$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa File: e70d00de-ba3b-3298-a862-b8e63df24836.roa (raw, json) Hash identifier: 5ICeYIgfJZwJOy24lo1Ydn7nOI30dJ4JEKbXxOV6ACI= Subject key identifier: DE:88:65:0B:54:41:0D:FF:0A:A3:F9:E2:F0:59:AE:DD:1C:03:38:A2 Certificate issuer: /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Certificate serial: 010D0C9F4328584BA7CD187E12F5E125D5414980 Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 12009 IP address blocks: 65.38.48.0/20 maxlen: 20 72.35.192.0/20 maxlen: 20 216.228.192.0/20 maxlen: 20 2607:f248::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:18:7e:12:f5:e1:25:d5:41:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=a8aec4bf-fa25-4d4b-8bca-1791431938d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:9c:97:ac:73:bc:ee:2c:2b:07:89:f6:ae: 6f:ba:3a:02:46:1b:a7:01:51:5d:05:16:bf:bb:2a: 98:e8:5b:3f:1e:61:fa:dd:ff:51:08:8b:3f:19:c3: be:38:cd:58:5a:64:26:7a:1d:22:5e:d3:7b:83:89: e4:d6:55:30:e6:90:72:0a:9e:25:7d:d0:79:eb:0c: 0c:ae:22:d7:86:48:1c:01:03:94:e6:20:b0:02:ef: b9:3b:04:8e:2c:a3:19:b9:7c:5b:d6:ec:2a:7c:fc: 50:ac:ae:e7:67:f1:41:37:ae:98:4c:77:23:cf:34: aa:be:75:43:11:73:91:b2:8d:64:38:1f:da:fe:2c: 8f:dc:17:91:2a:07:a3:88:24:d0:18:04:74:ef:73: 2f:5e:9b:77:7a:6a:af:7c:4e:a2:0d:e8:0f:5a:e0: 7c:d2:70:5a:ff:e1:fc:89:b0:90:69:4a:03:9e:82: c5:b2:8d:06:29:b2:28:d6:e0:1a:43:1f:09:21:1b: c1:0c:97:7b:cf:4d:8d:00:86:f4:9b:7e:01:8a:ea: 5a:89:41:7a:4a:a9:c0:6a:37:e2:0f:b2:5d:4c:63: 46:a8:3b:d0:71:75:5b:a0:c2:e7:b0:05:69:5f:27: 80:14:72:42:19:9b:e8:61:58:c0:f0:eb:41:a4:3f: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:88:65:0B:54:41:0D:FF:0A:A3:F9:E2:F0:59:AE:DD:1C:03:38:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl X509v3 Authority Key Identifier: keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer sbgp-ipAddrBlock: critical IPv4: 65.38.48.0/20 72.35.192.0/20 216.228.192.0/20 IPv6: 2607:f248::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e8:0d:37:32:93:14:33:34:dd:36:59:03:b6:2d:49:98:5d: c9:69:ae:6b:66:91:b4:c8:e6:f3:bb:be:10:d3:5d:d5:f1:21: e0:a6:91:80:04:ad:cf:6f:09:a3:6b:a1:b5:86:32:1d:66:19: 94:25:05:4b:20:c3:4a:b4:27:e8:69:47:3f:e1:b9:cb:64:7a: b4:1b:ef:b6:a3:07:0e:53:70:b0:2d:9e:80:0a:df:52:09:97: 3e:a6:c4:57:7b:a4:ae:b2:6b:88:78:0d:8c:97:1f:d5:2b:03: a0:e1:b7:a5:08:69:5c:79:46:62:c6:00:a2:bb:cb:fd:b2:98: 30:d6:4d:ba:5f:36:2f:2d:04:11:64:00:a1:ac:c0:9d:30:88: 8a:e2:05:72:de:67:aa:74:fa:1b:aa:e3:77:1a:ba:73:16:7b: 3d:89:83:0f:16:73:7c:fc:2c:b0:3d:2d:9b:f2:b0:b7:94:bd: 81:e7:aa:d2:05:01:3f:04:3d:d6:85:b8:22:66:31:66:dc:e4: 22:d5:3e:15:ac:52:72:38:b1:81:9f:66:54:9d:7f:9d:4d:fa: 87:55:46:47:34:70:b4:d1:a0:a9:51:4a:96:f9:c5:8f:39:72: cb:23:5c:35:7b:06:f3:3d:d6:a3:f3:6b:97:4e:1f:e8:e8:65: da:76:16:70 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEunzRh+EvXhJdVBSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm Zjg0MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YThhZWM0YmYtZmEyNS00ZDRiLThiY2EtMTc5MTQzMTkzOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL+cl6xzvO4sKweJ9q5vujoCRhunAVFdBRa/ uyqY6Fs/HmH63f9RCIs/GcO+OM1YWmQmeh0iXtN7g4nk1lUw5pByCp4lfdB56wwM riLXhkgcAQOU5iCwAu+5OwSOLKMZuXxb1uwqfPxQrK7nZ/FBN66YTHcjzzSqvnVD EXORso1kOB/a/iyP3BeRKgejiCTQGAR073MvXpt3emqvfE6iDegPWuB80nBa/+H8 ibCQaUoDnoLFso0GKbIo1uAaQx8JIRvBDJd7z02NAIb0m34BiupaiUF6SqnAajfi D7JdTGNGqDvQcXVboMLnsAVpXyeAFHJCGZvoYVjA8OtBpD9wDQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFN6IZQtUQQ3/CqP54vBZrt0cAziiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvZTcwZDAwZGUtYmEzYi0z Mjk4LWE4NjItYjhlNjNkZjI0ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5 MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw MDVmM2ZmODQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQSYwAwQE SCPAAwQE2OTAMA0EAgACMAcDBQAmB/JIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIzoDTcykxQzNN02WQO2 LUmYXclprmtmkbTI5vO7vhDTXdXxIeCmkYAErc9vCaNrobWGMh1mGZQlBUsgw0q0 J+hpRz/huctkerQb77ajBw5TcLAtnoAK31IJlz6mxFd7pK6ya4h4DYyXH9UrA6Dh t6UIaVx5RmLGAKK7y/2ymDDWTbpfNi8tBBFkAKGswJ0wiIriBXLeZ6p0+huq43ca unMWez2Jgw8Wc3z8LLA9LZvysLeUvYHnqtIFAT8EPdaFuCJmMWbc5CLVPhWsUnI4 sYGfZlSdf51N+odVRkc0cLTRoKlRSpb5xY85cssjXDV7BvM91qPza5dOH+joZdp2 FnA= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:34 2025 by rpki-client