$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json) Hash identifier: jTbFnBzxxmcKlAfNq6vC9QbiZSQ0aLDHoFb3peQcHcs= Subject key identifier: 05:58:20:F6:AA:9C:B9:A8:CD:34:00:55:2D:36:08:29:ED:82:39:87 Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F4328584AECC122EB27B64D00837DD9C0 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13657 IP address blocks: 67.215.192.0/20 maxlen: 24 104.242.0.0/17 maxlen: 24 216.235.0.0/20 maxlen: 24 2001:4900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:22:eb:27:b6:4d:00:83:7d:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=80f3a702-2e84-48d2-b341-bee1b1b46a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:8f:80:c1:e3:2a:d4:42:13:1b:24:7d:b9: fd:ef:8e:ef:92:68:2e:f6:ee:8d:ab:93:e1:88:92: 4b:08:81:85:e5:0b:d2:78:71:5b:dd:ff:9a:7a:9e: 22:f9:6b:65:38:75:87:47:a1:86:6d:41:4d:86:c0: 19:0b:98:ce:91:87:7a:54:7f:39:a2:fd:d3:e8:a5: 3c:c9:f4:0a:4d:2d:38:6f:80:74:f8:46:3c:c8:1b: 76:1e:95:b0:55:06:83:89:95:70:d7:bc:fd:b9:dc: bd:3d:88:b7:39:c7:70:3c:af:5c:58:36:32:ec:0a: 92:6f:e5:f1:74:66:2a:20:e9:87:2e:11:cf:25:da: 31:db:52:f3:94:3b:43:14:a1:49:ca:cb:81:1d:50: 50:0a:67:1c:9d:d8:3b:2b:96:a8:12:3e:f2:be:a2: 88:52:87:99:f7:57:3c:53:3f:a6:47:5f:c6:84:8a: a9:0b:5e:1e:dd:13:3a:55:2a:fb:f7:0f:51:01:ad: 92:44:6a:dd:4a:cb:24:18:b5:60:b8:ab:a5:a8:c1: 54:50:7c:ac:37:4b:30:43:1c:36:96:45:c7:0d:af: 2d:29:1a:d8:fb:f3:f7:04:48:e3:59:54:cb:8d:55: 2e:59:a3:f7:fc:1e:b5:53:7e:63:10:12:27:bc:0f: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:58:20:F6:AA:9C:B9:A8:CD:34:00:55:2D:36:08:29:ED:82:39:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0/17 216.235.0.0/20 IPv6: 2001:4900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:47:81:2f:4e:3e:79:24:87:b2:91:bb:b2:2e:2c:44:30:01: ce:d7:1e:f6:0a:34:af:35:5c:43:d8:52:03:d6:a7:0d:0d:90: b8:6e:b8:11:17:43:5c:67:03:ba:c8:36:17:81:ee:d9:32:8b: 79:06:ea:3e:7d:86:04:46:6c:be:2f:d0:93:3d:02:81:0f:48: f3:7e:a7:46:9e:81:4b:f3:fc:8c:2c:e7:f0:5c:9f:e3:77:61: 70:ee:4e:3c:c9:c8:b1:8f:64:cc:23:5e:55:7c:47:41:e5:03: 71:af:a5:3b:f9:f4:79:98:e9:c3:75:e9:7e:37:4c:21:02:75: 91:9d:dc:69:e5:7e:e3:da:86:af:c6:c1:41:8f:a0:ef:d4:a7: 8f:7a:1c:89:de:bf:6d:8c:fb:9e:48:6c:39:dd:76:86:f9:e1: 2c:83:34:3d:90:07:39:8b:ac:9d:38:b6:a7:13:14:65:8e:76: b3:c4:36:49:44:0f:b7:bb:65:83:3c:09:b1:63:61:d4:fa:c4: b4:dc:75:f9:5e:60:34:15:36:81:87:10:83:8f:a4:f4:14:8c: 45:27:d5:f6:de:23:38:b2:41:c2:d4:1d:47:c1:ee:aa:58:da: 89:9a:00:c5:ea:bb:e2:8d:5d:b7:eb:48:35:bc:4e:46:a8:8c: 54:ee:5d:49 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWErswSLrJ7ZNAIN92cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODBmM2E3MDItMmU4NC00OGQyLWIzNDEtYmVlMWIxYjQ2YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OPgMHjKtRCExskfbn9747vkmgu9u6Nq5Ph iJJLCIGF5QvSeHFb3f+aep4i+WtlOHWHR6GGbUFNhsAZC5jOkYd6VH85ov3T6KU8 yfQKTS04b4B0+EY8yBt2HpWwVQaDiZVw17z9udy9PYi3OcdwPK9cWDYy7AqSb+Xx dGYqIOmHLhHPJdox21LzlDtDFKFJysuBHVBQCmccndg7K5aoEj7yvqKIUoeZ91c8 Uz+mR1/GhIqpC14e3RM6VSr79w9RAa2SRGrdSsskGLVguKulqMFUUHysN0swQxw2 lkXHDa8tKRrY+/P3BEjjWVTLjVUuWaP3/B61U35jEBInvA9fgQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFAVYIPaqnLmozTQAVS02CCntgjmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAhHgS9OPnkkh7KRu7Iu LEQwAc7XHvYKNK81XEPYUgPWpw0NkLhuuBEXQ1xnA7rINheB7tkyi3kG6j59hgRG bL4v0JM9AoEPSPN+p0aegUvz/Iws5/Bcn+N3YXDuTjzJyLGPZMwjXlV8R0HlA3Gv pTv59HmY6cN16X43TCECdZGd3GnlfuPahq/GwUGPoO/Up496HInev22M+55IbDnd dob54SyDND2QBzmLrJ04tqcTFGWOdrPENklED7e7ZYM8CbFjYdT6xLTcdfleYDQV NoGHEIOPpPQUjEUn1fbeIziyQcLUHUfB7qpY2omaAMXqu+KNXbfrSDW8TkaojFTu XUk= -----END CERTIFICATE-----Generated at Wed Nov 5 21:09:58 2025 by rpki-client