$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa File: e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa (raw, json) Hash identifier: xn3/P/QCe7B6qT2SujFWGB2PYspd93k+Bd3TOAH+YtA= Subject key identifier: 56:BC:44:5F:41:FD:72:60:1C:71:0B:D4:3C:3D:F1:CA:E9:5E:5F:42 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584B2761831F57184EBAA003BD80 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 210110 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:83:1f:57:18:4e:ba:a0:03:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=48f56b79-23bb-4336-b780-52d810a5fb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:c4:36:08:5b:8a:ff:b2:ff:52:d5:94:58: 7d:77:0b:58:a0:42:82:f3:98:f1:3d:9b:eb:fc:f4: 51:f4:79:90:81:ee:e1:ef:49:85:bb:bc:3e:eb:27: 40:da:5a:fb:7e:f4:b7:b8:a6:15:bb:b7:7a:55:a5: cd:1c:5e:c7:3f:5e:cf:2a:ac:86:06:22:57:00:ac: 64:3d:5d:a4:91:87:d6:22:b1:41:33:0e:37:98:fe: c9:02:b4:41:b1:eb:18:fc:e9:ae:81:d6:72:ae:5d: 79:05:cd:92:73:b4:52:a0:50:79:22:96:42:82:4a: d4:a5:2d:7d:b4:a1:e8:d0:b1:8e:b2:a3:98:e8:85: aa:f5:fb:cc:b3:02:c3:15:43:31:67:a1:cf:69:0c: 1f:5d:80:81:c2:66:e6:96:5b:a9:a4:9d:37:a4:9f: 0e:5b:a9:b5:72:93:5a:f0:23:30:e9:5c:95:b7:33: a4:2e:00:59:56:85:72:f2:83:4d:6c:1d:48:71:10: ea:b9:1f:91:8a:5a:1d:da:cd:19:04:81:94:10:c9: 47:66:0c:3a:bb:44:a3:c3:68:ae:b3:69:cd:4f:c7: 0f:0f:0d:54:cc:37:35:ee:e2:be:73:65:50:54:9f: 43:dc:65:ed:fd:28:38:53:86:ea:84:8d:66:5c:df: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BC:44:5F:41:FD:72:60:1C:71:0B:D4:3C:3D:F1:CA:E9:5E:5F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:db:96:57:b3:60:58:14:7f:c0:be:a0:21:dd:87:74:2f:19: 16:e1:89:82:c1:73:27:bd:94:06:e1:d5:22:87:dc:ea:92:dc: c2:b6:e0:00:40:54:24:ec:57:9f:f0:7f:1b:4e:9a:ba:a1:5e: b8:be:81:ef:14:c5:7c:eb:87:cc:ab:20:59:d8:e8:28:b7:0e: cd:e2:d2:21:41:da:3f:ee:51:2d:e4:24:7f:4e:07:dc:7e:24: 4c:67:00:ec:4e:2e:e9:d8:cb:87:ae:f4:1f:bb:94:32:7d:99: 22:19:4e:e8:2a:d5:e3:95:d4:c6:77:68:05:08:c1:a6:1e:f8: 32:50:70:52:53:f5:9e:8a:15:c1:01:c5:7e:2a:b9:94:d8:88: 97:b0:d1:7c:cf:de:72:47:96:aa:55:28:fc:9d:38:fc:d4:d4: 7c:a3:05:52:d8:92:44:a2:60:b4:eb:a1:b8:1e:6d:31:1a:4c: 2f:7a:07:17:0a:86:a2:14:98:c1:5e:3d:21:ea:79:f8:ab:55: 1e:9d:6b:e4:fc:ab:91:2d:a4:83:5e:62:39:d2:ca:fd:2e:8a: 26:57:28:c1:6e:4e:45:c2:fa:3a:63:b2:66:c7:c6:86:85:cf: ec:e6:dd:d5:8b:33:54:7c:f0:47:33:61:d3:a8:fe:90:8d:0b: 29:6e:a9:b6 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEsnYYMfVxhOuqADvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk NDhmNTZiNzktMjNiYi00MzM2LWI3ODAtNTJkODEwYTVmYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzENghbiv+y/1LVlFh9dwtYoEKC85jxPZvr /PRR9HmQge7h70mFu7w+6ydA2lr7fvS3uKYVu7d6VaXNHF7HP17PKqyGBiJXAKxk PV2kkYfWIrFBMw43mP7JArRBsesY/OmugdZyrl15Bc2Sc7RSoFB5IpZCgkrUpS19 tKHo0LGOsqOY6IWq9fvMswLDFUMxZ6HPaQwfXYCBwmbmlluppJ03pJ8OW6m1cpNa 8CMw6VyVtzOkLgBZVoVy8oNNbB1IcRDquR+Rilod2s0ZBIGUEMlHZgw6u0Sjw2iu s2nNT8cPDw1UzDc17uK+c2VQVJ9D3GXt/Sg4U4bqhI1mXN87uQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFFa8RF9B/XJgHHEL1Dw98crpXl9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvZTA1OWI2ZjQtZmU0ZS0z ZDU0LTgwYWYtN2E3NGMwZjkwZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AI3bllezYFgUf8C+oCHdh3QvGRbhiYLBcye9lAbh1SKH3OqS3MK24ABAVCTsV5/w fxtOmrqhXri+ge8UxXzrh8yrIFnY6Ci3Ds3i0iFB2j/uUS3kJH9OB9x+JExnAOxO LunYy4eu9B+7lDJ9mSIZTugq1eOV1MZ3aAUIwaYe+DJQcFJT9Z6KFcEBxX4quZTY iJew0XzP3nJHlqpVKPydOPzU1HyjBVLYkkSiYLTrobgebTEaTC96BxcKhqIUmMFe PSHqefirVR6da+T8q5EtpINeYjnSyv0uiiZXKMFuTkXC+jpjsmbHxoaFz+zm3dWL M1R88EczYdOo/pCNCyluqbY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:59 2025 by rpki-client