$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa File: 27c00e98-a122-30ab-aab2-3e653d16930e.roa (raw, json) Hash identifier: V0rNjF8u/RqW4TvplF/IywdKkB5g1HY8E8SQmu+2IYI= Subject key identifier: 74:E3:99:1D:03:59:6D:84:7D:D0:65:08:38:4C:BE:A9:5B:D0:A0:BF Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584BB45D17F49102D3C3B8A43500 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 27446 IP address blocks: 64.147.208.0/20 maxlen: 21 64.147.208.0/24 maxlen: 24 72.27.224.0/19 maxlen: 20 72.250.224.0/19 maxlen: 20 72.250.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:17:f4:91:02:d3:c3:b8:a4:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=4d1dd2d9-e4fc-446e-83f2-ed856204505e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:11:e4:0f:b1:29:27:dc:c6:74:6d:63:87: f3:24:59:0b:dd:ca:5b:68:c6:01:fb:17:d3:59:aa: 36:6f:da:42:06:8d:7f:fc:b0:1c:6a:12:fe:51:2a: 81:7d:58:a1:1c:04:e8:0e:44:90:22:44:dc:d7:5a: 9e:53:82:4c:e2:d8:b5:4e:43:ca:a9:f8:ea:cb:58: 34:36:ec:99:d9:1d:6a:5e:91:a0:02:1f:ae:4a:af: 3a:5d:e0:10:ee:5d:77:eb:9d:59:ae:0c:63:28:f8: 74:aa:0b:f8:55:d7:13:91:b8:57:d3:a2:4d:7e:13: 43:0d:ed:d4:33:67:c7:cf:61:f8:8a:ef:3f:a6:fd: 5f:38:25:af:50:c6:d7:4c:6a:af:ee:c0:75:33:ea: 4a:ab:d4:9e:d5:0c:0a:2d:14:23:d5:30:d1:15:00: 46:49:7a:fa:8b:e1:e7:49:cd:58:ca:9b:e0:fc:14: 69:3c:c8:af:7e:57:ef:4c:c5:4e:6d:b7:d7:64:67: 00:7d:e3:97:07:1c:e7:af:e8:b6:49:5d:1e:93:40: fb:f5:fc:f7:8b:d1:48:52:9c:d9:f6:06:52:5f:44: 7a:a2:a2:ed:b8:d6:ad:95:76:1e:03:a3:34:d3:7a: fa:a3:cc:25:3e:5e:b7:98:b9:f7:fb:3c:81:6b:f3: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:99:1D:03:59:6D:84:7D:D0:65:08:38:4C:BE:A9:5B:D0:A0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 64.147.208.0/20 72.27.224.0/19 72.250.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:74:94:7d:ea:75:c4:e4:22:95:b9:1a:21:bd:fc:7b:ad:d7: 8c:1f:a5:d0:a6:7f:1e:05:9b:f5:56:d3:6f:96:77:8a:ed:5d: 98:cd:78:6f:0c:e3:fb:c4:23:41:f2:35:97:c6:c5:26:3b:f3: 34:fa:1a:a8:5d:5a:9e:0a:dc:90:29:41:f4:bc:19:c3:4c:3f: e2:7b:6a:01:4f:7a:f9:1e:b6:85:50:95:ab:d2:87:4b:43:3b: 63:32:e3:9c:6e:76:04:41:d5:b5:57:ac:ca:59:8f:d4:30:45: 3c:cc:35:99:be:0f:8d:98:e7:fe:a4:5d:cb:18:c6:78:3e:89: 14:92:67:99:9b:3d:fd:95:9c:56:64:fa:4b:c6:f1:fd:13:7d: cd:ac:79:fe:36:2c:3d:62:2d:3a:85:12:3c:2e:15:f5:cb:80: 45:57:04:9d:29:7f:65:68:56:87:4a:d1:b8:5e:7d:fa:e2:86: ac:6e:10:07:91:84:db:92:79:d3:11:4e:50:57:93:a4:df:a4: 46:15:d6:b2:67:8d:94:c1:04:6c:b4:f1:2c:67:77:56:72:6a: 50:2a:c9:3e:1a:d3:ee:5d:dc:b1:a9:6f:79:25:58:ee:54:bf: 01:9b:0b:c9:66:0f:7d:e3:c7:ff:99:2f:d2:e8:ad:b5:64:6d: 6e:ea:86:68 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu0XRf0kQLTw7ikNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NGQxZGQyZDktZTRmYy00NDZlLTgzZjItZWQ4NTYyMDQ1MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnewR5A+xKSfcxnRtY4fzJFkL3cpbaMYB+xfT Wao2b9pCBo1//LAcahL+USqBfVihHAToDkSQIkTc11qeU4JM4ti1TkPKqfjqy1g0 NuyZ2R1qXpGgAh+uSq86XeAQ7l13651ZrgxjKPh0qgv4VdcTkbhX06JNfhNDDe3U M2fHz2H4iu8/pv1fOCWvUMbXTGqv7sB1M+pKq9Se1QwKLRQj1TDRFQBGSXr6i+Hn Sc1Yypvg/BRpPMivflfvTMVObbfXZGcAfeOXBxznr+i2SV0ek0D79fz3i9FIUpzZ 9gZSX0R6oqLtuNatlXYeA6M003r6o8wlPl63mLn3+zyBa/MX8wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFHTjmR0DWW2EfdBlCDhMvqlb0KC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMjdjMDBlOTgtYTEyMi0z MGFiLWFhYjItM2U2NTNkMTY5MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQJPQAwQF SBvgAwQFSPrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ10lH3qdcTkIpW5GiG9/Hut14wfpdCmfx4Fm/VW 02+Wd4rtXZjNeG8M4/vEI0HyNZfGxSY78zT6GqhdWp4K3JApQfS8GcNMP+J7agFP evketoVQlavSh0tDO2My45xudgRB1bVXrMpZj9QwRTzMNZm+D42Y5/6kXcsYxng+ iRSSZ5mbPf2VnFZk+kvG8f0Tfc2sef42LD1iLTqFEjwuFfXLgEVXBJ0pf2VoVodK 0bheffrihqxuEAeRhNuSedMRTlBXk6TfpEYV1rJnjZTBBGy08Sxnd1ZyalAqyT4a 0+5d3LGpb3klWO5UvwGbC8lmD33jx/+ZL9LorbVkbW7qhmg= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:01 2025 by rpki-client