$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/6cc9f2b6-a293-38fd-b829-b472566add5a.roa File: 6cc9f2b6-a293-38fd-b829-b472566add5a.roa (raw, json) Hash identifier: i7pTcIEk501/jVR/Mmallyrnkr/buYIA4nDkZbFHC1o= Subject key identifier: 5C:19:C1:E6:15:3D:CC:ED:78:D9:1E:68:7E:E7:92:80:B8:F8:E5:01 Certificate issuer: /CN=e40b4e7a-a72c-4ef8-af14-c8155fe067f4 Certificate serial: 010D0C9F4328584B995CAEAD36A709A1A9948320 Authority key identifier: 94:F3:93:F5:44:33:50:55:94:C3:71:C1:04:09:C8:75:B6:AF:48:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/6cc9f2b6-a293-38fd-b829-b472566add5a.roa Signing time: Tue 21 Oct 2025 20:53:07 +0000 ROA not before: Tue 21 Oct 2025 20:53:07 +0000 ROA not after: Mon 19 Jan 2026 21:53:07 +0000 asID: 397320 IP address blocks: 204.63.173.0/24 maxlen: 24 2602:f738::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:5c:ae:ad:36:a7:09:a1:a9:94:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e40b4e7a-a72c-4ef8-af14-c8155fe067f4 Validity Not Before: Oct 21 20:53:07 2025 GMT Not After : Jan 19 21:53:07 2026 GMT Subject: CN=2de29591-2b79-4f40-95a2-85a8819e2125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:28:11:a4:1c:13:89:38:a9:c9:5c:5e:e4: b2:80:1a:d4:b4:9b:2c:6b:12:5a:db:12:3e:09:f9: b8:bf:a1:de:11:a4:3b:d5:7d:2a:67:3b:82:25:c0: db:d9:3f:27:ab:7f:60:f2:dc:7f:f5:7f:b3:ac:30: e1:62:c7:6e:23:52:a3:8f:b1:da:ea:fe:b2:09:f1: 50:76:57:8f:7d:1d:7b:8c:c2:e1:ec:2c:ba:a3:18: 08:f0:c3:36:06:db:79:0f:cd:24:9c:c4:0f:84:e7: de:63:6b:f2:d5:47:9c:6c:ac:bd:6f:40:fc:a9:5e: 83:55:4e:17:0e:ca:d6:00:2d:f9:1e:ad:c6:65:df: 14:c5:2e:59:b8:db:e3:4c:8c:06:b5:b1:c8:63:d2: 31:b3:60:af:b5:ee:b4:81:59:29:3e:f1:b4:1e:fc: e5:f3:fb:ec:11:22:37:86:49:f3:14:14:d4:23:2b: d1:a7:17:aa:85:11:48:9c:28:19:24:da:07:9e:ef: 13:0c:c1:29:f4:88:a9:00:f3:6c:fd:4f:50:c1:aa: dc:19:1d:c4:c1:b0:39:52:15:cb:ae:5a:a1:8e:ec: 30:fd:0b:88:cc:f7:56:c8:ad:f7:38:92:d4:2a:4e: 5e:7e:5f:53:ee:ed:0f:ca:54:28:1d:30:aa:7b:ef: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:19:C1:E6:15:3D:CC:ED:78:D9:1E:68:7E:E7:92:80:B8:F8:E5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/6cc9f2b6-a293-38fd-b829-b472566add5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.crl X509v3 Authority Key Identifier: keyid:94:F3:93:F5:44:33:50:55:94:C3:71:C1:04:09:C8:75:B6:AF:48:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e40b4e7a-a72c-4ef8-af14-c8155fe067f4.cer sbgp-ipAddrBlock: critical IPv4: 204.63.173.0/24 IPv6: 2602:f738::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ec:9e:fb:ab:a6:ff:81:84:ca:14:fc:a7:45:36:e0:c0:d1: 