$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa File: 51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa (raw, json) Hash identifier: +mxZLTodsNhGqddkCo9R4uE8n7gWHf09WtuHiHa3wBE= Subject key identifier: 21:EE:96:49:0D:89:10:5B:B5:30:48:3F:FF:8A:B0:27:E0:45:2A:46 Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8 Certificate serial: 010D0C9F4328584BB2F7AE3AFAEBA19C002E1600 Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3561 IP address blocks: 64.29.68.0/22 maxlen: 24 64.29.72.0/22 maxlen: 24 64.29.76.0/24 maxlen: 24 64.29.80.0/23 maxlen: 24 64.29.84.0/22 maxlen: 24 64.29.89.0/24 maxlen: 24 64.29.93.0/24 maxlen: 24 64.29.94.0/24 maxlen: 24 66.180.130.0/23 maxlen: 24 66.180.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ae:3a:fa:eb:a1:9c:00:2e:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0bbd506f-958c-405a-9dae-7e2cf179fdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:e0:9e:ae:04:9f:0a:0f:89:70:8d:be:19: c5:5c:04:58:2b:92:6e:99:b1:03:dd:89:53:ed:fd: 05:ef:bf:42:2c:0c:89:51:33:41:f3:05:b2:ff:7f: 71:0e:d1:92:c7:5d:c2:3b:31:7e:d1:82:54:fc:d5: 75:27:c1:9f:13:00:08:85:58:ad:0a:a5:14:33:94: b5:29:22:e8:68:ee:bc:b3:c7:43:7d:83:43:9f:96: fc:05:be:c0:c7:c7:6b:3d:bb:4c:a4:ad:23:f0:68: e2:bb:89:4e:b6:44:17:8d:8d:ac:fe:6d:3a:7f:28: f7:0e:84:dc:73:97:72:d2:fb:6f:f3:1e:33:8b:21: e9:77:91:a9:bf:be:a7:23:44:5f:b6:70:51:06:7e: 92:9a:d9:63:7e:82:11:ae:d7:a6:90:b6:0e:28:e8: c8:3c:3b:32:a4:c2:08:7b:fb:da:7f:d3:72:34:7f: 52:12:eb:af:4f:53:13:78:be:46:17:68:e3:08:8b: a7:07:1b:9a:07:5f:67:68:2b:64:ba:e9:a1:27:90: a6:dd:8a:50:f8:11:58:c3:0f:75:ea:6f:7c:16:b2: ee:4a:f3:15:ed:6c:79:d1:f2:5c:42:50:96:5c:dc: 98:19:fb:4f:f8:e3:2a:e7:62:a6:6c:8d:3e:a8:05: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EE:96:49:0D:89:10:5B:B5:30:48:3F:FF:8A:B0:27:E0:45:2A:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/51a33aa9-ff0f-3bdc-8640-e1035ac63a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl X509v3 Authority Key Identifier: keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer sbgp-ipAddrBlock: critical IPv4: 64.29.68.0-64.29.76.255 64.29.80.0/23 64.29.84.0/22 64.29.89.0/24 64.29.93.0-64.29.94.255 66.180.130.0/23 66.180.