$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8426f0f-01d0-30b4-81c8-0a4e4f6eae5c.roa File: d8426f0f-01d0-30b4-81c8-0a4e4f6eae5c.roa (raw, json) Hash identifier: qc5BrMPla6f1Qo3H/Uw8tvDA3JVKOvguARQO+8dzONk= Subject key identifier: E4:AC:1D:7C:C0:C2:BD:66:09:80:ED:BC:6F:F3:09:58:F8:78:01:95 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BA8BFD0F8E7A9AE34391CF180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8426f0f-01d0-30b4-81c8-0a4e4f6eae5c.roa Signing time: Mon 27 Oct 2025 09:09:59 +0000 ROA not before: Mon 27 Oct 2025 09:09:59 +0000 ROA not after: Sun 25 Jan 2026 10:09:59 +0000 asID: 2914 IP address blocks: 64.139.8.0/24 maxlen: 24 64.139.9.0/24 maxlen: 24 64.139.12.0/24 maxlen: 24 64.139.13.0/24 maxlen: 24 64.139.14.0/24 maxlen: 24 64.139.15.0/24 maxlen: 24 66.80.61.0/24 maxlen: 24 69.3.212.0/24 maxlen: 24 69.3.213.0/24 maxlen: 24 69.3.214.0/24 maxlen: 24 69.3.215.0/24 maxlen: 24 69.3.232.0/24 maxlen: 24 69.3.233.0/24 maxlen: 24 69.3.234.0/24 maxlen: 24 69.3.235.0/24 maxlen: 24 69.3.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:bf:d0:f8:e7:a9:ae:34:39:1c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 27 09:09:59 2025 GMT Not After : Jan 25 10:09:59 2026 GMT Subject: CN=f394352f-d0e5-4143-8dcd-6e4e8e187724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:68:42:93:98:2c:48:5f:29:2e:61:5a:db: 7b:6b:74:ff:dd:fa:f3:3a:d8:f6:4b:c7:25:56:d1: 9c:4e:da:b9:54:ac:92:25:63:84:98:6a:18:63:84: c6:8d:23:b4:83:3d:65:f7:28:2d:c0:be:80:fd:86: ca:44:1d:6b:42:bd:8b:2a:44:94:19:8d:8f:d1:90: 7e:7a:67:ed:d8:ac:de:1e:17:0b:46:19:bc:36:85: ff:e4:da:77:24:7c:ae:ce:da:3a:ab:c5:17:c7:30: 21:55:0b:38:fb:99:bf:ec:8b:00:ca:36:a9:22:2c: d5:8e:ae:d6:65:6a:26:4b:15:79:ad:f2:36:51:82: 83:14:56:9b:2d:d0:f7:17:65:2d:ef:fe:f5:14:5b: f0:d9:ea:45:27:c3:63:4c:f4:ab:6b:c6:1a:8e:74: 6c:48:ee:e6:97:a9:7b:c1:9e:86:dd:ae:17:3f:94: dc:13:8e:10:b1:a1:98:6f:4e:3e:c8:7f:9e:ba:e9: ee:a8:bb:25:8f:f0:59:cc:4a:bf:b2:8b:92:1f:d7: 13:9d:ff:63:6d:ec:f1:80:09:41:7a:fe:e0:ff:4d: a7:94:db:47:f7:3b:dd:e1:11:98:9d:8f:59:bb:ba: cd:10:57:fc:3c:68:28:b2:b4:87:e3:5b:18:80:54: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AC:1D:7C:C0:C2:BD:66:09:80:ED:BC:6F:F3:09:58:F8:78:01:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d8426f0f-01d0-30b4-81c8-0a4e4f6eae5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.139.8.0/23 64.139.12.0/22 66.80.61.0/24 69.3.212.0/22 69.3.232.0/22 69.3.