$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json) Hash identifier: 2AtUnQrjbNU6W17KxNVTV2F+zkv25BnUs1zwn9sALdk= Subject key identifier: 18:F1:9D:93:C0:A6:96:1D:FD:F3:1C:3A:E0:B4:8E:2F:55:B6:A1:A9 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F4328584BA93252419E607D04BD8DA980 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 19905 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:52:41:9e:60:7d:04:bd:8d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=e9f04a96-3998-4875-99b1-b9d69cdcd183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:a2:bc:8a:09:c5:a0:81:50:6e:26:6e:21: 77:32:01:b8:65:88:cb:47:0b:72:e3:4f:4f:16:b5: bc:47:4b:8f:a6:1f:5e:a1:55:24:7c:e1:e8:f9:c5: 96:7a:72:22:e5:2f:3f:d5:8e:a7:74:40:be:cf:25: 19:13:0c:5c:5f:4e:54:72:03:38:eb:1b:ce:b7:9e: db:9d:c5:96:ad:b8:14:03:87:70:00:60:fc:c2:72: 13:19:73:ea:f7:f9:06:47:c5:b1:b5:d5:cc:d6:24: a4:83:a1:ab:b7:8d:6d:71:22:7e:bc:10:74:f0:a4: eb:9a:b6:ea:8f:59:df:79:bf:ad:73:ea:d4:62:89: 98:ce:bc:c1:22:b7:82:4e:38:7a:6f:5b:fe:af:ed: fb:9d:eb:25:1c:8a:c3:45:8c:ad:4b:95:93:05:63: a5:4f:11:16:36:aa:fd:75:22:64:19:13:75:1e:e0: 05:03:65:e5:46:bc:8a:2d:95:fd:56:21:1f:44:07: ac:94:91:77:63:c2:9b:47:52:5a:83:df:33:80:09: e9:8f:f2:a3:5a:9b:d7:b7:88:9e:3a:92:02:ce:07: 38:00:dc:e9:81:cc:36:ea:d1:5c:29:26:d9:83:c7: 31:5b:cf:04:44:58:7f:7e:26:9d:a9:e0:8a:f2:fe: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F1:9D:93:C0:A6:96:1D:FD:F3:1C:3A:E0:B4:8E:2F:55:B6:A1:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b0:b0:b3:dd:2a:2c:d3:4e:83:14:7e:10:e1:0b:33:87:df: 6b:c4:57:c4:31:3f:0c:a5:a7:77:55:ed:a8:04:eb:b3:b0:cc: 9e:7a:c4:10:43:a7:bb:75:3b:61:88:22:8e:98:7b:f4:33:78: eb:cb:6a:1d:7b:2f:62:9e:ac:f9:66:35:49:a9:10:2e:26:4d: 79:c6:a9:62:26:92:34:12:4b:46:83:27:79:1b:8f:d8:36:12: e6:27:ca:20:e0:c4:c8:bc:d9:9f:5c:60:0a:f2:e4:1f:79:38: a1:41:84:e0:81:40:08:98:c4:a1:1f:7f:ca:e3:a3:a5:8d:e1: 00:22:c9:9b:49:15:2b:58:0d:e8:22:db:28:56:fa:b8:b1:ed: 5f:b4:9b:e7:fa:c5:a8:db:04:2e:0a:6b:3d:c1:37:c2:17:a6: ac:61:63:ee:79:c9:c9:4f:57:70:8b:14:42:62:7f:7f:84:8e: d2:36:82:78:9a:62:c4:ef:1e:f7:12:3d:73:aa:1d:6c:ca:3c: ed:33:b8:49:fc:ef:cd:38:18:f6:08:f3:cc:6a:71:26:d6:bc: 4f:29:60:77:83:4c:2e:56:28:47:cc:e6:f5:da:9c:05:cc:78: aa:ec:3c:88:a9:77:53:4a:de:f4:4d:fe:06:78:16:9d:83:f1: 92:bc:f4:4e -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEupMlJBnmB9BL2NqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZTlmMDRhOTYtMzk5OC00ODc1LTk5YjEtYjlkNjljZGNkMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw2ivIoJxaCBUG4mbiF3MgG4ZYjLRwty409P FrW8R0uPph9eoVUkfOHo+cWWenIi5S8/1Y6ndEC+zyUZEwxcX05UcgM46xvOt57b ncWWrbgUA4dwAGD8wnITGXPq9/kGR8WxtdXM1iSkg6Grt41tcSJ+vBB08KTrmrbq j1nfeb+tc+rUYomYzrzBIreCTjh6b1v+r+37neslHIrDRYytS5WTBWOlTxEWNqr9 dSJkGRN1HuAFA2XlRryKLZX9ViEfRAeslJF3Y8KbR1Jag98zgAnpj/KjWpvXt4ie OpICzgc4ANzpgcw26tFcKSbZg8cxW88ERFh/fiadqeCK8v4tUwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFBjxnZPAppYd/fMcOuC0ji9VtqGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvN2Y4YWI2M2ItODQ3Yi0z NGU2LWEzOTgtMzAxZDg0N2FkN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABSwsLPdKizTToMUfhDhCzOH32vEV8QxPwyl p3dV7agE67OwzJ56xBBDp7t1O2GIIo6Ye/QzeOvLah17L2KerPlmNUmpEC4mTXnG qWImkjQSS0aDJ3kbj9g2EuYnyiDgxMi82Z9cYAry5B95OKFBhOCBQAiYxKEff8rj o6WN4QAiyZtJFStYDegi2yhW+rix7V+0m+f6xajbBC4Kaz3BN8IXpqxhY+55yclP V3CLFEJif3+EjtI2gniaYsTvHvcSPXOqHWzKPO0zuEn87804GPYI88xqcSbWvE8p YHeDTC5WKEfM5vXanAXMeKrsPIipd1NK3vRN/gZ4Fp2D8ZK89E4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:47:11 2025 by rpki-client