$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa File: 211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa (raw, json) Hash identifier: /VQ6Xi+UEP52IXCtfd06JCE3qoAhm7C9tyf0C0HdcYU= Subject key identifier: 9E:4C:9B:16:BC:EE:F4:C9:8B:EC:A4:C3:94:FE:8F:90:99:04:16:5D Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F4328584B5B07489DBFED1B4713AC0C08 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 23265 IP address blocks: 64.185.96.0/19 maxlen: 24 72.10.0.0/19 maxlen: 24 206.126.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:48:9d:bf:ed:1b:47:13:ac:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=b5aa2846-795b-4941-a447-300ecd1fd8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:96:f5:34:16:d9:8b:ad:fc:be:ca:ca:e7: 39:88:bb:02:64:10:8d:9f:cc:32:ba:51:cd:53:8d: 4e:c7:e7:70:c0:5a:7d:75:53:08:b3:78:cc:b0:35: 58:2f:35:82:9b:8c:64:3d:b4:1c:6f:e2:48:a4:4b: 66:1b:e4:35:d0:7d:58:f6:07:96:4c:01:ce:44:24: 1a:0b:a8:f1:f2:92:f8:ea:80:24:d7:28:5e:0f:4a: 0f:4e:7e:b1:e0:e6:cb:b1:d8:be:48:69:6a:4f:93: 66:80:b8:b9:dc:8f:48:e9:3c:35:75:ef:8f:de:50: 8b:7d:9f:42:07:d9:55:21:ff:8f:da:ae:3b:37:92: 6f:72:34:e9:f6:18:72:02:0c:60:4a:e8:29:6f:e6: 7d:e0:77:f2:0d:04:3a:e1:f6:45:1f:df:13:f0:1e: f8:2e:67:fe:93:7c:fe:04:8c:61:fa:76:e8:cf:a9: 0a:68:13:b9:4a:7e:9d:00:c6:58:3f:55:68:f9:cb: bd:6e:19:5f:ac:c9:44:31:79:21:f2:1a:db:9a:cc: e6:68:02:99:34:72:67:3c:36:10:62:8d:d5:b7:e6: 54:48:f8:cd:87:f9:6a:c3:cc:ec:ba:51:6a:7c:db: f3:36:62:08:1a:96:cd:14:54:d1:1c:30:37:47:16: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:9B:16:BC:EE:F4:C9:8B:EC:A4:C3:94:FE:8F:90:99:04:16:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 64.185.96.0/19 72.10.0.0/19 206.126.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f8:b6:7d:b6:11:ca:18:d1:7e:fe:5b:db:66:cc:84:83:4e: a1:d5:cb:45:1d:84:e1:b4:05:0d:28:6f:29:1e:0f:ef:46:15: 44:71:fa:82:1f:01:05:b9:cd:0e:82:87:ba:3e:28:56:6a:9f: 1a:fa:d1:8c:b8:d8:dc:c2:83:08:09:6b:4b:ef:8c:9b:c3:7a: 29:cd:97:2b:c8:07:1a:13:e1:a0:b8:7c:0e:97:d4:fd:ff:4c: f4:79:d5:2c:ef:cb:20:55:fe:91:c0:df:31:ae:d2:74:f5:57: 70:53:9c:6d:2a:4d:4e:93:0f:06:ef:ee:6b:a0:4f:13:8d:42: 3a:54:5f:df:c1:d7:4d:2d:31:47:e5:a4:d6:18:e4:e1:69:79: 18:9d:5c:5b:29:0b:46:e2:35:ca:cc:05:60:9b:ba:60:8b:e5: 9e:06:c4:5e:0a:03:48:e5:fc:b8:b7:f6:d4:c4:41:b2:d5:73: ab:41:d6:52:81:10:ee:24:99:4d:47:63:26:a6:2d:bc:3d:db: 86:d7:45:f4:13:de:69:5d:10:fe:a5:90:db:06:69:7b:60:9c: 25:5a:8d:98:f1:4b:55:23:28:f5:4e:bb:95:84:b3:13:5f:91: 9b:b7:9b:f0:4b:2b:0b:13:e1:ec:6d:d9:e4:39:db:3b:dc:87: 30:ad:3a:9e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtbB0idv+0bRxOsDAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YjVhYTI4NDYtNzk1Yi00OTQxLWE0NDctMzAwZWNkMWZkOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfqW9TQW2Yut/L7Kyuc5iLsCZBCNn8wyulHN U41Ox+dwwFp9dVMIs3jMsDVYLzWCm4xkPbQcb+JIpEtmG+Q10H1Y9geWTAHORCQa C6jx8pL46oAk1yheD0oPTn6x4ObLsdi+SGlqT5NmgLi53I9I6Tw1de+P3lCLfZ9C B9lVIf+P2q47N5JvcjTp9hhyAgxgSugpb+Z94HfyDQQ64fZFH98T8B74Lmf+k3z+ BIxh+nboz6kKaBO5Sn6dAMZYP1Vo+cu9bhlfrMlEMXkh8hrbmszmaAKZNHJnPDYQ Yo3Vt+ZUSPjNh/lqw8zsulFqfNvzNmIIGpbNFFTRHDA3RxZ/UQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJ5Mmxa87vTJi+ykw5T+j5CZBBZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvMjExYTBjNTQtZjRjZS0z YjliLWE3YTQtMmQ5ZTc4NDYxZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFQLlgAwQF SAoAAwQEzn4QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIT4tn22EcoY0X7+W9tmzISDTqHVy0UdhOG0BQ0o bykeD+9GFURx+oIfAQW5zQ6Ch7o+KFZqnxr60Yy42NzCgwgJa0vvjJvDeinNlyvI BxoT4aC4fA6X1P3/TPR51SzvyyBV/pHA3zGu0nT1V3BTnG0qTU6TDwbv7mugTxON QjpUX9/B100tMUflpNYY5OFpeRidXFspC0biNcrMBWCbumCL5Z4GxF4KA0jl/Li3 9tTEQbLVc6tB1lKBEO4kmU1HYyamLbw924bXRfQT3mldEP6lkNsGaXtgnCVajZjx S1UjKPVOu5WEsxNfkZu3m/BLKwsT4ext2eQ52zvchzCtOp4= -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:22 2025 by rpki-client