$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/b7fe32bf-ee0c-3272-9baa-d611399289ca.roa File: b7fe32bf-ee0c-3272-9baa-d611399289ca.roa (raw, json) Hash identifier: PXqnu1V1bBSuUWUtm1zVI2kXTxIbJV6wz4I7DlX8qB8= Subject key identifier: FE:00:B9:A3:08:12:89:73:78:04:F7:FF:6E:F2:A7:27:51:D2:57:2A Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584B9E07AE352E1EA8AE2990CDC0 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/b7fe32bf-ee0c-3272-9baa-d611399289ca.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 22379 IP address blocks: 65.49.240.0/20 maxlen: 24 160.32.64.0/18 maxlen: 24 160.32.248.0/22 maxlen: 24 160.32.252.0/23 maxlen: 24 173.46.224.0/19 maxlen: 24 184.75.144.0/20 maxlen: 24 216.86.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ae:35:2e:1e:a8:ae:29:90:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d9b61854-0fbb-442e-84cf-6da1db5141de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:24:7b:0e:43:43:f6:24:2d:86:ee:98:5b: c5:c5:0d:67:37:09:3d:aa:9e:1b:27:b0:52:55:17: dd:88:30:6e:26:5b:3a:f6:a6:49:f2:e7:c4:83:71: a7:cb:98:67:2c:c1:0f:24:36:da:e8:8b:70:71:c8: 58:e2:7c:d3:2c:40:03:c5:a4:83:71:9b:0e:0a:ab: 82:22:61:86:37:d4:2f:2f:b3:94:4d:88:86:a1:ba: 53:00:ed:ec:68:3d:4e:2d:b0:e4:fc:cc:39:0a:cf: 2a:39:2a:9f:e9:1d:33:4f:5c:2e:48:31:e6:5b:e5: 1e:f4:d9:d8:9b:72:5a:4c:7a:50:5f:e6:15:1e:08: e6:0e:4d:84:4a:09:41:91:d5:9f:e3:8a:b1:3b:2b: 63:2d:d5:89:8c:a0:1e:27:ae:e2:c8:e7:bb:3c:ae: 66:5c:56:4d:dc:e6:59:4d:dd:6c:ff:45:af:f1:65: dd:64:48:2e:48:05:84:d8:da:52:cf:0b:b9:f9:d7: 7d:a9:54:3f:38:18:4d:af:7e:34:17:2f:02:a0:88: 48:71:a3:95:0e:15:ca:e7:83:d4:e8:ac:ca:4d:c8: 83:e2:5a:d3:9e:be:d9:8c:e9:f3:c0:69:5d:da:27: 43:b8:22:89:b1:50:c8:89:76:b3:16:17:36:a4:d5: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:00:B9:A3:08:12:89:73:78:04:F7:FF:6E:F2:A7:27:51:D2:57:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/b7fe32bf-ee0c-3272-9baa-d611399289ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 65.49.240.0/20 160.32.64.0/18 160.32.248.0-160.32.253.255 173.46.224.0/19 184.75.144.0/20 216.86.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:10:4c:5b:ce:21:bc:27:f8:35:fd:19:f0:bc:c7:f1:aa:c8: a5:1b:c2:f0:fe:37:93:4c:8a:a7:60:9a:39:04:2c:ea:e1:e5: b4:33:68:2d:17:08:27:58:de:48:de:75:50:cb:31:d8:40:37: e8:a8:df:0d:ea:63:5a:bf:c0:45:ae:62:c7:d0:3c:2e:e0:07: d5:9c:96:7d:32:a3:65:d2:8d:44:71:d6:63:50:d8:37:54:78: 56:8b:55:f0:51:22:34:32:6b:08:b9:5f:ac:94:55:26:3a:dd: d3:8b:6c:d3:f1:d7:e0:40:52:79:1c:61:9d:49:f4:26:a6:14: ad:c6:0b:61:c3:bf:97:c6:be:86:db:b2:30:d6:b7:70:b6:83: c4:dc:56:ed:bd:72:9b:70:14:bf:9b:9b:86:ae:1c:f9:f9:70: 43:0e:60:59:ed:31:3d:2a:01:53:fa:87:ad:5b:10:f1:67:a0: 4e:86:05:9e:6f:44:4e:90:fd:5a:50:76:da:31:28:53:ce:5d: 60:d3:46:17:ef:c9:5b:56:79:77:3f:1a:ed:03:49:6f:a4:9f: 24:7a:88:14:07:0a:5a:c9:a8:57:eb:00:ba:6a:0e:ce:86:57: b0:1c:b3:21:73:b4:ff:e8:87:2f:fb:ab:f7:8f:18:a6:e5:dd: 4c:f8:c0:f9 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEueB641Lh6orimQzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDliNjE4NTQtMGZiYi00NDJlLTg0Y2YtNmRhMWRiNTE0MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8kew5DQ/YkLYbumFvFxQ1nNwk9qp4bJ7BS VRfdiDBuJls69qZJ8ufEg3Gny5hnLMEPJDba6ItwcchY4nzTLEADxaSDcZsOCquC ImGGN9QvL7OUTYiGobpTAO3saD1OLbDk/Mw5Cs8qOSqf6R0zT1wuSDHmW+Ue9NnY m3JaTHpQX+YVHgjmDk2ESglBkdWf44qxOytjLdWJjKAeJ67iyOe7PK5mXFZN3OZZ Td1s/0Wv8WXdZEguSAWE2NpSzwu5+dd9qVQ/OBhNr340Fy8CoIhIcaOVDhXK54PU 6KzKTciD4lrTnr7ZjOnzwGld2idDuCKJsVDIiXazFhc2pNWGqwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFP4AuaMIEolzeAT3/27ypydR0lcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvYjdmZTMyYmYtZWUwYy0z MjcyLTliYWEtZDYxMTM5OTI4OWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQEQTHwAwQG oCBAMAwDBAOgIPgDBAGgIPwDBAWtLuADBAS4S5ADBAPYVkgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoBBM W84hvCf4Nf0Z8LzH8arIpRvC8P43k0yKp2CaOQQs6uHltDNoLRcIJ1jeSN51UMsx 2EA36KjfDepjWr/ARa5ix9A8LuAH1ZyWfTKjZdKNRHHWY1DYN1R4VotV8FEiNDJr CLlfrJRVJjrd04ts0/HX4EBSeRxhnUn0JqYUrcYLYcO/l8a+htuyMNa3cLaDxNxW 7b1ym3AUv5ubhq4c+flwQw5gWe0xPSoBU/qHrVsQ8WegToYFnm9ETpD9WlB22jEo U85dYNNGF+/JW1Z5dz8a7QNJb6SfJHqIFAcKWsmoV+sAumoOzoZXsByzIXO0/+iH L/ur948YpuXdTPjA+Q== -----END CERTIFICATE-----Generated at Wed Nov 5 17:00:05 2025 by rpki-client