$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa File: 698c34f0-112e-3311-9be0-cb35fb62f459.roa (raw, json) Hash identifier: bqndY+CK2WgPq0CoNcodxTguKI8ZV0VkN7n25p575oA= Subject key identifier: 9B:DD:E8:ED:CA:C9:8C:71:19:F0:F3:D1:3F:43:B0:EA:95:A7:D4:1C Certificate issuer: /CN=19eb256a-4db0-45f5-95c3-26a618298e21 Certificate serial: 010D0C9F4328584BABFD0028DE84A68465FFF180 Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 55002 IP address blocks: 63.143.16.0/20 maxlen: 24 68.66.16.0/20 maxlen: 24 97.107.80.0/20 maxlen: 24 2604:f200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:00:28:de:84:a6:84:65:ff:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=852cc9b4-684f-42df-a6a4-43a6d8a89392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:60:16:0c:b0:30:6f:4f:c8:1e:c7:5f:e2: c3:bd:f3:03:1a:db:df:29:d1:31:53:83:1a:e4:84: e1:ee:d6:30:38:fb:7a:ac:9b:f7:fa:6a:30:e5:30: 7f:37:cb:b9:10:90:be:73:14:ae:3b:41:6f:af:3e: 1b:ad:2c:bd:f1:55:1a:ea:18:57:6c:6c:2a:7d:e4: d5:f0:98:44:57:ce:7b:de:55:e4:62:c9:d7:fe:ca: 3a:23:7b:a7:c2:d2:9d:6e:8f:89:02:d3:d2:1c:7c: 03:93:12:2c:f4:db:d9:b1:d8:af:3d:e4:69:3d:8a: fb:00:61:c2:5d:0e:a7:e7:b6:b5:d9:4a:99:e7:14: 3e:e1:68:06:2c:d6:15:a3:c1:34:19:9c:c3:90:bc: e2:a0:3a:18:43:e3:f6:af:f5:ac:aa:6e:56:44:6f: 77:d9:1c:4a:6d:4d:ba:10:14:1d:ec:db:fc:70:11: a3:07:3b:63:39:6c:9d:60:bd:e3:4a:37:53:47:5a: 43:b9:5d:3d:72:a1:57:43:87:ac:23:80:43:e9:60: e5:d0:b5:4d:f1:1f:ab:b0:37:36:48:bd:fb:80:9d: 53:8d:48:cf:ee:c7:53:27:16:45:a2:a1:c1:34:e5: 9f:81:5e:bb:7a:69:7a:95:a4:aa:49:47:bd:00:38: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DD:E8:ED:CA:C9:8C:71:19:F0:F3:D1:3F:43:B0:EA:95:A7:D4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/698c34f0-112e-3311-9be0-cb35fb62f459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl X509v3 Authority Key Identifier: keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer sbgp-ipAddrBlock: critical IPv4: 63.143.16.0/20 68.66.16.0/20 97.107.80.0/20 IPv6: 2604:f200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:e3:27:e0:80:52:fa:eb:32:cb:1e:ed:92:ff:d9:d2:e0: 28:fb:5f:bb:e9:da:8e:a6:5e:ba:9b:8a:60:9e:28:f8:57:db: 00:15:8d:18:ee:ba:61:89:d7:55:b3:c6:2e:65:79:5a:c8:04: 79:ee:84:aa:1b:fd:48:66:18:39:3e:35:6c:d0:ad:b3:36:99: 3e:f0:08:ef:bc:d8:ac:1e:fb:c0:5a:10:c4:41:ea:60:dd:ad: a5:7f:c4:5a:f8:76:7e:42:1c:7e:e0:40:5e:44:f7:5a:d9:2c: bf:bc:04:02:9e:e5:93:e9:05:20:40:2e:e8:e9:75:06:45:95: c0:34:3a:93:ce:75:8a:f6:ad:4e:49:db:fc:33:a0:52:51:8d: 89:1f:06:70:0c:db:24:cf:74:81:4a:0a:4d:05:35:e0:cb:9e: 5a:ea:6d:b5:89:00:ba:24:fb:1e:e3:72:e7:37:14:8a:e0:bf: 0b:81:b3:bc:df:76:5d:30:77:9f:f0:15:00:93:7a:1b:3d:93: 40:2c:8f:32:92:e9:dc:e1:ee:ec:00:68:d9:ba:0b:dc:2b:d9: 13:55:08:c5:b8:31:32:99:16:40:bc:f0:cc:a2:d6:1b:92:77: 63:0b:ff:93:3a:44:52:fe:88:9f:4f:3e:5e:49:02:3c:a5:b3: 08:81:8f:e3 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEur/QAo3oSmhGX/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllYjI1NmEtNGRiMC00NWY1LTk1YzMtMjZhNjE4Mjk4 ZTIxMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ODUyY2M5YjQtNjg0Zi00MmRmLWE2YTQtNDNhNmQ4YTg5MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSVgFgywMG9PyB7HX+LDvfMDGtvfKdExU4Ma 5ITh7tYwOPt6rJv3+mow5TB/N8u5EJC+cxSuO0Fvrz4brSy98VUa6hhXbGwqfeTV 8JhEV8573lXkYsnX/so6I3unwtKdbo+JAtPSHHwDkxIs9NvZsdivPeRpPYr7AGHC XQ6n57a12UqZ5xQ+4WgGLNYVo8E0GZzDkLzioDoYQ+P2r/Wsqm5WRG932RxKbU26 EBQd7Nv8cBGjBztjOWydYL3jSjdTR1pDuV09cqFXQ4esI4BD6WDl0LVN8R+rsDc2 SL37gJ1TjUjP7sdTJxZFoqHBNOWfgV67eml6laSqSUe9ADiHwwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJvd6O3KyYxxGfDz0T9DsOqVp9QcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWVi MjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2MTgyOThlMjEvNjk4YzM0ZjAtMTEyZS0z MzExLTliZTAtY2IzNWZiNjJmNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTllYjI1NmEtNGRiMC00NWY1LTk1 YzMtMjZhNjE4Mjk4ZTIxLzE5ZWIyNTZhLTRkYjAtNDVmNS05NWMzLTI2YTYxODI5 OGUyMS5jcmwwHwYDVR0jBBgwFoAU02u3tJC7BRMPau4HDBeFaI7xPuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWViMjU2YS00ZGIwLTQ1ZjUtOTVjMy0yNmE2 MTgyOThlMjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEP48QAwQE REIQAwQEYWtQMA0EAgACMAcDBQAmBPIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAoi4yfggFL66zLLHu2S /9nS4Cj7X7vp2o6mXrqbimCeKPhX2wAVjRjuumGJ11Wzxi5leVrIBHnuhKob/Uhm GDk+NWzQrbM2mT7wCO+82Kwe+8BaEMRB6mDdraV/xFr4dn5CHH7gQF5E91rZLL+8 BAKe5ZPpBSBALujpdQZFlcA0OpPOdYr2rU5J2/wzoFJRjYkfBnAM2yTPdIFKCk0F NeDLnlrqbbWJALok+x7jcuc3FIrgvwuBs7zfdl0wd5/wFQCTehs9k0AsjzKS6dzh 7uwAaNm6C9wr2RNVCMW4MTKZFkC88Myi1huSd2ML/5M6RFL+iJ9PPl5JAjylswiB j+M= -----END CERTIFICATE-----Generated at Wed Nov 5 09:22:01 2025 by rpki-client