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:be:02:13:a4:74:39:4b:5a:42:9a:8d:e7:3e:f3:cc:74:f8: 8f:8e:4f:bf:c3:10:f8:b7:4d:80:c3:39:b5:9e:65:76:5c:2a: d1:d9:32:aa:20:7d:6e:0f:02:cb:ce:1b:af:be:47:45:0f:97: d8:06:f7:72:9d:07:0a:08:8b:e3:b1:27:39:05:29:38:e1:4e: 70:79:51:62:f2:6b:5b:99:70:34:58:02:dd:13:0e:d6:d3:f6: 16:31:46:f9:71:d8:0b:83:ab:c5:92:7f:e6:c2:94:23:93:46: 9d:ce:71:4a:30:ad:c1:08:cf:37:18:3e:cd:4f:ab:ed:6e:41: f5:e9:54:9e:15:04:67:13:84:4d:53:74:d0:27:a2:54:cc:47: 27:32:62:a4:1a:12:e1:14:02:af:ff:44:c9:1e:56:d9:ca:aa: 0e:35:72:c4:08:53:b1:53:02:93:32:30:49:1f:8a:db:5c:99: 9a:f0:22:c1:38:32:cf:db:68:05:9f:33:56:5b:1f:ab:1d:74: a2:50:e9:91:21:75:1c:43:7e:1d:1e:cf:29:cd:98:73:fe:f2: 65:ae:ad:85:ad:b7:39:3b:bf:73:bd:c5:9d:17:db:32:f3:8b: eb:e8:da:19:84:e8:a9:11:78:f3:2e:aa:60:71:54:50:82:0b: 18:0f:dd:37 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEuov9D456muNDkc8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAyNzA5MDk1OVoXDTI2MDEyNTEwMDk1OVowLzEtMCsGA1UEAxMk ZjM5NDM1MmYtZDBlNS00MTQzLThkY2QtNmU0ZThlMTg3NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHdoQpOYLEhfKS5hWtt7a3T/3frzOtj2S8cl VtGcTtq5VKySJWOEmGoYY4TGjSO0gz1l9ygtwL6A/YbKRB1rQr2LKkSUGY2P0ZB+ emft2KzeHhcLRhm8NoX/5Np3JHyuzto6q8UXxzAhVQs4+5m/7IsAyjapIizVjq7W ZWomSxV5rfI2UYKDFFabLdD3F2Ut7/71FFvw2epFJ8NjTPSra8YajnRsSO7ml6l7 wZ6G3a4XP5TcE44QsaGYb04+yH+euunuqLslj/BZzEq/souSH9cTnf9jbezxgAlB ev7g/02nlNtH9zvd4RGYnY9Zu7rNEFf8PGgosrSH41sYgFQahwIDAQABo4IDczCC A28wHQYDVR0OBBYEFOSsHXzAwr1mCYDtvG/zCVj4eAGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDg0MjZmMGYtMDFkMC0z MGI0LTgxYzgtMGE0ZTRmNmVhZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBQIsIAwQC QIsMAwQAQlA9AwQCRQPUAwQCRQPoAwQARQPtMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ++AhOkdDlLWkKa jec+88x0+I+OT7/DEPi3TYDDObWeZXZcKtHZMqogfW4PAsvOG6++R0UPl9gG93Kd BwoIi+OxJzkFKTjhTnB5UWLya1uZcDRYAt0TDtbT9hYxRvlx2AuDq8WSf+bClCOT Rp3OcUowrcEIzzcYPs1Pq+1uQfXpVJ4VBGcThE1TdNAnolTMRycyYqQaEuEUAq// RMkeVtnKqg41csQIU7FTApMyMEkfittcmZrwIsE4Ms/baAWfM1ZbH6sddKJQ6ZEh dRxDfh0ezynNmHP+8mWurYWttzk7v3O9xZ0X2zLzi+vo2hmE6KkRePMuqmBxVFCC CxgP3Tc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:54 2025 by rpki-client