$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa File: 3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa (raw, json) Hash identifier: ZD7J03kY/9KuBjhZwAklGtgSDXJDXvBVbkZC1MVAr6I= Subject key identifier: 96:07:F9:2F:89:5B:4C:B3:F9:74:ED:C9:3D:A4:D1:CD:56:4B:50:5C Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Certificate serial: 010D0C9F4328584BB45D19442922CA45FFF85680 Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 19504 IP address blocks: 64.6.112.0/20 maxlen: 24 66.109.112.0/21 maxlen: 24 68.171.176.0/20 maxlen: 24 104.200.208.0/21 maxlen: 24 216.147.224.0/20 maxlen: 24 2604:1c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:19:44:29:22:ca:45:ff:f8:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=3ac10191-534e-4b3a-98fc-5f7ec540669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:3f:a6:2b:63:a9:8e:41:d7:f1:d4:08:f0: 8c:9d:e3:6d:88:7d:2f:fa:f2:6c:fd:01:a2:9d:dc: e6:7c:c7:8b:26:22:13:f5:8b:7d:e6:67:e7:77:b0: c9:ad:6f:33:c1:35:e7:a3:c2:a4:fb:90:fa:a4:46: eb:25:af:f7:5b:7f:8b:9f:17:66:61:0d:77:54:96: 13:42:62:cd:5e:01:5e:40:1e:20:05:29:c9:14:0e: 2f:90:d2:bc:f7:02:27:72:91:21:b0:54:f4:a0:ad: 7b:3a:a4:f4:45:87:8c:f4:bc:8b:25:8f:28:7c:8d: ff:69:a9:f7:07:c3:04:d6:8e:75:97:72:7b:7d:8b: 7e:2f:a2:3a:36:3f:78:52:a4:da:ff:9c:82:13:59: 79:a0:a6:51:da:c1:c7:6b:a2:7f:2a:2a:b0:58:c3: 45:36:e2:b5:92:00:71:b8:e1:00:d8:a8:8b:dd:cf: aa:99:eb:3d:4b:86:36:ec:e9:df:f4:f6:3d:1a:85: 62:80:d1:91:0d:a7:3b:c4:76:b5:63:63:b3:2e:92: 7d:86:26:a2:96:ce:58:22:7b:c2:24:b6:10:b6:6b: aa:5a:24:6d:cf:ae:87:de:9c:e1:e7:3a:3e:60:c1: 8a:9c:ee:48:01:78:fa:9e:96:3b:5c:25:ce:4d:2c: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:07:F9:2F:89:5B:4C:B3:F9:74:ED:C9:3D:A4:D1:CD:56:4B:50:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/3c84d7d7-8ac1-3ab2-ae77-eecff47be976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl X509v3 Authority Key Identifier: keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:64:86:64:14:d1:64:07:71:9f:88:fb:12:6b:8e:63:3a:f8: 9c:4e:ee:25:40:91:1d:43:6a:fc:5b:72:e1:6f:ee:f5:b2:b9: 93:51:ce:28:b4:b7:d1:95:00:4c:90:82:5d:aa:34:f1:68:f5: 11:01:65:95:6b:c1:39:1d:28:5f:b7:a4:e2:6d:10:50:97:c6: 90:e6:ac:e0:d6:bd:ca:1a:f9:a3:fe:d1:4b:7a:a5:93:bf:2f: 41:29:34:7f:92:ac:05:37:54:61:82:de:cf:e0:3e:1c:1e:34: 94:5d:52:ca:ca:b3:1b:6d:31:13:76:01:e0:c4:16:4c:c3:06: 8b:af:32:31:4d:bc:6a:63:e1:3a:e3:d0:e0:40:a7:8c:bf:26: 6d:ee:61:52:c8:05:e0:cb:7b:73:12:ea:3b:6e:de:ac:9a:f7: 7c:e1:76:45:a9:04:09:b4:3e:ba:fe:6c:e4:f9:cc:58:c9:d7: 41:e4:dd:eb:dc:b1:cf:a1:51:43:3d:2a:d8:58:45:e6:c3:30: 0a:b6:25:94:4c:b3:4d:6a:ca:3d:6c:2c:04:53:0d:8c:cb:6d: 79:5c:f1:fa:90:68:f5:8f:1f:a4:3d:63:fd:77:54:e7:8b:83: 16:b2:50:94:df:bc:c1:c6:a1:26:06:5e:4c:46:a2:39:cb:3f: b2:77:a3:a3 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEu0XRlEKSLKRf/4VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0 Y2QzMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk M2FjMTAxOTEtNTM0ZS00YjNhLTk4ZmMtNWY3ZWM1NDA2NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumo/pitjqY5B1/HUCPCMneNtiH0v+vJs/QGi ndzmfMeLJiIT9Yt95mfnd7DJrW8zwTXno8Kk+5D6pEbrJa/3W3+LnxdmYQ13VJYT QmLNXgFeQB4gBSnJFA4vkNK89wIncpEhsFT0oK17OqT0RYeM9LyLJY8ofI3/aan3 B8ME1o51l3J7fYt+L6I6Nj94UqTa/5yCE1l5oKZR2sHHa6J/KiqwWMNFNuK1kgBx uOEA2KiL3c+qmes9S4Y27Onf9PY9GoVigNGRDac7xHa1Y2OzLpJ9hiails5YInvC JLYQtmuqWiRtz66H3pzh5zo+YMGKnO5IAXj6npY7XCXOTSzN5wIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFJYH+S+JW0yz+XTtyT2k0c1WS1BcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3 ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvM2M4NGQ3ZDctOGFjMS0z YWIyLWFlNzctZWVjZmY0N2JlOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw YTIxMzRjZDMuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEQAZwAwQD Qm1wAwQERKuwAwQDaMjQAwQE2JPgMA0EAgACMAcDBQAmBAHAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAJk hmQU0WQHcZ+I+xJrjmM6+JxO7iVAkR1DavxbcuFv7vWyuZNRzii0t9GVAEyQgl2q NPFo9REBZZVrwTkdKF+3pOJtEFCXxpDmrODWvcoa+aP+0Ut6pZO/L0EpNH+SrAU3 VGGC3s/gPhweNJRdUsrKsxttMRN2AeDEFkzDBouvMjFNvGpj4Trj0OBAp4y/Jm3u YVLIBeDLe3MS6jtu3qya93zhdkWpBAm0Prr+bOT5zFjJ10Hk3evcsc+hUUM9KthY RebDMAq2JZRMs01qyj1sLARTDYzLbXlc8fqQaPWPH6Q9Y/13VOeLgxayUJTfvMHG oSYGXkxGojnLP7J3o6M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:13 2025 by rpki-client