$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa File: dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa (raw, json) Hash identifier: tlRtyi12MPRtmj0qf4LMCbUd/Y+ORKZyeFxz/TMGrj8= Subject key identifier: DD:36:B1:07:EE:4C:35:52:AC:5C:66:5A:50:F0:63:F5:36:18:23:14 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BAEC7BCE9D49C7478C0CB0E40 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 27235 IP address blocks: 65.120.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:bc:e9:d4:9c:74:78:c0:cb:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=1e33970d-d0aa-4295-88fa-fbd5975e2531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:13:8b:05:20:93:c5:7a:70:0d:14:12:cf:79: 1c:79:5c:40:a9:30:80:1f:36:7c:78:1c:73:8a:35: 69:d3:8b:32:ab:9a:c0:7a:06:b8:cb:f5:ce:09:59: dd:79:74:0a:39:a5:87:e5:28:29:80:ae:1e:23:05: 7e:ec:9d:82:de:55:59:c6:56:6d:8b:89:c9:fb:f0: 80:22:a8:39:1c:55:9d:8f:70:21:80:a0:c5:da:e1: 6f:34:39:6e:57:32:f6:5d:69:15:48:84:bf:8e:09: ae:f0:c0:c8:58:85:77:55:72:b9:2b:e2:60:3a:99: 41:34:54:9e:97:4d:38:c6:ef:66:6f:e6:06:dc:bc: 91:ea:a9:b6:f3:97:8f:2d:2a:36:60:ed:77:45:78: c7:e7:fa:a7:69:75:18:be:da:bb:d1:83:6e:ef:3a: 80:ed:31:1c:ad:2f:0b:b1:ac:00:31:58:57:ab:f7: d1:d2:75:a2:68:ed:85:db:65:7f:80:9a:0a:58:a7: 3c:ba:cb:3f:cd:3a:3d:67:09:70:10:7a:0b:35:7a: cf:17:ea:d1:a4:8a:dd:23:14:96:a5:1b:20:ac:b5: 2b:6a:6a:5e:f7:6c:75:bb:8c:a0:7e:a9:0d:ec:3e: 1a:9c:1b:f8:ea:98:29:67:1d:93:1d:1f:d4:d8:b0: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:36:B1:07:EE:4C:35:52:AC:5C:66:5A:50:F0:63:F5:36:18:23:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/dfe0ec3c-14b1-3bdf-9f25-6dce751de0c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.120.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:eb:2a:d3:e8:9a:9d:7d:1d:32:0c:83:6a:59:28:4a:b2:43: 50:b7:84:bc:bc:6a:10:dd:27:a0:a8:2c:80:af:f3:b4:6c:de: 77:14:c3:68:1a:8d:aa:f5:4e:8e:e8:af:37:dc:20:d5:37:82: 77:09:18:08:f5:a7:68:0c:f5:17:3e:5e:9b:40:8b:56:4e:e1: a5:f4:52:5a:32:eb:f7:c6:17:9a:4e:3e:d8:05:03:01:27:e5: 87:e0:7f:be:9e:ee:4c:99:42:b9:18:35:ef:9a:a5:74:95:d6: d0:e9:50:bd:d2:5b:a1:d8:4a:46:ea:3b:e3:85:88:e0:e6:e5: 73:96:16:72:63:92:05:80:96:c9:86:d7:59:fe:71:10:55:a9: 73:e7:70:2f:df:89:12:2a:4b:7f:ae:74:09:be:c8:f2:62:42: 4f:ce:7c:ea:c2:06:c4:46:0d:dd:79:fb:12:d6:72:c3:44:7b: f9:72:80:70:33:d8:ba:f7:fd:ac:a9:70:51:b4:28:6d:25:80: a6:92:50:85:f0:45:94:d3:3a:bf:50:4a:51:48:3d:31:bc:f2: fb:1b:9e:27:65:a3:1f:b4:48:9d:31:a7:3e:21:7b:4e:08:c2: 75:b4:fc:bc:f9:29:70:48:09:19:76:67:ed:f0:f9:3a:7a:c1: 20:fb:c1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7zp1Jx0eMDLDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MWUzMzk3MGQtZDBhYS00Mjk1LTg4ZmEtZmJkNTk3NWUyNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhOLBSCTxXpwDRQSz3kceVxAqTCAHzZ8eBxz ijVp04syq5rAega4y/XOCVndeXQKOaWH5SgpgK4eIwV+7J2C3lVZxlZti4nJ+/CA Iqg5HFWdj3AhgKDF2uFvNDluVzL2XWkVSIS/jgmu8MDIWIV3VXK5K+JgOplBNFSe l004xu9mb+YG3LyR6qm285ePLSo2YO13RXjH5/qnaXUYvtq70YNu7zqA7TEcrS8L sawAMVhXq/fR0nWiaO2F22V/gJoKWKc8uss/zTo9ZwlwEHoLNXrPF+rRpIrdIxSW pRsgrLUrampe92x1u4ygfqkN7D4anBv46pgpZx2THR/U2LCJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN02sQfuTDVSrFxmWlDwY/U2GCMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZGZlMGVjM2MtMTRiMS0z YmRmLTlmMjUtNmRjZTc1MWRlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQXgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTrKtPomp19HTIMg2pZKEqyQ1C3hLy8ahDdJ6CoLICv87Rs3ncUw2ga jar1To7orzfcINU3gncJGAj1p2gM9Rc+XptAi1ZO4aX0Uloy6/fGF5pOPtgFAwEn 5Yfgf76e7kyZQrkYNe+apXSV1tDpUL3SW6HYSkbqO+OFiODm5XOWFnJjkgWAlsmG 11n+cRBVqXPncC/fiRIqS3+udAm+yPJiQk/OfOrCBsRGDd15+xLWcsNEe/lygHAz 2Lr3/aypcFG0KG0lgKaSUIXwRZTTOr9QSlFIPTG88vsbnidlox+0SJ0xpz4he04I wnW0/Lz5KXBICRl2Z+3w+Tp6wSD7wTo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:44 2025 by rpki-client