:A3:E9:4F:CE:38:DA Certificate issuer: /CN=7db346f0-17b1-4b0d-942b-291f70e18910 Certificate serial: 010D0C9F4328584B1C36B92BD206D277B8FAC580 Authority key identifier: 4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 40317 IP address blocks: 67.221.128.0/20 maxlen: 24 68.168.192.0/20 maxlen: 24 69.46.48.0/20 maxlen: 24 162.248.236.0/22 maxlen: 24 167.89.128.0/17 maxlen: 24 192.170.130.0/23 maxlen: 24 199.58.76.0/22 maxlen: 24 199.96.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:b9:2b:d2:06:d2:77:b8:fa:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db346f0-17b1-4b0d-942b-291f70e18910 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3fc27ec0-f1c3-48d8-8dfe-0e3d1ddfd0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:64:57:2e:40:54:fb:84:da:6a:15:42:4b: 5f:8a:29:2c:ec:f5:2f:91:9f:0c:7e:ac:e2:f4:6a: 0f:85:23:4d:80:91:7a:68:0f:10:75:e0:21:df:7c: 45:f7:90:85:ee:7b:24:12:dd:31:dc:eb:fb:56:0e: d2:d0:52:8d:53:a6:fb:1c:83:d5:0e:ce:1b:4a:93: 6f:cf:fa:56:12:01:6b:b6:f1:7b:f5:7a:40:08:01: 4e:51:a0:29:f2:fd:e9:8b:f2:ba:69:1a:76:62:38: 98:bb:30:41:c3:04:70:18:73:2e:8f:32:ec:e2:27: c9:a7:c0:b5:48:54:64:15:e5:c5:e1:60:02:49:91: a8:16:78:d3:50:1d:df:4f:67:9d:bc:b0:6a:1e:51: 30:d3:48:69:6f:93:7e:ef:ec:c6:e0:84:b7:2c:68: 8b:af:05:67:5f:6e:e0:8b:bd:57:74:ac:02:03:98: b7:f0:01:46:e6:ee:95:bd:63:89:e4:e3:83:92:dc: cf:4c:53:a2:04:ff:87:b2:46:21:26:49:22:83:1f: 23:45:bf:6d:53:e8:42:50:29:f7:b5:84:1d:63:3d: 52:84:47:46:e9:02:bb:09:23:2d:d5:c9:cd:a2:48: c0:b0:9c:1f:3a:a9:b2:25:7d:6c:97:f9:65:72:7f: 8b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A6:15:9A:1C:EB:A5:8D:4F:5B:7F:FA:C8:51:A3:E9:4F:CE:38:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/e289bffb-83d4-374a-b0ae-085e30cda0d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910/7db346f0-17b1-4b0d-942b-291f70e18910.crl X509v3 Authority Key Identifier: keyid:4D:B3:C5:05:6C:88:DD:EA:E8:26:74:75:4A:EA:75:38:D5:7A:4B:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db346f0-17b1-4b0d-942b-291f70e18910.cer sbgp-ipAddrBlock: critical IPv4: 67.221.128.0/20 68.168.192.0/20 69.46.48.0/20 162.248.236.0/22 167.89.128.0/17 192.170.130.0/23 199.58.76.0/22 199.96.