$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa File: cb33f4ca-7864-3f1e-854d-1cec059ee046.roa (raw, json) Hash identifier: TwM3pXDXo0B4DG8M7IGfiG1MQbUlsG7GBBA0YOJXB9A= Subject key identifier: D5:BE:A6:F9:93:5B:F4:DF:4F:DA:1B:16:F7:DD:C0:13:4A:46:E8:2D Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584BA39D237EB7E977AE491E36E0 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 25899 IP address blocks: 67.210.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:23:7e:b7:e9:77:ae:49:1e:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f9e284ad-8aa8-42ef-97c1-d4b392f7c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:f7:d8:43:14:ce:fc:4d:dd:1a:9e:13:3d: 5c:c3:f0:75:d1:d1:ea:92:29:72:57:34:90:b0:19: 45:40:23:48:c0:77:2b:c7:11:05:5a:90:79:ff:9d: f8:1f:ee:d7:31:94:3c:b0:d4:7b:a7:ce:45:78:35: 6b:a2:e6:1b:f7:fe:ba:2e:8a:62:51:57:8b:b1:7a: 20:9b:d8:2b:c7:14:4b:7c:cb:a0:61:1a:2b:05:57: 15:de:93:90:e9:1c:65:38:51:58:9f:0d:d7:c6:77: 24:c3:8a:28:0e:40:7c:b4:21:c4:28:fc:c7:00:0a: f3:47:db:54:1a:8f:b4:37:19:eb:df:89:0c:38:4c: 35:ba:85:f7:a1:39:f0:8f:33:82:06:cd:d0:e0:d1: 83:17:af:26:de:ad:a9:df:3e:3c:4a:bb:6a:94:7a: f4:68:6e:3f:12:e7:0f:81:31:ab:f1:01:30:1c:f2: 93:ac:6d:e5:5f:ad:11:94:8e:a8:65:b0:12:af:ff: 84:00:c8:c8:91:ae:08:42:19:9b:e7:2c:a5:4c:66: 11:e2:c7:ec:21:2f:b3:d4:4a:a2:d8:a1:87:da:69: 2c:d0:ef:bc:ca:1d:f3:c1:33:3f:81:24:60:fd:88: 38:0d:dd:8d:69:41:ca:3f:de:50:d1:dc:da:91:cc: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:A6:F9:93:5B:F4:DF:4F:DA:1B:16:F7:DD:C0:13:4A:46:E8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.210.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:2d:b6:24:59:58:28:3d:77:e9:99:8f:5c:1d:fe:4b:24:c8: 4f:87:73:91:60:71:aa:b5:98:51:04:9b:c3:cb:e9:20:b4:9d: 85:7b:05:b6:73:2a:ce:13:0b:a6:71:4b:4e:f4:37:8e:a7:2b: 1f:94:08:8d:7f:f1:b5:18:9e:4c:81:0b:df:57:84:8c:e9:0f: 79:93:f9:10:21:20:3c:35:96:50:19:63:8a:97:27:f2:b8:0f: 45:4f:13:89:6e:f2:fe:70:e8:e4:5e:1e:2a:b4:f6:5b:96:ad: 86:6f:94:7a:b7:c2:d8:f4:c3:6a:87:c5:e4:be:45:b5:cb:12: d9:01:4d:b0:a5:a5:66:41:7d:10:ea:49:1c:ac:97:76:0e:7c: 48:0d:24:3e:f2:3f:6d:fb:8c:45:31:b1:32:7f:5a:d4:06:ad: 10:d3:fd:42:94:f6:bd:e7:f2:1d:34:04:07:d1:97:c6:15:7e: 82:5d:88:ee:0a:13:63:e4:fc:e4:4d:5a:d9:a4:f0:0a:c9:cd: 6d:25:a4:7d:ff:8e:c2:52:60:d6:2e:dd:bf:d9:ae:23:8a:07: c9:b6:de:d3:de:b8:32:01:a9:50:c3:37:5a:41:e6:43:3b:73: 19:ab:a1:3f:48:8c:df:d4:5d:d1:90:b2:17:cd:0d:18:5a:45: 3e:93:fe:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSN+t+l3rkkeNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjllMjg0YWQtOGFhOC00MmVmLTk3YzEtZDRiMzkyZjdjNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIn32EMUzvxN3RqeEz1cw/B10dHqkilyVzSQ sBlFQCNIwHcrxxEFWpB5/534H+7XMZQ8sNR7p85FeDVrouYb9/66LopiUVeLsXog m9grxxRLfMugYRorBVcV3pOQ6RxlOFFYnw3Xxnckw4ooDkB8tCHEKPzHAArzR9tU Go+0Nxnr34kMOEw1uoX3oTnwjzOCBs3Q4NGDF68m3q2p3z48SrtqlHr0aG4/EucP gTGr8QEwHPKTrG3lX60RlI6oZbASr/+EAMjIka4IQhmb5yylTGYR4sfsIS+z1Eqi 2KGH2mks0O+8yh3zwTM/gSRg/Yg4Dd2NaUHKP95Q0dzakcxoQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW+pvmTW/TfT9obFvfdwBNKRugtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvY2IzM2Y0Y2EtNzg2NC0z ZjFlLTg1NGQtMWNlYzA1OWVlMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwttiRZWCg9d+mZj1wd/kskyE+Hc5Fgcaq1mFEEm8PL6SC0nYV7BbZz Ks4TC6ZxS070N46nKx+UCI1/8bUYnkyBC99XhIzpD3mT+RAhIDw1llAZY4qXJ/K4 D0VPE4lu8v5w6OReHiq09luWrYZvlHq3wtj0w2qHxeS+RbXLEtkBTbClpWZBfRDq SRysl3YOfEgNJD7yP237jEUxsTJ/WtQGrRDT/UKU9r3n8h00BAfRl8YVfoJdiO4K E2Pk/ORNWtmk8ArJzW0lpH3/jsJSYNYu3b/ZriOKB8m23tPeuDIBqVDDN1pB5kM7 cxmroT9IjN/UXdGQshfNDRhaRT6T/nU= -----END CERTIFICATE-----Generated at Thu Nov 6 00:28:46 2025 by rpki-client