$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa File: d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json) Hash identifier: 7soqd94WArlDDYhiq43mSy0Rbc2MhW2LcnAZP65htNE= Subject key identifier: 1B:5C:BB:CA:47:3B:6E:F1:F1:F3:79:A8:2D:C4:A1:93:29:9E:49:F1 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F4328584B970CE876586911020A1D8020 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 14860 IP address blocks: 64.88.192.0/19 maxlen: 24 173.209.64.0/20 maxlen: 24 192.154.132.0/22 maxlen: 24 198.203.0.0/22 maxlen: 24 208.89.24.0/22 maxlen: 24 208.123.96.0/20 maxlen: 24 2604:5680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e8:76:58:69:11:02:0a:1d:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4199e855-3783-4d57-a70a-0f4fb1cd5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:c9:ea:54:2d:cd:e3:0f:eb:1e:a3:66:b1: 8a:d2:b0:16:02:8c:2c:bd:05:1c:ad:23:0f:ef:05: 15:cd:e8:90:a5:cb:96:46:5e:da:7a:a7:96:1a:a4: 8d:ab:c9:5f:51:41:7d:34:28:ad:46:cf:20:c6:31: 16:73:eb:8d:e3:b3:08:e7:2d:ff:8a:db:ec:da:1d: 95:6b:d7:c4:2c:8f:de:cc:41:f6:2a:ec:8d:8a:90: af:3f:27:03:76:0a:4e:08:bd:6a:9e:60:94:09:b6: 77:59:4e:52:0c:1c:59:ce:bd:3f:4e:f3:a2:4c:65: ad:2c:92:3f:2c:9f:47:c9:89:2f:f1:83:7f:76:5c: 98:d4:4a:a6:7d:52:0b:4a:28:42:69:6a:cb:91:5d: d4:a7:83:9a:4f:ec:dd:72:bd:e1:0f:26:11:57:d6: 05:9c:40:f0:31:dd:a3:bb:28:1e:a6:b2:46:15:a4: 17:27:49:c1:aa:19:5f:ab:f9:00:b9:56:85:99:de: d9:6c:29:71:9b:33:d1:f3:53:1f:49:83:8d:a8:40: 93:4c:20:d6:c9:0e:a2:54:85:46:cf:64:2e:63:c0: ec:58:56:ea:b8:de:2b:55:39:05:54:02:bf:53:8a: 0f:34:c5:96:d4:c3:f3:e4:62:07:ad:7d:5d:ae:ea: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:BB:CA:47:3B:6E:F1:F1:F3:79:A8:2D:C4:A1:93:29:9E:49:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 64.88.192.0/19 173.209.64.0/20 192.154.132.0/22 198.203.0.0/22 208.89.24.0/22 208.123.96.0/20 IPv6: 2604:5680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e7:a8:a2:8f:c0:83:8b:fb:27:39:d4:17:e2:5e:75:fd:8b: 46:a0:a4:d2:6a:47:6f:76:ce:65:05:b7:0e:81:67:53:1b:cf: 0d:34:c5:d1:4e:0a:a6:f4:a6:c8:8a:af:a0:cd:0d:a1:e6:65: 3d:46:ca:61:8a:bb:cd:57:77:c1:2f:6e:a7:1c:30:f5:2a:1b: fa:2c:1c:7a:a2:74:16:60:2b:b7:7a:97:28:1b:d4:fd:95:e4: 38:bc:35:b0:9f:6a:9a:10:48:b6:d7:94:71:d3:80:94:42:08: 02:58:20:f8:57:8a:bb:4b:44:93:a9:9b:fc:4e:ac:bb:be:83: 32:95:c4:af:9c:2d:e2:11:59:8a:fc:21:93:72:a7:46:78:b9: 7e:98:7f:ea:d7:6a:e6:69:82:d9:e8:24:03:29:0a:91:20:e7: 54:8d:e1:c3:86:1c:76:e9:f8:01:1a:16:70:e4:02:51:e8:45: 61:97:a2:95:33:99:4d:d3:50:bb:c4:41:6f:ab:04:47:b0:0d: da:62:d3:91:46:6b:f3:cb:a2:24:2a:7b:a3:e1:e8:1b:7b:b9: e6:28:f7:dd:6a:31:72:f0:52:e7:c8:8e:a6:2f:99:6d:fc:1f: 58:d8:39:1b:45:5a:26:8d:ee:d4:63:af:8a:b4:f9:de:24:89: 4b:f4:67:06 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEuXDOh2WGkRAgodgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDE5OWU4NTUtMzc4My00ZDU3LWE3MGEtMGY0ZmIxY2Q1NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfPJ6lQtzeMP6x6jZrGK0rAWAowsvQUcrSMP 7wUVzeiQpcuWRl7aeqeWGqSNq8lfUUF9NCitRs8gxjEWc+uN47MI5y3/itvs2h2V a9fELI/ezEH2KuyNipCvPycDdgpOCL1qnmCUCbZ3WU5SDBxZzr0/TvOiTGWtLJI/ LJ9HyYkv8YN/dlyY1EqmfVILSihCaWrLkV3Up4OaT+zdcr3hDyYRV9YFnEDwMd2j uygeprJGFaQXJ0nBqhlfq/kAuVaFmd7ZbClxmzPR81MfSYONqECTTCDWyQ6iVIVG z2QuY8DsWFbquN4rVTkFVAK/U4oPNMWW1MPz5GIHrX1druoRqQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFBtcu8pHO27x8fN5qC3EoZMpnknxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvZDFiMDM4NjQtMzAyZC0z ODk1LWE5Y2YtOWM0MmUyNTBjZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFQFjAAwQE rdFAAwQCwJqEAwQCxssAAwQC0FkYAwQE0HtgMA0EAgACMAcDBQAmBFaAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBACLnqKKPwIOL+yc51BfiXnX9i0agpNJqR292zmUFtw6BZ1Mbzw00xdFOCqb0 psiKr6DNDaHmZT1GymGKu81Xd8EvbqccMPUqG/osHHqidBZgK7d6lygb1P2V5Di8 NbCfapoQSLbXlHHTgJRCCAJYIPhXirtLRJOpm/xOrLu+gzKVxK+cLeIRWYr8IZNy p0Z4uX6Yf+rXauZpgtnoJAMpCpEg51SN4cOGHHbp+AEaFnDkAlHoRWGXopUzmU3T ULvEQW+rBEewDdpi05FGa/PLoiQqe6Ph6Bt7ueYo991qMXLwUufIjqYvmW38H1jY ORtFWiaN7tRjr4q0+d4kiUv0ZwY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:49 2025 by rpki-client