$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa File: 4c2df8b8-1249-327f-9ed0-9487601f3975.roa (raw, json) Hash identifier: PFrM3qHDABMiPvW/ZwPVPRe8RmXSzo6zLB6/5uZymGE= Subject key identifier: BE:60:6A:FE:8A:EE:0F:5A:55:5E:80:2C:09:E4:CD:75:8E:C3:5C:07 Certificate issuer: /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Certificate serial: 010D0C9F4328584B438D3A114F888288D5BFF080 Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa Signing time: Sun 21 Sep 2025 03:11:25 +0000 ROA not before: Sun 21 Sep 2025 03:11:25 +0000 ROA not after: Sat 20 Dec 2025 04:11:25 +0000 asID: 10794 IP address blocks: 199.43.64.0/21 maxlen: 21 199.43.64.0/24 maxlen: 24 199.43.65.0/24 maxlen: 24 199.43.66.0/24 maxlen: 24 199.43.67.0/24 maxlen: 24 199.43.68.0/24 maxlen: 24 199.43.69.0/24 maxlen: 24 199.43.70.0/24 maxlen: 24 199.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:8d:3a:11:4f:88:82:88:d5:bf:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6 Validity Not Before: Sep 21 03:11:25 2025 GMT Not After : Dec 20 04:11:25 2025 GMT Subject: CN=fe3a1722-5c95-4fce-a417-a7867e1d34d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:69:a8:6e:8b:12:11:91:5f:33:c2:99:bb: b8:ad:80:25:2a:45:e6:b6:02:e5:38:d2:66:af:dd: 68:a8:64:5c:cb:b0:6e:dc:65:94:11:11:32:3c:10: 30:2b:f7:41:ae:66:b8:29:25:52:f6:7f:77:6c:39: 20:86:02:ca:70:43:f7:f7:0f:6a:f7:96:94:28:4b: 37:a7:f6:47:9d:47:70:b2:a6:ac:18:8b:99:02:a9: 0b:2b:e8:9c:8d:d2:c2:d3:50:e4:69:05:ba:80:cc: bb:0b:d7:4b:8e:05:11:ef:68:fc:9f:a6:c7:78:b5: 1b:dc:4a:ba:4d:7c:0a:69:51:1b:e6:11:5f:28:9d: 65:5f:97:9a:dd:26:4b:9c:11:ab:a7:65:eb:42:b7: 5f:af:00:0e:59:c4:b0:a8:47:c3:4a:e7:b2:b5:f4: b8:1d:2f:8d:52:5e:70:30:33:e1:6f:20:a5:ca:82: 6c:3b:cf:3a:3a:b0:7a:67:d7:92:48:7b:40:d5:25: df:4d:92:51:fe:5d:dc:fd:c3:85:7d:73:c5:5a:54: ce:87:e0:d7:b2:f9:9b:63:fc:1c:8b:fe:51:be:46: 14:f0:89:fc:52:2e:b6:47:ba:61:42:59:22:14:22: 80:52:18:62:c9:05:a3:8f:b0:45:5f:63:77:6f:f5: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:6A:FE:8A:EE:0F:5A:55:5E:80:2C:09:E4:CD:75:8E:C3:5C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4c2df8b8-1249-327f-9ed0-9487601f3975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl X509v3 Authority Key Identifier: keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer sbgp-ipAddrBlock: critical IPv4: 199.43.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c9:04:56:77:28:84:30:fb:5e:c6:50:a8:fb:b8:7d:bd:e6: d0:ab:de:3d:fe:9f:78:22:54:30:c8:eb:dc:2d:db:b4:22:e9: ec:b6:cc:a7:81:3c:ee:62:28:96:62:65:9a:ca:ce:82:3d:27: f7:3d:3a:2a:fd:12:6e:18:af:95:40:b5:8f:c1:99:d0:cc:02: e4:90:37:a4:59:1e:74:6b:0f:80:c2:50:c3:e3:1b:eb:cf:c0: ea:c2:4d:a6:0b:f8:ca:1a:99:d9:23:a2:40:ca:54:75:29:89: f9:aa:f5:99:46:5c:b1:5d:88:9c:98:60:0a:65:ec:34:35:31: 4f:8d:29:34:30:1e:2b:22:f9:1f:2b:01:d1:48:32:3d:76:c6: f9:9e:54:7f:2a:da:42:41:d5:92:b1:9d:f1:96:c4:e1:e1:b5: e5:f0:60:ee:99:8e:09:a4:fc:ab:e3:d8:ea:05:99:fd:01:dd: 33:5b:8c:58:44:35:f2:9e:26:15:5c:4f:cc:35:dd:f5:35:3c: 31:77:b7:5a:f9:3e:f9:62:a0:c8:29:cd:8b:93:97:79:91:21: 00:f3:7b:60:32:cb:c1:3b:43:5f:53:56:b9:e0:33:88:dc:bd: a6:54:45:a7:b8:50:d5:0f:70:22:23:7b:7d:09:c1:50:a9:1b: 0f:61:bd:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDjToRT4iCiNW/8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1 MWI2MB4XDTI1MDkyMTAzMTEyNVoXDTI1MTIyMDA0MTEyNVowLzEtMCsGA1UEAxMk ZmUzYTE3MjItNWM5NS00ZmNlLWE0MTctYTc4NjdlMWQzNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgBpqG6LEhGRXzPCmbu4rYAlKkXmtgLlONJm r91oqGRcy7Bu3GWUEREyPBAwK/dBrma4KSVS9n93bDkghgLKcEP39w9q95aUKEs3 p/ZHnUdwsqasGIuZAqkLK+icjdLC01DkaQW6gMy7C9dLjgUR72j8n6bHeLUb3Eq6 TXwKaVEb5hFfKJ1lX5ea3SZLnBGrp2XrQrdfrwAOWcSwqEfDSueytfS4HS+NUl5w MDPhbyClyoJsO886OrB6Z9eSSHtA1SXfTZJR/l3c/cOFfXPFWlTOh+DXsvmbY/wc i/5RvkYU8In8Ui62R7phQlkiFCKAUhhiyQWjj7BFX2N3b/Wb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5gav6K7g9aVV6ALAnkzXWOw1wHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvNGMyZGY4YjgtMTI0OS0z MjdmLTllZDAtOTQ4NzYwMWYzOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxytAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbJBFZ3KIQw+17GUKj7uH295tCr3j3+n3giVDDI69wt27Qi6ey2zKeB PO5iKJZiZZrKzoI9J/c9Oir9Em4Yr5VAtY/BmdDMAuSQN6RZHnRrD4DCUMPjG+vP wOrCTaYL+MoamdkjokDKVHUpifmq9ZlGXLFdiJyYYApl7DQ1MU+NKTQwHisi+R8r AdFIMj12xvmeVH8q2kJB1ZKxnfGWxOHhteXwYO6Zjgmk/Kvj2OoFmf0B3TNbjFhE NfKeJhVcT8w13fU1PDF3t1r5PvlioMgpzYuTl3mRIQDze2Ayy8E7Q19TVrngM4jc vaZURae4UNUPcCIje30JwVCpGw9hvac= -----END CERTIFICATE-----Generated at Wed Nov 5 14:00:16 2025 by rpki-client