$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa File: 5ccc738a-4d60-307a-b635-bbfa03724c5e.roa (raw, json) Hash identifier: +Du9FqXrVMgt1zTD9zMuwHlu6geRp76tKNTqw8Lk7Nc= Subject key identifier: 5D:31:0A:04:94:CE:ED:94:8A:E6:E5:25:04:3D:DB:45:78:E9:60:23 Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Certificate serial: 010D0C9F4328584B2761764DF7F704D124C7C9A0 Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 19504 IP address blocks: 64.6.112.0/20 maxlen: 24 66.109.112.0/21 maxlen: 24 68.171.176.0/20 maxlen: 24 104.200.208.0/21 maxlen: 24 206.168.16.0/20 maxlen: 24 216.122.152.0/21 maxlen: 24 216.147.224.0/20 maxlen: 24 2604:1c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:76:4d:f7:f7:04:d1:24:c7:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=94f7be92-4483-4102-9c5b-650ce8f825a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:17:98:7e:9d:b5:9e:2c:31:d7:93:7b:27: 68:a5:c2:12:46:21:ce:cd:e4:dd:5a:a6:2f:b1:ac: d9:f8:ab:cb:6c:1c:f2:e3:ed:59:17:18:65:ea:29: c1:3b:6a:e6:6d:7c:02:19:83:04:04:1f:95:70:7b: 47:6b:97:c5:81:7d:21:b8:f9:d5:26:08:7e:f7:dc: b7:db:02:27:99:6a:97:10:9f:e0:fc:ca:56:52:4d: 18:8b:02:cf:91:2f:ea:12:00:bd:25:95:49:70:06: 9f:6e:8c:8f:77:68:8f:11:a4:a6:78:0e:a2:de:9d: c2:f8:e3:a3:3e:4c:d9:cb:52:ac:8f:d9:06:06:99: f6:ee:dc:15:28:61:ff:e1:be:72:ea:d4:bd:89:fd: 6e:aa:8c:6d:7d:87:60:97:12:97:7a:84:86:76:d6: dd:4f:84:ea:4f:53:d2:b9:72:cc:b6:be:9c:b6:e1: f9:27:e5:1d:84:5f:4b:92:4b:1c:52:16:62:59:bd: 60:60:52:f7:8b:1f:1a:18:3b:95:34:53:31:0f:05: 9c:56:a2:80:b8:1c:c7:b1:0d:44:b7:1b:34:a9:ec: 20:eb:c4:fd:21:89:24:df:21:b2:21:33:18:f8:a3: 37:67:27:85:43:02:20:5a:e7:1a:fe:bc:74:b8:0d: e5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:31:0A:04:94:CE:ED:94:8A:E6:E5:25:04:3D:DB:45:78:E9:60:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/5ccc738a-4d60-307a-b635-bbfa03724c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl X509v3 Authority Key Identifier: keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 206.168.16.0/20 216.122.152.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:44:a3:34:42:9b:da:df:9e:04:cf:98:ba:9b:28:33:b0:2c: 89:6b:01:bb:44:66:4a:60:84:86:2e:85:a0:9a:72:e5:91:e9: 4b:26:23:2f:e0:db:f1:40:d7:1f:b4:1d:03:06:2d:00:24:68: 79:c1:bc:88:fe:f0:f4:c5:5c:9d:0a:aa:0e:6a:bf:28:36:b4: f5:95:d7:36:f0:45:20:4d:e7:e1:0e:8e:2a:16:ec:fe:af:de: db:9a:46:dc:05:8c:97:2d:fd:90:a2:09:15:6d:c6:d3:4b:6e: c9:b6:56:37:94:c2:74:19:3e:a4:98:b0:d8:12:2d:ed:02:f0: 0f:f6:98:77:a2:b5:c6:d1:94:70:aa:d7:d7:89:a4:ea:3c:43: 18:77:67:e0:af:f7:0f:c0:6d:e5:2d:46:2e:90:e0:68:5a:9a: 37:1d:39:50:4a:90:78:ca:7d:74:46:67:5d:46:b7:3a:f7:44: 67:e6:fd:a6:c5:78:f0:91:1b:ff:09:a9:3e:a7:e3:09:eb:52: 84:9e:4a:fa:d3:68:e0:d8:bc:05:ab:a4:7a:f7:f7:6b:2d:0b: 41:e2:58:88:9c:07:34:4c:90:7c:4f:f8:3d:b1:77:19:48:6f: 51:e7:41:54:47:58:f8:9f:27:38:2b:e8:62:e1:eb:b4:0c:5e: 48:b8:a4:1f -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEsnYXZN9/cE0STHyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0 Y2QzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk OTRmN2JlOTItNDQ4My00MTAyLTljNWItNjUwY2U4ZjgyNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllAXmH6dtZ4sMdeTeydopcISRiHOzeTdWqYv sazZ+KvLbBzy4+1ZFxhl6inBO2rmbXwCGYMEBB+VcHtHa5fFgX0huPnVJgh+99y3 2wInmWqXEJ/g/MpWUk0YiwLPkS/qEgC9JZVJcAafboyPd2iPEaSmeA6i3p3C+OOj PkzZy1Ksj9kGBpn27twVKGH/4b5y6tS9if1uqoxtfYdglxKXeoSGdtbdT4TqT1PS uXLMtr6ctuH5J+UdhF9LkkscUhZiWb1gYFL3ix8aGDuVNFMxDwWcVqKAuBzHsQ1E txs0qewg68T9IYkk3yGyITMY+KM3ZyeFQwIgWuca/rx0uA3lUQIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFF0xCgSUzu2UiublJQQ920V46WAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3 ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvNWNjYzczOGEtNGQ2MC0z MDdhLWI2MzUtYmJmYTAzNzI0YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw YTIxMzRjZDMuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQAZwAwQD Qm1wAwQERKuwAwQDaMjQAwQEzqgQAwQD2HqYAwQE2JPgMA0EAgACMAcDBQAmBAHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVEozRCm9rfngTPmLqbKDOwLIlrAbtEZkpghIYuhaCacuWR6Usm Iy/g2/FA1x+0HQMGLQAkaHnBvIj+8PTFXJ0Kqg5qvyg2tPWV1zbwRSBN5+EOjioW 7P6v3tuaRtwFjJct/ZCiCRVtxtNLbsm2VjeUwnQZPqSYsNgSLe0C8A/2mHeitcbR lHCq19eJpOo8Qxh3Z+Cv9w/AbeUtRi6Q4GhamjcdOVBKkHjKfXRGZ11Gtzr3RGfm /abFePCRG/8JqT6n4wnrUoSeSvrTaODYvAWrpHr392stC0HiWIicBzRMkHxP+D2x dxlIb1HnQVRHWPifJzgr6GLh67QMXki4pB8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:23 2025 by rpki-client