$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa File: 4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (raw, json) Hash identifier: gMJXYD+GKU7xSWQTIY9uXLOJ56ehwudMb9RosVzji4U= Subject key identifier: 9C:7F:B5:4E:AF:52:59:E5:D0:C8:02:05:5E:A2:AE:3A:22:FA:23:64 Certificate issuer: /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Certificate serial: 010D0C9F4328584BA93266F04F957FCCDBE7C840 Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 46719 IP address blocks: 140.106.208.0/20 maxlen: 24 199.167.132.0/22 maxlen: 24 199.188.240.0/22 maxlen: 24 204.154.240.0/21 maxlen: 24 206.190.228.0/22 maxlen: 24 216.213.112.0/20 maxlen: 24 2600:d000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:66:f0:4f:95:7f:cc:db:e7:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=43c4cd56-f1d4-496c-91ab-03629fe8a5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:64:fc:39:d0:a3:b4:ff:ac:e0:57:87:df: 50:5b:0e:f8:bd:43:fb:c8:cd:b4:be:12:b3:43:65: 4f:9f:0b:f4:1e:ef:f4:32:2f:e8:3c:c0:e0:25:2e: c9:9e:57:3c:35:3b:07:d0:98:1b:f8:3d:b4:75:29: a7:38:76:10:29:c6:bc:4c:88:e4:71:10:af:77:1c: 34:99:34:ec:46:55:f6:a4:df:8e:98:10:4e:45:82: 18:36:d1:12:fb:4c:65:ed:91:46:f7:7e:6d:bf:ad: f6:d7:e3:62:3b:94:98:ed:07:68:0f:a3:d1:25:c2: 79:dd:b7:d5:2e:80:28:04:9d:f3:b9:66:7e:a6:8b: 73:71:88:9f:a5:ba:ed:16:3f:4f:59:52:ac:1c:f6: 6b:71:8a:c4:74:86:6d:c7:bf:ef:6a:51:1f:77:ce: 71:33:f0:17:c3:95:d3:6f:f1:3e:c5:bc:93:56:be: 5d:05:24:c2:4b:fe:c0:a5:ed:99:6a:b4:6a:42:aa: 35:9b:f2:c3:99:8e:0c:c2:15:76:4b:7b:38:3e:e6: 37:51:a3:20:4b:b3:20:3e:9a:93:fc:3f:ef:8c:a8: 92:0c:49:4b:32:3f:72:2f:58:14:cf:81:6b:80:63: f9:6e:35:83:04:91:7b:bf:4a:0d:0a:ae:9b:ed:19: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7F:B5:4E:AF:52:59:E5:D0:C8:02:05:5E:A2:AE:3A:22:FA:23:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl X509v3 Authority Key Identifier: keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer sbgp-ipAddrBlock: critical IPv4: 140.106.208.0/20 199.167.132.0/22 199.188.240.0/22 204.154.240.0/21 206.190.228.0/22 216.213.112.0/20 IPv6: 2600:d000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:fc:6c:24:3c:08:ba:6f:50:57:f6:df:aa:50:a6:b0:bb:bc: 95:eb:2c:88:ce:e8:8c:4c:fb:4e:c7:df:25:c6:02:b6:26:2e: 1f:0d:ee:b7:b5:1c:98:f3:a4:23:0a:19:93:86:2f:55:2a:07: 37:c7:87:1f:17:7f:f3:38:58:b4:d1:63:d3:0b:7b:2d:46:0a: 3c:fc:24:46:35:b8:d7:e2:54:be:6a:55:34:9d:64:01:d4:b7: 7d:bf:67:5a:7b:6a:ad:fd:2c:29:2d:6c:2f:8d:8d:ae:8a:9c: 57:67:f6:86:fd:b9:58:5e:40:d7:e3:12:f6:66:e9:18:a1:1c: b5:e5:a4:97:1a:39:74:e3:03:ff:80:5a:86:45:32:ce:1e:2b: 60:c1:c8:43:3e:19:41:02:b3:34:11:99:ae:16:99:f5:87:ad: 4a:a5:7e:73:16:79:d5:ea:74:32:07:a0:b9:47:30:de:fb:50: 0f:61:98:de:85:ce:7a:f5:e7:bf:29:52:e1:fa:65:89:06:cd: 4e:e1:d4:7f:54:38:0e:29:15:03:ed:d0:66:1e:82:e6:34:0b: 39:d9:57:f8:bd:c6:ec:e9:73:af:9f:55:44:9a:c5:6f:e6:21: f9:80:25:85:2d:df:73:52:c0:cc:da:64:41:6d:50:09:7b:42: 83:52:93:2b -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEupMmbwT5V/zNvnyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY2YzZiNmYtMTI4Ny00ZGMwLTkwNzQtNmNlZjNjMjEx YzBlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDNjNGNkNTYtZjFkNC00OTZjLTkxYWItMDM2MjlmZThhNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl45k/DnQo7T/rOBXh99QWw74vUP7yM20vhKz Q2VPnwv0Hu/0Mi/oPMDgJS7Jnlc8NTsH0Jgb+D20dSmnOHYQKca8TIjkcRCvdxw0 mTTsRlX2pN+OmBBORYIYNtES+0xl7ZFG935tv6321+NiO5SY7QdoD6PRJcJ53bfV LoAoBJ3zuWZ+potzcYifpbrtFj9PWVKsHPZrcYrEdIZtx7/valEfd85xM/AXw5XT b/E+xbyTVr5dBSTCS/7Ape2ZarRqQqo1m/LDmY4MwhV2S3s4PuY3UaMgS7MgPpqT /D/vjKiSDElLMj9yL1gUz4FrgGP5bjWDBJF7v0oNCq6b7RnGVQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFJx/tU6vUlnl0MgCBV6irjoi+iNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZj NmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2VmM2MyMTFjMGUvNGY4OWQ5ZDQtZGJlOC0z ZDJmLWE1MjktYTk3N2UwZDU3MTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDY2YzZiNmYtMTI4Ny00ZGMwLTkw NzQtNmNlZjNjMjExYzBlLzA2NmM2YjZmLTEyODctNGRjMC05MDc0LTZjZWYzYzIx MWMwZS5jcmwwHwYDVR0jBBgwFoAUuJDhNK6omS7bXp+BBkdv2555WnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZjNmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2Vm M2MyMTFjMGUuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEjGrQAwQC x6eEAwQCx7zwAwQDzJrwAwQCzr7kAwQE2NVwMA0EAgACMAcDBQQmANAAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBALn8bCQ8CLpvUFf236pQprC7vJXrLIjO6IxM+07H3yXGArYmLh8N7re1HJjz pCMKGZOGL1UqBzfHhx8Xf/M4WLTRY9MLey1GCjz8JEY1uNfiVL5qVTSdZAHUt32/ Z1p7aq39LCktbC+Nja6KnFdn9ob9uVheQNfjEvZm6RihHLXlpJcaOXTjA/+AWoZF Ms4eK2DByEM+GUECszQRma4WmfWHrUqlfnMWedXqdDIHoLlHMN77UA9hmN6Fznr1 578pUuH6ZYkGzU7h1H9UOA4pFQPt0GYeguY0CznZV/i9xuzpc6+fVUSaxW/mIfmA JYUt33NSwMzaZEFtUAl7QoNSkys= -----END CERTIFICATE-----Generated at Wed Nov 5 18:20:48 2025 by rpki-client