$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa File: cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa (raw, json) Hash identifier: BJ/SxXf3upms486kJP8HmKSe2z2UkN0FGYG0txtC1RY= Subject key identifier: 59:A3:C0:72:FC:25:31:B8:EA:62:8B:6D:6D:FA:2D:FB:8D:C1:7B:C1 Certificate issuer: /CN=adf336cd-e30b-4fd4-a132-8eede3026803 Certificate serial: 010D0C9F4328584B3AEC4130232239EF6A3F9100 Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 46 IP address blocks: 128.6.0.0/16 maxlen: 24 130.219.0.0/16 maxlen: 24 165.230.0.0/16 maxlen: 24 192.12.88.0/24 maxlen: 24 198.151.130.0/24 maxlen: 24 2620:0:d60::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:41:30:23:22:39:ef:6a:3f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=7dfc6e50-0d10-49a2-b5f5-5f1a18c5401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:f1:39:05:76:59:8d:f2:df:5d:f1:d1:73: cf:46:b2:de:ac:c7:47:8e:b9:69:3d:78:86:77:1d: b4:3f:61:2a:84:27:9a:a5:25:2e:24:ac:c6:06:fa: 69:75:62:3b:00:f0:af:40:97:49:c0:bc:1e:33:47: 86:e5:4b:f3:b5:1a:d2:29:b2:bf:b9:3d:17:15:fc: e1:3c:b9:6c:93:b7:16:3a:bf:45:30:43:28:75:2c: 68:73:60:5c:3c:e9:20:24:6d:a2:22:3d:af:83:93: 01:ae:d8:18:1f:99:34:ed:73:52:00:fe:7c:d6:8d: 14:e4:f4:78:0d:92:1e:e5:51:56:e5:89:6f:96:80: 0d:7a:0a:44:19:52:3f:c2:d7:5e:87:0c:df:df:a0: d8:f7:c8:f2:dd:12:10:15:9b:53:fc:fe:91:f9:13: ac:b1:46:56:ef:d9:f5:e0:ab:12:8a:95:99:93:8d: 9c:58:b2:09:72:da:23:14:6c:88:fd:50:5a:e3:a0: bc:1e:6e:72:dd:59:14:0f:7f:67:6c:d4:00:cb:d0: 28:2e:48:f8:e9:fd:74:6a:f7:ba:40:ce:b2:f3:91: eb:bc:a1:f6:ff:26:44:1b:52:86:e2:8f:a9:55:b2: 93:87:a7:77:1a:89:d3:ea:99:a0:7d:69:c2:97:2c: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A3:C0:72:FC:25:31:B8:EA:62:8B:6D:6D:FA:2D:FB:8D:C1:7B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl X509v3 Authority Key Identifier: keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer sbgp-ipAddrBlock: critical IPv4: 128.6.0.0/16 130.219.0.0/16 165.230.0.0/16 192.12.88.0/24 198.151.130.0/24 IPv6: 2620:0:d60::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ee:7d:8a:91:09:90:78:e4:65:ac:97:f3:47:4b:0e:80:2b: 1e:4f:1a:95:a5:2f:1c:f0:67:f0:c7:7d:94:fd:81:22:65:a4: 64:69:1b:52:91:9b:49:0e:76:f8:0c:cd:1c:49:d9:10:9d:90: db:ac:19:6b:d6:db:69:87:3c:22:de:2f:f0:58:66:dc:88:25: 03:3a:f8:0a:5f:98:c1:98:a3:60:79:af:12:d3:c6:db:a3:8a: 37:6f:e0:e5:23:58:aa:f5:c7:83:89:fa:61:c7:44:ce:03:04: 83:1d:80:04:f1:44:f5:1b:84:50:5b:70:6d:2d:ff:10:56:16: 58:78:a3:30:5f:76:41:4c:8d:67:a4:11:96:58:a3:61:97:ab: 54:5c:4d:03:c3:3d:d1:89:2d:0c:ab:8e:50:1f:b4:03:26:db: 01:24:a7:bf:78:17:fc:af:d3:be:2f:16:57:43:8f:07:b4:c4: 75:8d:4c:29:1b:28:37:a7:48:72:29:22:64:39:01:4d:99:9b: be:10:67:63:19:19:33:a7:aa:c1:74:e2:17:65:e2:3c:07:b1: 1c:a1:fe:04:01:9e:11:48:e5:de:b4:bd:86:7c:8f:76:26:24: ff:7f:0c:c9:99:3f:9b:04:cf:0e:d3:15:57:e6:03:d4:f7:64: 98:ad:ae:1c -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEs67EEwIyI572o/kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2 ODAzMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk N2RmYzZlNTAtMGQxMC00OWEyLWI1ZjUtNWYxYTE4YzU0MDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjxOQV2WY3y313x0XPPRrLerMdHjrlpPXiG dx20P2EqhCeapSUuJKzGBvppdWI7APCvQJdJwLweM0eG5UvztRrSKbK/uT0XFfzh PLlsk7cWOr9FMEModSxoc2BcPOkgJG2iIj2vg5MBrtgYH5k07XNSAP581o0U5PR4 DZIe5VFW5YlvloANegpEGVI/wtdehwzf36DY98jy3RIQFZtT/P6R+ROssUZW79n1 4KsSipWZk42cWLIJctojFGyI/VBa46C8Hm5y3VkUD39nbNQAy9AoLkj46f10ave6 QM6y85HrvKH2/yZEG1KG4o+pVbKTh6d3GonT6pmgfWnClyxUMQIDAQABo4IDezCC A3cwHQYDVR0OBBYEFFmjwHL8JTG46mKLbW36LfuNwXvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvY2ZlZmU5ZDQtNWFkOS0z ZjJjLTg2OTItZjhiZmRmZDA3Yzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk ZTMwMjY4MDMuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAhBAIAATAbAwMAgAYDAwCC 2wMDAKXmAwQAwAxYAwQAxpeCMA8EAgACMAkDBwImIAAADWAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP+59 ipEJkHjkZayX80dLDoArHk8alaUvHPBn8Md9lP2BImWkZGkbUpGbSQ52+AzNHEnZ EJ2Q26wZa9bbaYc8It4v8Fhm3IglAzr4Cl+YwZijYHmvEtPG26OKN2/g5SNYqvXH g4n6YcdEzgMEgx2ABPFE9RuEUFtwbS3/EFYWWHijMF92QUyNZ6QRllijYZerVFxN A8M90YktDKuOUB+0AybbASSnv3gX/K/Tvi8WV0OPB7TEdY1MKRsoN6dIcikiZDkB TZmbvhBnYxkZM6eqwXTiF2XiPAexHKH+BAGeEUjl3rS9hnyPdiYk/38MyZk/mwTP DtMVV+YD1PdkmK2uHA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:04 2025 by rpki-client