$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa File: cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa (raw, json) Hash identifier: Z7FHXv/vrMqpC5KYsoCXPB1IG74CTjLouxUBr7Uw6ZY= Subject key identifier: 6B:6C:48:17:73:2C:C4:76:05:BD:54:FA:4C:AC:60:ED:3F:C1:C2:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B679778C791557817A697F600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 66.249.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:78:c7:91:55:78:17:a6:97:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=6a9c6766-f04a-4e11-b260-1c7473883e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:da:6c:9b:d2:6b:2d:ba:ad:f7:c8:74:48: 02:b0:45:76:72:ee:97:3a:1f:1f:92:a2:a7:3a:42: 05:b9:42:2b:27:4e:b9:64:5d:6d:54:e6:a7:c5:29: cb:dc:76:04:1c:d8:92:a2:18:2c:b7:e1:d4:4f:28: 63:d2:d4:08:b2:50:e9:59:9b:c7:51:32:f0:ea:f0: 7e:63:3e:45:0c:e9:2d:3d:21:ff:22:9e:e5:1f:7d: e3:06:f5:3f:86:16:af:7c:16:ea:6b:7f:4b:c4:cf: 97:84:d3:54:0e:57:09:8a:45:62:11:4e:9e:fb:80: 38:8b:f7:34:ad:f3:a8:15:93:2d:e4:45:d6:fa:b4: 1d:ef:b5:65:32:9e:ee:9e:f8:d3:b2:93:15:bc:00: 75:f9:24:bd:1f:66:c2:f2:91:30:c0:d3:d7:4c:23: 2f:3f:3b:3d:8b:74:31:61:8e:80:c7:bc:45:b7:e2: 2d:95:0d:8c:84:bb:11:41:31:42:2f:c7:cb:aa:c3: f5:ae:74:ba:ca:40:41:ef:82:78:34:72:1a:ce:45: d0:5f:f4:d0:e6:16:33:81:48:d6:d4:8e:41:17:46: ad:9c:9b:ff:04:86:13:d3:a3:ae:d8:34:82:26:80: ed:a2:90:ca:2f:1a:70:f3:b4:8d:9c:d8:60:1c:33: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:48:17:73:2C:C4:76:05:BD:54:FA:4C:AC:60:ED:3F:C1:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf562e31-f126-34a5-8ff4-6db7c911d9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3f:42:de:a0:5d:1d:d9:25:04:b7:53:83:00:67:9e:d9:a0: 74:b3:70:80:0e:6a:01:f7:93:ae:b6:08:a5:ae:c9:3f:41:25: b3:d0:d2:e5:70:be:c4:c2:b8:85:e5:bc:60:e2:68:c5:21:fc: 01:91:82:77:42:f9:c6:16:8d:2a:40:73:ac:f3:18:88:aa:94: ef:9d:93:9d:63:01:ed:00:a9:54:f5:99:ba:46:28:30:db:39: 6b:f7:99:d4:a6:51:2e:2f:ef:1b:e0:f7:bf:4f:72:ee:4e:56: a5:91:a9:4d:df:0f:9a:d7:d7:3d:1b:e2:a8:b0:cf:b0:4d:8e: 60:6d:be:d8:f7:d6:b1:98:c7:f1:91:9d:4e:e6:0d:5a:35:4f: 85:8b:f1:0c:07:80:13:55:03:36:98:50:27:27:04:3f:a9:4b: 4b:c7:75:4a:1b:25:54:d5:8e:06:df:61:fc:30:43:50:f8:a7: d0:70:ca:e0:f2:6a:4a:d3:6a:89:c6:12:56:28:f0:b4:fe:14: db:de:c8:b0:01:81:4e:a8:6f:7a:cd:ce:88:90:8f:2a:68:fa: 9a:b5:ff:b0:5d:53:0e:6e:1e:94:03:fb:02:dd:f8:92:f9:f3: 5e:49:52:ab:77:de:55:95:15:d3:bc:d8:5f:77:79:9d:ed:51: 51:39:27:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl3jHkVV4F6aX9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NmE5YzY3NjYtZjA0YS00ZTExLWIyNjAtMWM3NDczODgzZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjjabJvSay26rffIdEgCsEV2cu6XOh8fkqKn OkIFuUIrJ065ZF1tVOanxSnL3HYEHNiSohgst+HUTyhj0tQIslDpWZvHUTLw6vB+ Yz5FDOktPSH/Ip7lH33jBvU/hhavfBbqa39LxM+XhNNUDlcJikViEU6e+4A4i/c0 rfOoFZMt5EXW+rQd77VlMp7unvjTspMVvAB1+SS9H2bC8pEwwNPXTCMvPzs9i3Qx YY6Ax7xFt+ItlQ2MhLsRQTFCL8fLqsP1rnS6ykBB74J4NHIazkXQX/TQ5hYzgUjW 1I5BF0atnJv/BIYT06Ou2DSCJoDtopDKLxpw87SNnNhgHDMBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtsSBdzLMR2Bb1U+kysYO0/wcJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Y1NjJlMzEtZjEyNi0z NGE1LThmZjQtNmRiN2M5MTFkOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg/Qt6gXR3ZJQS3U4MAZ57ZoHSzcIAOagH3k662CKWuyT9BJbPQ0uVw vsTCuIXlvGDiaMUh/AGRgndC+cYWjSpAc6zzGIiqlO+dk51jAe0AqVT1mbpGKDDb OWv3mdSmUS4v7xvg979Pcu5OVqWRqU3fD5rX1z0b4qiwz7BNjmBtvtj31rGYx/GR nU7mDVo1T4WL8QwHgBNVAzaYUCcnBD+pS0vHdUobJVTVjgbfYfwwQ1D4p9BwyuDy akrTaonGElYo8LT+FNveyLABgU6ob3rNzoiQjypo+pq1/7BdUw5uHpQD+wLd+JL5 815JUqt33lWVFdO82F93eZ3tUVE5J7k= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:37 2025 by rpki-client