$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa File: e75cf125-8715-3d14-8f55-bb352f87cf59.roa (raw, json) Hash identifier: 8/5a4S3OyT8AOFgXmodNm+SjSKeA+dI0XMAiTAi+SuQ= Subject key identifier: CD:00:19:DF:45:B1:D7:39:11:67:20:09:91:AF:78:44:EA:45:A9:AD Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Certificate serial: 010D0C9F4328584B9E07948A63849A13888BAE00 Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 11961 IP address blocks: 64.89.208.0/20 maxlen: 20 72.250.128.0/19 maxlen: 19 108.59.112.0/20 maxlen: 20 216.228.32.0/19 maxlen: 19 2607:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:94:8a:63:84:9a:13:88:8b:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8f2db229-49f0-40c5-8429-7d9671bebd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:ee:6e:ec:a2:78:54:f2:67:ea:42:9c:19: e4:4c:5c:2e:f5:85:59:64:b8:94:c5:ce:58:b2:72: 2e:4d:b9:1f:95:5f:f9:6b:1f:5d:6f:23:49:c5:d7: fe:41:ec:15:35:f4:9a:49:a4:89:01:4b:3c:4f:80: 30:4e:11:b9:1d:c2:f5:75:f9:e6:dd:5d:01:e8:13: 0f:ee:55:e0:63:01:8c:40:9a:65:57:3a:35:a6:28: 43:74:33:ec:d2:3c:fb:33:30:28:c0:09:25:8c:b9: 77:d6:f5:bb:85:0f:0f:ad:5f:9b:9a:f1:d1:9a:13: 31:dc:b8:48:75:3f:8b:4a:29:e7:4b:f5:5f:3b:65: 70:c7:a8:a4:79:61:bf:14:06:a2:2c:88:30:de:de: 8c:7f:e5:30:f0:d0:ac:58:72:7f:28:7a:c6:c1:c2: b9:48:f3:f7:68:54:96:52:43:1a:aa:45:9b:7e:a9: c4:50:e9:48:19:28:7b:0b:27:b2:ad:45:66:23:37: e0:ca:6f:58:f4:d6:5f:81:84:58:b6:55:a7:96:8b: 6a:50:fc:87:ff:28:27:a7:32:72:a2:f4:f8:6a:fc: 38:3f:f7:ea:b4:0f:93:16:ae:eb:68:00:1a:5c:2a: ce:81:bd:c0:29:9f:06:f5:47:1a:a9:d2:ee:eb:03: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:00:19:DF:45:B1:D7:39:11:67:20:09:91:AF:78:44:EA:45:A9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl X509v3 Authority Key Identifier: keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer sbgp-ipAddrBlock: critical IPv4: 64.89.208.0/20 72.250.128.0/19 108.59.112.0/20 216.228.32.0/19 IPv6: 2607:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:0e:9e:52:1c:5e:ec:02:ef:70:db:73:e3:d5:df:9d:4f:bc: 96:da:dc:92:2d:dd:03:57:65:08:20:ae:73:23:2b:d6:a3:74: ca:3d:5d:06:11:e9:e4:74:4c:bb:48:8e:2f:56:ba:89:9f:40: e8:06:c5:67:ae:52:38:64:b9:91:04:6e:7b:43:6f:07:83:6c: e2:c0:1b:15:08:a3:5f:26:c7:27:2f:c8:ad:59:fe:7f:8e:74: 74:59:91:59:31:41:31:b9:a8:f9:0a:64:a6:b8:b5:d9:f0:25: a7:21:d9:c6:d3:5d:1d:84:ae:8f:f8:a8:c2:2c:02:81:86:82: ee:f8:3a:60:36:b5:eb:d5:8d:cd:2d:19:54:7f:da:86:89:a8: e6:77:9d:6f:97:95:97:1f:dd:eb:44:6a:4c:c7:66:c5:16:4d: 2d:2d:b6:e5:b5:88:03:aa:fc:d0:78:9e:e7:8b:0b:c4:68:29: 72:4b:95:83:23:5c:f8:06:4b:7e:e7:9b:91:c7:7d:22:c3:23: b5:e4:62:aa:6d:43:03:24:21:a2:21:86:3a:b7:ef:12:48:dd: b5:31:85:3c:55:fb:bf:b7:cd:5e:be:63:55:76:a4:14:7e:21: fe:15:42:e7:95:74:cd:37:5a:af:8b:5c:26:e8:36:e4:9b:06: 0d:15:1f:97 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEueB5SKY4SaE4iLrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0 ZGFiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk OGYyZGIyMjktNDlmMC00MGM1LTg0MjktN2Q5NjcxYmViZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlTubuyieFTyZ+pCnBnkTFwu9YVZZLiUxc5Y snIuTbkflV/5ax9dbyNJxdf+QewVNfSaSaSJAUs8T4AwThG5HcL1dfnm3V0B6BMP 7lXgYwGMQJplVzo1pihDdDPs0jz7MzAowAkljLl31vW7hQ8PrV+bmvHRmhMx3LhI dT+LSinnS/VfO2Vwx6ikeWG/FAaiLIgw3t6Mf+Uw8NCsWHJ/KHrGwcK5SPP3aFSW UkMaqkWbfqnEUOlIGSh7CyeyrUVmIzfgym9Y9NZfgYRYtlWnlotqUPyH/ygnpzJy ovT4avw4P/fqtA+TFq7raAAaXCrOgb3AKZ8G9UcaqdLu6wN4/QIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFM0AGd9Fsdc5EWcgCZGveETqRamtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRk MmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvZTc1Y2YxMjUtODcxNS0z ZDE0LThmNTUtYmIzNTJmODdjZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjVkZDJmM2ItZDU0NC00YTkwLTg0 YTUtNThhZjBkYjg0ZGFiL2Y1ZGQyZjNiLWQ1NDQtNGE5MC04NGE1LTU4YWYwZGI4 NGRhYi5jcmwwHwYDVR0jBBgwFoAUKiF+2Cg60kH+z+XpHTI/wLeK9wswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFm MGRiODRkYWIuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQFnQAwQF SPqAAwQEbDtwAwQF2OQgMA0EAgACMAcDBQAmB4OAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFoOnlIcXuwC 73Dbc+PV351PvJba3JIt3QNXZQggrnMjK9ajdMo9XQYR6eR0TLtIji9WuomfQOgG xWeuUjhkuZEEbntDbweDbOLAGxUIo18mxycvyK1Z/n+OdHRZkVkxQTG5qPkKZKa4 tdnwJach2cbTXR2Ero/4qMIsAoGGgu74OmA2tevVjc0tGVR/2oaJqOZ3nW+XlZcf 3etEakzHZsUWTS0ttuW1iAOq/NB4nueLC8RoKXJLlYMjXPgGS37nm5HHfSLDI7Xk YqptQwMkIaIhhjq37xJI3bUxhTxV+7+3zV6+Y1V2pBR+If4VQueVdM03Wq+LXCbo NuSbBg0VH5c= -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:03 2025 by rpki-client