46:cc:08:4a:cf:98:96:0a:3f:dd:2a:a1:e0:c1:90:2d:a2:25: b4:95:36:33:b2:13:74:69:f4:09:d9:f9:52:6d:ea:51:0e:b7: 56:9d:ad:02:bd:0b:83:41:b7:91:60:05:3a:00:cf:fc:a3:82: 2c:96:c2:4f:8c:bb:be:7f:46:86:ec:67:fc:a7:22:0c:6d:69: 54:da:82:57:94:1e:96:5e:bb:36:ec:15:a6:db:64:1e:7a:e1: 48:2d:6a:f7:72:f8:02:19:24:fe:3f:92:c0:15:73:d3:9f:ce: 55:3c:5e:39:24:1f:0f:c2:df:79:a2:98:cf:80:05:b4:d4:00: ec:27:8e:e8:b2:bd:75:07:4c:15:f3:e0:a6:86:26:ed:a1:02: b1:9e:72:3d:42:b5:2c:06:83:4c:fd:38:fb:f7:8d:e9:77:48: a8:83:ae:0b:ea:af:60:29:db:81:59:20:5c:67:52:e3:e8:43: 5c:55:40:93:de:a4:44:ae:1e:2a:81:89:9b:cb:64:4a:d7:94: 0b:ce:29:92:b3:63:e6:d1:03:43:dc:4e:c6:ea:1c:49:cc:aa: 10:4a:2d:60:03:64:9b:9b:f0:37:ff:e2:a0:41:e5:94:28:fa: 7f:92:76:0f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuZXK6tNqcJoamUgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwYjRlN2EtYTcyYy00ZWY4LWFmMTQtYzgxNTVmZTA2 N2Y0MB4XDTI1MTAyMTIwNTMwN1oXDTI2MDExOTIxNTMwN1owLzEtMCsGA1UEAxMk MmRlMjk1OTEtMmI3OS00ZjQwLTk1YTItODVhODgxOWUyMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfQoEaQcE4k4qclcXuSygBrUtJssaxJa2xI+ Cfm4v6HeEaQ71X0qZzuCJcDb2T8nq39g8tx/9X+zrDDhYsduI1Kjj7Ha6v6yCfFQ dlePfR17jMLh7Cy6oxgI8MM2Btt5D80knMQPhOfeY2vy1UecbKy9b0D8qV6DVU4X DsrWAC35Hq3GZd8UxS5ZuNvjTIwGtbHIY9Ixs2Cvte60gVkpPvG0Hvzl8/vsESI3 hknzFBTUIyvRpxeqhRFInCgZJNoHnu8TDMEp9IipAPNs/U9QwarcGR3EwbA5UhXL rlqhjuww/QuIzPdWyK33OJLUKk5efl9T7u0PylQoHTCqe+8TOQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFwZweYVPczteNkeaH7nkoC4+OUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNDBi NGU3YS1hNzJjLTRlZjgtYWYxNC1jODE1NWZlMDY3ZjQvNmNjOWYyYjYtYTI5My0z OGZkLWI4MjktYjQ3MjU2NmFkZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZTQwYjRlN2EtYTcyYy00ZWY4LWFm MTQtYzgxNTVmZTA2N2Y0L2U0MGI0ZTdhLWE3MmMtNGVmOC1hZjE0LWM4MTU1ZmUw NjdmNC5jcmwwHwYDVR0jBBgwFoAUlPOT9UQzUFWUw3HBBAnIdbavSNYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lNDBiNGU3YS1hNzJjLTRlZjgtYWYxNC1jODE1 NWZlMDY3ZjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzD+tMA4E AgACMAgDBgAmAvc4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG7J77q6b/gYTKFPynRTbgwNFGzAhKz5iW Cj/dKqHgwZAtoiW0lTYzshN0afQJ2flSbepRDrdWna0CvQuDQbeRYAU6AM/8o4Is lsJPjLu+f0aG7Gf8pyIMbWlU2oJXlB6WXrs27BWm22QeeuFILWr3cvgCGST+P5LA FXPTn85VPF45JB8Pwt95opjPgAW01ADsJ47osr11B0wV8+CmhibtoQKxnnI9QrUs BoNM/Tj7943pd0iog64L6q9gKduBWSBcZ1Lj6ENcVUCT3qRErh4qgYmby2RK15QL zimSs2Pm0QND3E7G6hxJzKoQSi1gA2Sbm/A3/+KgQeWUKPp/knYP -----END CERTIFICATE-----Generated at Wed Nov 5 16:51:41 2025 by rpki-client