$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa File: 5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa (raw, json) Hash identifier: qbSFhriM2qflgxetG5s3tGKfP9eya/BIQlth2yc86MM= Subject key identifier: 63:BE:1F:54:BB:62:E1:E5:A0:16:85:5F:42:9C:27:50:63:94:50:25 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584B80B7537B69433A6F25B0E000 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 6653 IP address blocks: 64.17.16.0/20 maxlen: 24 66.118.192.0/19 maxlen: 24 68.64.208.0/20 maxlen: 24 74.112.16.0/22 maxlen: 24 199.7.152.0/22 maxlen: 24 204.10.24.0/22 maxlen: 24 205.201.192.0/19 maxlen: 24 206.124.0.0/19 maxlen: 24 208.72.80.0/22 maxlen: 24 216.98.192.0/20 maxlen: 24 216.241.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:53:7b:69:43:3a:6f:25:b0:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=241b867a-64ae-4313-a262-bdd05b75727d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:e0:3b:c3:a6:46:6f:ee:3d:3b:b6:53:5b: d2:f9:0c:63:d7:79:e9:59:23:96:70:ec:f2:9b:2b: cb:77:fe:bf:48:4d:97:78:df:b0:5e:c3:0b:cf:25: c2:50:32:05:82:e1:3e:39:66:92:55:8a:d6:e0:58: 70:59:ec:6f:df:66:13:34:db:25:5e:79:10:a9:ba: 14:83:6b:8d:1a:e7:cd:5d:e7:62:7c:4d:8c:a0:e7: b0:6c:39:b6:2b:57:7b:95:61:c2:eb:26:08:81:30: 8a:2a:9a:0b:81:77:bf:05:a2:4d:1d:4c:5a:77:19: 10:b2:b9:f6:79:96:fc:44:50:93:96:a2:da:96:70: 95:bc:f8:99:31:30:8b:5e:c3:b1:31:72:bf:96:ba: f5:ff:ed:12:75:77:ac:61:76:c7:47:58:3f:e7:69: aa:2a:30:ef:ea:1e:c4:23:79:27:f0:2a:aa:bc:b8: de:19:de:f6:e9:02:62:aa:89:0f:5f:0b:cb:eb:d8: c0:a9:cf:07:44:05:72:06:e0:10:f0:02:49:f3:43: b8:23:f2:7f:ee:a5:23:09:b1:83:96:a0:2a:18:76: 21:71:e5:cd:f2:8b:b4:83:24:44:7c:bd:d6:bc:e5: 0c:b4:5d:00:4d:c6:96:53:4e:29:fa:6c:dd:08:7b: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BE:1F:54:BB:62:E1:E5:A0:16:85:5F:42:9C:27:50:63:94:50:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ba48d52-7afb-3b8c-a2b1-f257684a40fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 64.17.16.0/20 66.118.192.0/19 68.64.208.0/20 74.112.16.0/22 199.7.152.0/22 204.10.24.0/22 205.201.192.0/19 206.124.0.0/19 208.72.80.0/22 216.98.192.0/20 216.241.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c9:01:73:56:c1:9e:cb:af:82:c3:df:ff:9f:52:a2:30:e8: 80:49:2f:dd:96:eb:5d:87:a0:e8:d5:3e:e9:44:60:f1:91:eb: b4:1a:3d:71:dc:6b:57:9f:92:e5:0f:8f:72:23:00:b0:01:d1: f6:e5:d0:ce:13:db:d4:ee:af:aa:9f:ef:b2:04:1d:18:bd:54: aa:b3:1d:f6:2a:61:b1:ee:d0:78:da:bb:62:af:26:d4:3f:da: 52:71:d2:0b:c9:5c:cf:e0:35:36:e0:ae:3d:6f:63:ed:fb:45: bb:8b:04:b1:59:97:44:f0:dd:b3:bf:cb:ce:e7:84:3a:31:09: ad:80:f7:89:c4:37:7b:3b:5d:84:46:37:90:a9:3b:52:f3:36: 86:bf:5e:df:1b:d6:b2:05:36:cb:cd:43:0e:87:83:ea:14:8d: d0:a0:45:70:e4:a9:ba:81:49:70:e4:31:ab:69:13:7f:6a:eb: d6:36:23:2f:c3:0f:9f:e0:63:44:4f:93:6a:7d:da:96:0e:ee: 4a:a9:85:78:67:55:95:67:63:2b:ca:bc:8f:fb:b0:c1:f1:cb: 73:fc:81:93:a0:60:09:6f:76:1d:1c:09:a7:a8:3c:97:e6:82: fc:b3:b2:39:d7:24:cd:b4:de:49:ba:51:14:b8:0e:78:18:3c: 50:9a:8e:65 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEuAt1N7aUM6byWw4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MjQxYjg2N2EtNjRhZS00MzEzLWEyNjItYmRkMDViNzU3MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv7gO8OmRm/uPTu2U1vS+Qxj13npWSOWcOzy myvLd/6/SE2XeN+wXsMLzyXCUDIFguE+OWaSVYrW4FhwWexv32YTNNslXnkQqboU g2uNGufNXedifE2MoOewbDm2K1d7lWHC6yYIgTCKKpoLgXe/BaJNHUxadxkQsrn2 eZb8RFCTlqLalnCVvPiZMTCLXsOxMXK/lrr1/+0SdXesYXbHR1g/52mqKjDv6h7E I3kn8CqqvLjeGd726QJiqokPXwvL69jAqc8HRAVyBuAQ8AJJ80O4I/J/7qUjCbGD lqAqGHYhceXN8ou0gyREfL3WvOUMtF0ATcaWU04p+mzdCHugjwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFGO+H1S7YuHloBaFX0KcJ1BjlFAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvNWJhNDhkNTItN2FmYi0z YjhjLWEyYjEtZjI1NzY4NGE0MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQEQBEQAwQF QnbAAwQEREDQAwQCSnAQAwQCxweYAwQCzAoYAwQFzcnAAwQFznwAAwQC0EhQAwQE 2GLAAwQE2PEgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAbJAXNWwZ7Lr4LD3/+fUqIw6IBJL92W612HoOjV PulEYPGR67QaPXHca1efkuUPj3IjALAB0fbl0M4T29Tur6qf77IEHRi9VKqzHfYq YbHu0Hjau2KvJtQ/2lJx0gvJXM/gNTbgrj1vY+37RbuLBLFZl0Tw3bO/y87nhDox Ca2A94nEN3s7XYRGN5CpO1LzNoa/Xt8b1rIFNsvNQw6Hg+oUjdCgRXDkqbqBSXDk MatpE39q69Y2Iy/DD5/gY0RPk2p92pYO7kqphXhnVZVnYyvKvI/7sMHxy3P8gZOg YAlvdh0cCaeoPJfmgvyzsjnXJM203km6URS4DngYPFCajmU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:05 2025 by rpki-client