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:90:bf:62:45:19:12:7b:04:31:28:c6:2d:14:42:dc:9b:13: a5:04:50:c2:a4:b0:08:a0:d1:d0:7f:ca:fb:88:65:d6:59:9b: a9:0b:2e:03:1f:f1:ef:35:02:5c:8e:58:74:15:09:a4:84:41: 5d:b9:05:26:c4:5f:c1:18:be:dc:a7:ea:0b:9a:1d:03:a9:9d: af:d0:84:42:0f:c4:f2:ba:0d:17:c5:e1:01:5c:fe:59:7d:c8: dd:b4:f0:fa:2d:fc:fb:77:41:68:a7:eb:53:b3:c7:8f:64:ac: 2e:b5:a5:35:44:60:17:3f:78:93:d2:9e:6a:66:83:5f:58:ea: 8a:2e:c8:4c:66:0a:bc:41:d9:81:d2:82:35:2c:18:78:e2:27: 9d:b7:6b:71:73:82:d8:1b:71:c9:50:97:f6:c4:15:a3:02:a8: 30:97:91:b3:6a:9f:15:13:cb:1a:e6:fd:e7:09:e3:7f:aa:23: a6:52:e8:40:06:79:ad:ae:f5:55:20:4b:0b:6e:f4:7b:6e:d2: d4:27:62:6f:61:b0:6e:07:c2:69:31:b2:f0:22:08:3a:23:36: 3c:75:3e:ed:51:ff:91:86:61:1c:c0:96:0a:a9:74:01:0a:b9: f8:5d:d7:b5:d0:11:78:d8:20:13:d5:bb:19:5b:66:14:35:df: bd:a9:51:70 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEuy9646+uuhnAAuFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1MzY3MDEtZTQwYy00MjBhLWFiZDAtOTkzYmY4ZTBl YWM4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGJiZDUwNmYtOTU4Yy00MDVhLTlkYWUtN2UyY2YxNzlmZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgITgnq4EnwoPiXCNvhnFXARYK5JumbED3YlT 7f0F779CLAyJUTNB8wWy/39xDtGSx13COzF+0YJU/NV1J8GfEwAIhVitCqUUM5S1 KSLoaO68s8dDfYNDn5b8Bb7Ax8drPbtMpK0j8Gjiu4lOtkQXjY2s/m06fyj3DoTc c5dy0vtv8x4ziyHpd5Gpv76nI0RftnBRBn6SmtljfoIRrtemkLYOKOjIPDsypMII e/vaf9NyNH9SEuuvT1MTeL5GF2jjCIunBxuaB19naCtkuumhJ5Cm3YpQ+BFYww91 6m98FrLuSvMV7Wx50fJcQlCWXNyYGftP+OMq52KmbI0+qAWs5wIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFCHulkkNiRBbtTBIP/+KsCfgRSpGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUz NjcwMS1lNDBjLTQyMGEtYWJkMC05OTNiZjhlMGVhYzgvNTFhMzNhYTktZmYwZi0z YmRjLTg2NDAtZTEwMzVhYzYzYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU1MzY3MDEtZTQwYy00MjBhLWFi ZDAtOTkzYmY4ZTBlYWM4LzFlNTM2NzAxLWU0MGMtNDIwYS1hYmQwLTk5M2JmOGUw ZWFjOC5jcmwwHwYDVR0jBBgwFoAUTOj0knFEJlIJQflQP4AuKyHOilswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTUzNjcwMS1lNDBjLTQyMGEtYWJkMC05OTNi ZjhlMGVhYzguY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAJAHUQD BABAHUwDBAFAHVADBAJAHVQDBABAHVkwDAMEAEAdXQMEAEAdXgMEAUK0ggMEAUK0 jjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAVkL9iRRkSewQxKMYtFELcmxOlBFDCpLAIoNHQf8r7iGXWWZup Cy4DH/HvNQJcjlh0FQmkhEFduQUmxF/BGL7cp+oLmh0DqZ2v0IRCD8Tyug0XxeEB XP5ZfcjdtPD6Lfz7d0Fop+tTs8ePZKwutaU1RGAXP3iT0p5qZoNfWOqKLshMZgq8 QdmB0oI1LBh44iedt2txc4LYG3HJUJf2xBWjAqgwl5Gzap8VE8sa5v3nCeN/qiOm UuhABnmtrvVVIEsLbvR7btLUJ2JvYbBuB8JpMbLwIgg6IzY8dT7tUf+RhmEcwJYK qXQBCrn4Xde10BF42CAT1bsZW2YUNd+9qVFw -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:56 2025 by rpki-client