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e5:15:ae:43:24:77:ae:fa:a9:01:1b:a3:59:7b:0a:b3:5e: 6e:1c:3e:97:74:8b:4d:cc:d5:58:ac:24:b8:1c:6d:14:00:e7: 06:f7:5d:9d:9c:fe:b1:d9:a0:14:22:c7:8b:59:ed:aa:f7:66: ce:3b:3a:e4:0f:50:50:15:bc:ee:93:9f:eb:89:93:49:d0:d5: 9b:1f:8d:fd:bd:cd:9c:cb:b0:0d:57:5a:92:b0:ae:93:d1:11: 18:66:36:08:41:0d:f3:db:63:37:0a:b4:ad:f3:49:c9:56:7a: bb:dd:ca:64:6d:25:62:de:12:29:8a:86:7a:74:17:b2:0f:4a: d9:95:28:3f:ef:b6:45:65:2e:d5:f2:4a:a6:94:df:a4:1b:d6: 06:b3:f0:03:c4:87:01:18:8d:69:38:af:da:eb:30:7b:0a:3a: 40:a4:4d:d2:f1:2a:ca:75:85:3a:2e:d2:e9:18:de:81:d0:a8: b5:c2:88:98:d2:76:db:b1:73:b9:d7:66:34:82:94:ed:1b:a6: c5:7b:3d:97:23:0c:f1:87:e4:1d:8a:dc:f1:cc:0b:21:ac:41: d0:a0:fa:12:d7:25:ce:09:07:2a:4a:5e:de:45:24:31:db:b4: c9:dc:7f:1f:eb:84:6c:23:c4:f6:75:be:2a:3e:e5:de:a7:89: 70:55:bd:16 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEscNrkr0gbSd7j6xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RiMzQ2ZjAtMTdiMS00YjBkLTk0MmItMjkxZjcwZTE4 OTEwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2ZjMjdlYzAtZjFjMy00OGQ4LThkZmUtMGUzZDFkZGZkMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWlkVy5AVPuE2moVQktfiiks7PUvkZ8Mfqzi 9GoPhSNNgJF6aA8QdeAh33xF95CF7nskEt0x3Ov7Vg7S0FKNU6b7HIPVDs4bSpNv z/pWEgFrtvF79XpACAFOUaAp8v3pi/K6aRp2YjiYuzBBwwRwGHMujzLs4ifJp8C1 SFRkFeXF4WACSZGoFnjTUB3fT2edvLBqHlEw00hpb5N+7+zG4IS3LGiLrwVnX27g i71XdKwCA5i38AFG5u6VvWOJ5OODktzPTFOiBP+HskYhJkkigx8jRb9tU+hCUCn3 tYQdYz1ShEdG6QK7CSMt1cnNokjAsJwfOqmyJX1sl/llcn+L+QIDAQABo4IDfzCC A3swHQYDVR0OBBYEFAumFZoc66WNT1t/+shRo+lPzjjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIz NDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFmNzBlMTg5MTAvZTI4OWJmZmItODNkNC0z NzRhLWIwYWUtMDg1ZTMwY2RhMGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2RiMzQ2ZjAtMTdiMS00YjBkLTk0 MmItMjkxZjcwZTE4OTEwLzdkYjM0NmYwLTE3YjEtNGIwZC05NDJiLTI5MWY3MGUx ODkxMC5jcmwwHwYDVR0jBBgwFoAUTbPFBWyI3eroJnR1Sup1ONV6S1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZGIzNDZmMC0xN2IxLTRiMGQtOTQyYi0yOTFm NzBlMTg5MTAuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEQ92AAwQE RKjAAwQERS4wAwQCovjsAwQHp1mAAwQBwKqCAwQCxzpMAwQCx2D0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAvlFa5DJHeu+qkBG6NZewqzXm4cPpd0i03M1VisJLgcbRQA5wb3XZ2c/rHZoBQi x4tZ7ar3Zs47OuQPUFAVvO6Tn+uJk0nQ1Zsfjf29zZzLsA1XWpKwrpPRERhmNghB DfPbYzcKtK3zSclWervdymRtJWLeEimKhnp0F7IPStmVKD/vtkVlLtXySqaU36Qb 1gaz8APEhwEYjWk4r9rrMHsKOkCkTdLxKsp1hTou0ukY3oHQqLXCiJjSdtuxc7nX ZjSClO0bpsV7PZcjDPGH5B2K3PHMCyGsQdCg+hLXJc4JBypKXt5FJDHbtMncfx/r hGwjxPZ1vio+5d6niXBVvRY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:28 2025 by rpki-client