$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa File: aefb5437-6034-3391-9329-ca5ca351ea5d.roa (raw, json) Hash identifier: YfEzSILi0AR86cYd+SmW0g0XcL4EqSXyRbBye/OcbvI= Subject key identifier: 91:2C:BF:88:23:C0:F3:25:32:76:21:E6:57:8D:8D:FA:9A:43:27:D1 Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584B99D7917479FE5AF732D6BA00 Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 3737 IP address blocks: 66.152.128.0/19 maxlen: 24 207.44.0.0/17 maxlen: 24 216.144.160.0/19 maxlen: 24 2606:9400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:91:74:79:fe:5a:f7:32:d6:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e7da9d31-badc-4008-b67d-8e5ae318f797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:39:cb:89:aa:28:e6:7c:48:b5:08:0c:36: 91:4b:7e:94:9a:c3:cf:fe:0c:36:7e:c9:54:60:54: 39:dd:b8:db:9c:c6:d5:af:2e:3f:38:98:ba:84:d1: 5f:f9:c7:f6:7c:e8:b9:2f:e6:19:00:4c:aa:04:d7: cd:91:5b:12:cd:34:80:a3:2c:02:48:b7:50:cd:9d: c8:9d:78:b3:c7:df:9e:3f:64:06:cd:11:8e:82:66: e5:4f:b8:fc:68:5e:0e:05:e9:68:d9:43:d2:83:2a: dd:e4:f3:d6:e2:7a:17:26:9a:e3:31:77:35:12:f5: b0:e6:57:f2:9a:86:b7:fa:16:25:7d:80:fb:90:5f: 0d:a7:e8:b9:22:d5:62:3f:f4:33:5b:cc:93:ea:62: 90:ce:16:32:46:b2:fd:c8:f0:28:93:ee:db:5c:43: 83:4c:f4:1e:bf:d9:59:13:29:89:93:88:7d:d2:e2: 70:8c:47:f4:94:6f:03:98:a1:ae:37:c9:2f:43:e2: 33:7a:0a:90:e4:7d:9f:60:0c:46:83:59:2e:24:69: 50:22:90:41:38:cb:38:ce:d3:4d:28:83:5a:11:e5: 1b:21:79:34:c9:ae:cd:a5:a1:62:6c:2c:fa:45:cf: a8:c8:23:d4:7c:15:e4:b6:0a:c3:0e:87:9e:ba:6f: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2C:BF:88:23:C0:F3:25:32:76:21:E6:57:8D:8D:FA:9A:43:27:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/aefb5437-6034-3391-9329-ca5ca351ea5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: 66.152.128.0/19 207.44.0.0/17 216.144.160.0/19 IPv6: 2606:9400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a3:64:45:0d:73:6a:9d:09:5c:a5:d8:a3:da:dc:62:fd:d2: 9c:c7:e9:da:ac:e0:0c:94:97:a2:e8:8e:e9:22:cc:be:a7:fc: b7:83:55:02:8d:e3:91:fe:64:aa:7d:47:2c:3f:4e:8c:02:c1: 64:18:01:c6:b8:4c:b3:d8:63:71:a7:37:93:09:26:df:e2:31: 15:11:fb:3d:61:68:75:8c:70:af:ae:e5:ea:55:9e:7f:80:a0: 48:90:64:07:be:bb:cb:48:14:b8:b7:f2:3c:a9:2c:53:ee:d0: d3:cd:f0:7a:33:cf:dc:3c:b8:a2:f4:22:ab:c4:0b:40:ac:d1: 83:b3:4b:62:d7:cc:ae:ae:49:fa:95:87:7a:7b:3e:aa:7c:a8: 2e:dc:25:d8:11:af:d8:4d:01:e2:59:c1:59:a7:bb:e5:74:8d: 3e:0a:d2:bd:fe:7e:fd:21:ec:1a:ef:93:61:1d:7d:40:a2:74: 0e:16:06:75:6c:8f:ec:46:a8:6a:0b:7d:43:50:61:59:71:ba: 5b:b8:c3:f6:95:8c:9d:d7:fd:89:37:5b:79:74:e3:df:f5:6d: bd:0d:91:23:60:48:a3:da:08:04:14:21:76:de:9d:2c:53:0f: c7:8b:f9:3b:52:a1:3e:ae:d7:8e:04:36:e9:7e:68:fd:4e:de: 31:82:09:dd -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEuZ15F0ef5a9zLWugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTdkYTlkMzEtYmFkYy00MDA4LWI2N2QtOGU1YWUzMThmNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJg5y4mqKOZ8SLUIDDaRS36UmsPP/gw2fslU YFQ53bjbnMbVry4/OJi6hNFf+cf2fOi5L+YZAEyqBNfNkVsSzTSAoywCSLdQzZ3I nXizx9+eP2QGzRGOgmblT7j8aF4OBelo2UPSgyrd5PPW4noXJprjMXc1EvWw5lfy moa3+hYlfYD7kF8Np+i5ItViP/QzW8yT6mKQzhYyRrL9yPAok+7bXEODTPQev9lZ EymJk4h90uJwjEf0lG8DmKGuN8kvQ+IzegqQ5H2fYAxGg1kuJGlQIpBBOMs4ztNN KINaEeUbIXk0ya7NpaFibCz6Rc+oyCPUfBXktgrDDoeeum/EWwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJEsv4gjwPMlMnYh5leNjfqaQyfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvYWVmYjU0MzctNjAzNC0z MzkxLTkzMjktY2E1Y2EzNTFlYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFQpiAAwQH zywAAwQF2JCgMA0EAgACMAcDBQAmBpQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJCjZEUNc2qdCVyl2KPa 3GL90pzH6dqs4AyUl6LojukizL6n/LeDVQKN45H+ZKp9Ryw/TowCwWQYAca4TLPY Y3GnN5MJJt/iMRUR+z1haHWMcK+u5epVnn+AoEiQZAe+u8tIFLi38jypLFPu0NPN 8Hozz9w8uKL0IqvEC0Cs0YOzS2LXzK6uSfqVh3p7Pqp8qC7cJdgRr9hNAeJZwVmn u+V0jT4K0r3+fv0h7Brvk2EdfUCidA4WBnVsj+xGqGoLfUNQYVlxulu4w/aVjJ3X /Yk3W3l049/1bb0NkSNgSKPaCAQUIXbenSxTD8eL+TtSoT6u144ENul+aP1O3jGC Cd0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:51 2025 by rpki-client