$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa File: fa603d7b-627f-38af-83f9-1ffef126c099.roa (raw, json) Hash identifier: 8Ye3KLzGpQK0YhyjjXyShJSyTzPXmXALJ7gJEjQR7kM= Subject key identifier: 8A:7E:D7:2A:BA:27:15:58:29:59:DF:28:E4:05:98:A7:E5:45:95:BA Certificate issuer: /CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Certificate serial: 010D0C9F4328584BBB75913AD0B6E1827B880900 Authority key identifier: D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 19201 IP address blocks: 64.127.160.0/19 maxlen: 24 66.171.0.0/20 maxlen: 24 170.62.0.0/19 maxlen: 24 198.183.172.0/24 maxlen: 24 199.30.120.0/21 maxlen: 24 199.127.220.0/22 maxlen: 24 199.187.248.0/21 maxlen: 24 199.201.76.0/22 maxlen: 24 208.54.160.0/20 maxlen: 24 2605:27c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:91:3a:d0:b6:e1:82:7b:88:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bfbf0a8-433c-47ca-b579-b6c12883088e Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=d5a9fce4-e380-4471-89f8-98554fedce81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:4c:c6:bb:f6:e2:86:76:8a:ed:eb:02:aa: 29:19:69:d7:22:d0:e6:49:47:54:dd:a2:95:58:f7: fa:f0:de:d9:e8:19:76:6f:f3:80:9b:6c:4c:8b:df: 69:37:dc:68:9c:08:63:3c:06:9b:43:1b:5a:31:2e: 8c:dc:f0:5d:36:af:e8:cf:79:e8:e8:34:e8:a8:7c: 55:17:e7:b0:c4:58:f1:25:dd:d7:b9:62:24:b3:4c: 62:3e:19:9e:31:16:29:1f:ad:ce:2b:6e:cf:0d:de: 66:88:69:c4:55:6e:ae:13:89:a3:2d:af:62:d2:2c: 7d:95:a7:2d:82:c8:5b:31:c1:d4:d1:33:36:b8:43: 5b:34:eb:ba:d7:bb:be:57:65:69:03:4d:4e:31:f3: 5d:7d:19:9d:c4:5f:a7:8c:2e:1d:2c:f7:b5:02:a3: 09:e8:c5:aa:82:08:89:d5:73:77:60:0b:c5:b8:97: ef:13:b3:cd:7a:6b:a8:60:18:61:b6:cf:05:fd:20: 8c:3f:e7:53:f9:49:ba:93:3b:17:69:2d:96:f0:3c: a4:de:75:7f:5b:c8:01:ad:b3:3d:8c:f5:ff:cd:bc: d4:b8:ab:e8:bd:a3:43:0c:97:bf:b5:3c:2d:32:e5: 94:50:4d:2d:0e:8f:c8:81:4d:de:3b:ef:e4:25:58: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7E:D7:2A:BA:27:15:58:29:59:DF:28:E4:05:98:A7:E5:45:95:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/fa603d7b-627f-38af-83f9-1ffef126c099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e/7bfbf0a8-433c-47ca-b579-b6c12883088e.crl X509v3 Authority Key Identifier: keyid:D0:50:31:C1:0A:29:88:3A:C9:BC:2E:17:4E:1B:F8:15:03:83:33:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bfbf0a8-433c-47ca-b579-b6c12883088e.cer sbgp-ipAddrBlock: critical IPv4: 64.127.160.0/19 66.171.0.0/20 170.62.0.0/19 198.183.172.0/24 199.30.120.0/21 199.127.220.0/22 199.187.248.0/21 199.201.76.0/22 208.54.160.0/20 IPv6: 2605:27c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1b:42:b2:6c:1f:db:3b:80:15:9b:20:4c:11:36:c0:80:53: