$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa File: d474896b-8f19-3b64-a77d-131cf6524395.roa (raw, json) Hash identifier: xVuwhJBRPpnxmsxm4UEzJ6MlcFCSF8MGjV/UY1D+lMQ= Subject key identifier: 56:49:B6:B7:01:CE:03:6F:4D:7F:D1:51:8C:0B:70:13:57:29:3F:C9 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584BB45D11E8E13D12901D8CD980 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 30500 IP address blocks: 74.123.68.0/22 maxlen: 24 198.134.28.0/22 maxlen: 24 208.77.196.0/22 maxlen: 24 208.123.208.0/24 maxlen: 24 208.123.210.0/23 maxlen: 24 208.123.212.0/22 maxlen: 24 208.123.216.0/22 maxlen: 24 2605:e680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:11:e8:e1:3d:12:90:1d:8c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=bcc67312-9c2f-45a6-9552-d011ead58e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1a:06:27:61:1a:e9:07:f0:71:32:08:05:4a: a3:35:2c:6a:14:3d:34:48:fc:a6:53:dd:79:ea:c9: d0:15:66:ef:6c:02:4d:aa:0b:6b:94:3c:aa:5d:fb: 28:88:7d:03:5d:28:03:af:8c:dc:dd:b0:0e:db:61: 1a:6d:5d:90:ec:d6:cc:38:d2:2d:0c:9f:91:68:1c: 03:e4:57:28:ee:05:64:d7:83:41:85:21:f2:6c:d8: 69:ab:06:c7:79:19:92:fd:e5:86:d4:8f:45:c6:51: af:ae:ae:2a:64:6e:dd:c0:13:e7:62:d0:f1:d2:f3: c5:e1:9a:c6:ad:b7:a5:11:20:b4:15:be:73:28:bc: 09:82:11:68:86:20:30:34:0f:65:b8:d6:11:3a:fc: 48:3f:1d:2f:56:8b:70:cf:04:5d:ca:61:e5:a5:28: 1e:34:27:8c:0b:86:34:ca:50:3b:f2:30:f3:5e:94: 30:9c:31:ab:7a:dd:54:de:0c:5c:9d:08:5c:e2:52: e9:d1:20:56:8d:63:77:32:5c:86:ca:f0:20:53:0d: 44:88:b3:d1:c1:c2:8f:f1:a3:dc:c8:34:8a:72:22: 37:9c:b8:f0:d5:0b:27:b5:af:d3:56:6c:90:04:b5: 37:d0:bf:70:66:fa:2b:15:16:97:71:5b:02:4e:b7: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:49:B6:B7:01:CE:03:6F:4D:7F:D1:51:8C:0B:70:13:57:29:3F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/d474896b-8f19-3b64-a77d-131cf6524395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 74.123.68.0/22 198.134.28.0/22 208.77.196.0/22 208.123.208.0/24 208.123.210.0-208.123.219.255 IPv6: 2605:e680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fd:e2:0e:1d:35:42:73:a8:6d:0b:a1:a0:d3:b7:ad:b1:48: 10:fd:4d:de:b1:68:5a:7f:65:6a:bf:17:93:3a:13:dc:3c:2e: 44:29:c9:d3:5e:b2:dc:95:53:40:6e:14:d2:8b:30:6f:35:ea: 73:db:70:16:78:d1:18:0b:56:8a:31:c4:8f:dd:1f:44:92:7d: cb:52:be:20:3c:7e:b5:64:a0:e9:e0:e5:24:5e:31:10:9c:11: c2:7c:31:a7:8b:fb:12:75:5a:60:5a:df:cb:26:cf:94:36:aa: bc:7d:94:86:ff:a1:07:b6:3b:69:41:ec:96:1f:fc:f7:70:9d: ec:23:71:db:42:ae:cb:2b:9d:ba:b1:f8:ad:d0:97:52:d5:5f: 95:a4:c2:d1:e4:56:f3:a0:b5:63:e6:26:ab:97:dc:f3:d9:e3: ad:21:f3:e8:48:f0:05:bd:ae:a0:11:d2:a0:ca:87:16:e2:87: 5b:80:0e:ac:3a:0e:52:46:49:e2:ee:a5:16:a3:d0:4b:90:d6: ff:29:e5:ee:7e:1b:59:bd:47:e0:66:6a:e1:53:f7:f4:e8:22: a5:c7:09:d6:a0:c5:7d:c2:e2:96:c2:6d:a8:80:91:aa:56:6f: 2d:64:5b:17:75:d7:9e:bc:6b:4b:99:86:9b:e9:2f:17:7f:fd: 02:50:0a:e5 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUAQ0Mn0MoWEu0XRHo4T0SkB2M2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YmNjNjczMTItOWMyZi00NWE2LTk1NTItZDAxMWVhZDU4ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRoGJ2Ea6QfwcTIIBUqjNSxqFD00SPymU915 6snQFWbvbAJNqgtrlDyqXfsoiH0DXSgDr4zc3bAO22EabV2Q7NbMONItDJ+RaBwD 5Fco7gVk14NBhSHybNhpqwbHeRmS/eWG1I9FxlGvrq4qZG7dwBPnYtDx0vPF4ZrG rbelESC0Fb5zKLwJghFohiAwNA9luNYROvxIPx0vVotwzwRdymHlpSgeNCeMC4Y0 ylA78jDzXpQwnDGret1U3gxcnQhc4lLp0SBWjWN3MlyGyvAgUw1EiLPRwcKP8aPc yDSKciI3nLjw1Qsnta/TVmyQBLU30L9wZvorFRaXcVsCTrdRaQIDAQABo4IDhDCC A4AwHQYDVR0OBBYEFFZJtrcBzgNvTX/RUYwLcBNXKT/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvZDQ3NDg5NmItOGYxOS0z YjY0LWE3N2QtMTMxY2Y2NTI0Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCSntEAwQC xoYcAwQC0E3EAwQA0HvQMAwDBAHQe9IDBALQe9gwDQQCAAIwBwMFACYF5oAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAv3iDh01QnOobQuhoNO3rbFIEP1N3rFoWn9lar8XkzoT3DwuRCnJ016y 3JVTQG4U0oswbzXqc9twFnjRGAtWijHEj90fRJJ9y1K+IDx+tWSg6eDlJF4xEJwR wnwxp4v7EnVaYFrfyybPlDaqvH2Uhv+hB7Y7aUHslh/893Cd7CNx20KuyyudurH4 rdCXUtVflaTC0eRW86C1Y+Ymq5fc89njrSHz6EjwBb2uoBHSoMqHFuKHW4AOrDoO UkZJ4u6lFqPQS5DW/ynl7n4bWb1H4GZq4VP39OgipccJ1qDFfcLilsJtqICRqlZv LWRbF3XXnrxrS5mGm+kvF3/9AlAK5Q== -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:18 2025 by rpki-client