$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa File: 97af0cfb-35d5-37fc-a9de-ab97821c0309.roa (raw, json) Hash identifier: 2IxLTZJ1EzZ8NX6yWcpvuUgOM6QJqL2IP+pmFNalY9E= Subject key identifier: 07:34:24:AF:8A:1A:F2:E1:DC:FA:8F:E2:6C:07:A3:72:D3:2B:34:63 Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F4328584B99D79226D21548451B9CDA00 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 18530 IP address blocks: 64.38.128.0/18 maxlen: 24 66.114.128.0/19 maxlen: 24 207.115.64.0/19 maxlen: 24 216.9.0.0/19 maxlen: 24 2001:560::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:92:26:d2:15:48:45:1b:9c:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c37bfdf1-5f67-4067-bb2c-348420888ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:82:8b:73:f9:22:ee:55:13:5e:38:73:67: c5:ab:dd:67:d7:65:43:0e:f9:9f:7b:e3:8f:7c:1c: 5e:57:7b:26:88:4c:66:d3:6f:88:02:f8:51:08:e9: 50:2a:40:c3:13:32:0d:89:aa:2d:ef:00:e0:39:6c: 89:3b:83:01:d3:e1:7e:33:ab:2d:e3:3b:89:e3:d2: fd:19:a8:69:50:d8:b4:a7:12:56:09:d5:b4:63:51: e7:8b:0f:5f:89:04:ee:75:11:57:21:71:7b:5f:c2: 9c:3c:67:de:06:b5:71:20:54:81:22:09:e0:95:7d: cc:b4:0d:2e:8d:9d:98:e1:69:86:4e:e1:af:29:13: 6e:7d:96:36:e9:9e:e5:cc:a3:48:2d:1f:38:df:ec: 7d:a2:73:f2:6f:8a:84:92:49:74:e0:0c:e5:4b:b7: c8:89:9e:c7:bb:d0:da:8e:e8:c6:70:6f:6e:da:ed: d3:4b:f1:10:e3:40:cd:9a:44:b6:cf:cf:ab:cb:25: d4:cc:87:8b:8d:b5:60:6c:f9:55:b2:f9:8e:cd:d0: 24:dc:c8:ae:76:87:4b:20:d2:25:50:2a:02:0e:24: 8a:52:2a:b5:eb:83:df:4e:13:ee:56:6e:b7:be:d4: e4:76:53:27:d6:02:36:60:26:21:b5:5e:47:bb:2b: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:24:AF:8A:1A:F2:E1:DC:FA:8F:E2:6C:07:A3:72:D3:2B:34:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.128.0/18 66.114.128.0/19 207.115.64.0/19 216.9.0.0/19 IPv6: 2001:560::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5d:82:4a:5a:2a:11:d3:bc:2a:13:27:85:ae:ae:c5:47:28: 29:b5:49:98:3e:b1:6b:c6:e0:31:ea:86:9a:bb:9f:7d:4f:7b: a8:7d:64:81:bd:fb:66:e1:b9:5e:72:75:bb:79:39:4f:74:51: e7:a4:49:34:2f:b8:e8:81:1c:43:c1:53:69:42:29:11:68:67: fd:6f:88:27:03:b6:83:42:48:1a:a8:ce:93:bf:9b:23:db:56: a1:47:ff:bf:8e:4c:22:8c:54:d8:d3:c2:84:38:02:70:69:dd: 4a:7e:af:bf:87:d4:4d:0e:c4:bc:de:01:01:80:a4:a6:67:df: f5:59:a9:4f:6a:3d:58:6b:87:61:26:91:9f:b0:13:ef:b1:bd: 98:4c:2e:de:7e:24:39:6b:75:ed:12:ca:4a:8c:a1:44:fd:1c: 80:c2:65:3b:44:bf:73:2d:25:89:0e:a9:99:a8:e1:7c:4a:db: 84:53:6b:d2:11:58:74:a1:5d:75:fd:90:0a:c3:67:e7:33:75: 13:8c:54:65:6c:ca:4c:46:a1:2a:a9:72:a1:5f:e1:ab:0e:11: fe:57:85:ab:51:b9:13:c0:f7:26:20:fa:b5:b5:ca:3f:4e:7e: 09:c2:38:a5:ac:c7:dd:7f:43:13:a2:2d:e6:12:fd:9c:67:61: 98:e4:17:df -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEuZ15Im0hVIRRuc2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzM3YmZkZjEtNWY2Ny00MDY3LWJiMmMtMzQ4NDIwODg4YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopqCi3P5Iu5VE144c2fFq91n12VDDvmfe+OP fBxeV3smiExm02+IAvhRCOlQKkDDEzINiaot7wDgOWyJO4MB0+F+M6st4zuJ49L9 GahpUNi0pxJWCdW0Y1Hniw9fiQTudRFXIXF7X8KcPGfeBrVxIFSBIgnglX3MtA0u jZ2Y4WmGTuGvKRNufZY26Z7lzKNILR843+x9onPyb4qEkkl04AzlS7fIiZ7Hu9Da jujGcG9u2u3TS/EQ40DNmkS2z8+ryyXUzIeLjbVgbPlVsvmOzdAk3MiudodLINIl UCoCDiSKUiq164PfThPuVm63vtTkdlMn1gI2YCYhtV5Huys+XwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFAc0JK+KGvLh3PqP4mwHo3LTKzRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvOTdhZjBjZmItMzVkNS0z N2ZjLWE5ZGUtYWI5NzgyMWMwMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGQCaAAwQF QnKAAwQFz3NAAwQF2AkAMA0EAgACMAcDBQAgAQVgMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALZdgkpaKhHT vCoTJ4WursVHKCm1SZg+sWvG4DHqhpq7n31Pe6h9ZIG9+2bhuV5ydbt5OU90Ueek STQvuOiBHEPBU2lCKRFoZ/1viCcDtoNCSBqozpO/myPbVqFH/7+OTCKMVNjTwoQ4 AnBp3Up+r7+H1E0OxLzeAQGApKZn3/VZqU9qPVhrh2EmkZ+wE++xvZhMLt5+JDlr de0SykqMoUT9HIDCZTtEv3MtJYkOqZmo4XxK24RTa9IRWHShXXX9kArDZ+czdROM VGVsykxGoSqpcqFf4asOEf5XhatRuRPA9yYg+rW1yj9OfgnCOKWsx91/QxOiLeYS /ZxnYZjkF98= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:41 2025 by rpki-client