c4:45:dd:3f:04:ff:65:ad:c9:dd:ef:e1:17:41:04:e3:bc:c4: 3d:60:08:48:a4:04:82:e5:e1:ec:5d:a5:04:c6:e1:63:0c:f5: 8b:25:dc:e9:3f:af:63:e7:07:c9:a0:4d:b3:f9:6c:a5:47:8c: 6c:a7:0f:c3:3f:04:ee:01:36:50:b2:86:63:08:18:fc:82:1b: f6:7e:f6:a7:0a:7e:68:a4:8d:d4:c8:07:7a:ce:ff:c2:7d:ac: 10:1e:35:e1:d8:c6:5a:35:a4:6c:07:7d:8c:48:62:0e:d1:2a: b6:ea:cb:a4:eb:2d:aa:c7:78:30:16:06:08:25:b7:c3:e0:6f: 4f:1c:ac:a1:22:08:33:dd:a0:f6:0a:35:b2:85:b1:9e:2f:d7: 09:10:b1:98:3f:44:f3:ff:10:a9:7a:35:26:bb:5a:bf:5e:ab: 22:d7:5e:2c:08:b2:2a:67:46:fe:c1:33:54:21:25:e7:ce:e0: 82:49:b3:12:45:83:d8:c5:14:34:e8:82:43:69:f6:00:71:e9: f5:de:ba:9f:1a:1c:85:e7:bb:34:6f:f5:10:91:e7:67:6a:4f: 3b:e3:06:7b:5e:22:a3:98:c4:ca:46:f0:5b:0b:81:61:d2:23: e1:57:05:f3 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEu7dZE60LbhgnuICQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JmYmYwYTgtNDMzYy00N2NhLWI1NzktYjZjMTI4ODMw ODhlMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDVhOWZjZTQtZTM4MC00NDcxLTg5ZjgtOTg1NTRmZWRjZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCFMxrv24oZ2iu3rAqopGWnXItDmSUdU3aKV WPf68N7Z6Bl2b/OAm2xMi99pN9xonAhjPAabQxtaMS6M3PBdNq/oz3no6DToqHxV F+ewxFjxJd3XuWIks0xiPhmeMRYpH63OK27PDd5miGnEVW6uE4mjLa9i0ix9lact gshbMcHU0TM2uENbNOu617u+V2VpA01OMfNdfRmdxF+njC4dLPe1AqMJ6MWqggiJ 1XN3YAvFuJfvE7PNemuoYBhhts8F/SCMP+dT+Um6kzsXaS2W8Dyk3nV/W8gBrbM9 jPX/zbzUuKvovaNDDJe/tTwtMuWUUE0tDo/IgU3eO+/kJVgwQQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFIp+1yq6JxVYKVnfKOQFmKflRZW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmZi ZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMxMjg4MzA4OGUvZmE2MDNkN2ItNjI3Zi0z OGFmLTgzZjktMWZmZWYxMjZjMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JmYmYwYTgtNDMzYy00N2NhLWI1 NzktYjZjMTI4ODMwODhlLzdiZmJmMGE4LTQzM2MtNDdjYS1iNTc5LWI2YzEyODgz MDg4ZS5jcmwwHwYDVR0jBBgwFoAU0FAxwQopiDrJvC4XThv4FQODM4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmZiZjBhOC00MzNjLTQ3Y2EtYjU3OS1iNmMx Mjg4MzA4OGUuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQFQH+gAwQE QqsAAwQFqj4AAwQAxresAwQDxx54AwQCx3/cAwQDx7v4AwQCx8lMAwQE0DagMA0E AgACMAcDBQAmBSfAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAC4bQrJsH9s7gBWbIEwRNsCAU8RF3T8E/2Wt yd3v4RdBBOO8xD1gCEikBILl4exdpQTG4WMM9Ysl3Ok/r2PnB8mgTbP5bKVHjGyn D8M/BO4BNlCyhmMIGPyCG/Z+9qcKfmikjdTIB3rO/8J9rBAeNeHYxlo1pGwHfYxI Yg7RKrbqy6TrLarHeDAWBgglt8Pgb08crKEiCDPdoPYKNbKFsZ4v1wkQsZg/RPP/ EKl6NSa7Wr9eqyLXXiwIsipnRv7BM1QhJefO4IJJsxJFg9jFFDTogkNp9gBx6fXe up8aHIXnuzRv9RCR52dqTzvjBnteIqOYxMpG8FsLgWHSI+FXBfM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:58 2025 by rpki-client