$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/40a9efc6-1973-364b-8ea1-ec6d323c238d.roa File: 40a9efc6-1973-364b-8ea1-ec6d323c238d.roa (raw, json) Hash identifier: DG53e88mwIZH+GN1WFqfxUsS9tztyAqBNo5zT0DP28o= Subject key identifier: 03:17:89:FF:E5:57:FD:EF:BD:64:AD:31:D9:89:B0:8E:4B:C9:22:41 Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584BB2F832AC28683619D1ED8780 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/40a9efc6-1973-364b-8ea1-ec6d323c238d.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 6939 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:32:ac:28:68:36:19:d1:ed:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=97e4be58-cedc-453a-a77f-c580274b08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:32:09:4f:d9:ab:2a:ff:36:4b:d2:f0:30:79: 03:99:f6:b4:74:e0:c2:41:fc:39:bf:f7:a4:d0:c6: 76:d0:40:01:b3:cf:72:c1:b7:4b:a9:03:87:54:a7: a4:4f:74:b7:e9:d8:33:0e:b3:6b:13:9c:da:49:a8: 05:ba:61:75:0e:30:b0:83:c6:6b:78:00:1d:0c:76: 37:d8:d5:87:0f:b1:b1:82:2c:3a:38:5d:98:45:86: ce:c4:8a:d8:65:45:ec:d9:a2:16:e5:b9:ca:1e:1c: 32:9c:be:a5:e8:14:10:8d:6f:6a:89:c2:a8:da:65: c8:04:15:8a:82:f1:f0:b3:6a:ab:32:12:dc:83:43: 16:0e:34:71:aa:dd:a1:da:bb:0a:6b:0a:47:1f:a3: 3c:21:36:0d:dd:ee:02:36:1d:ab:46:49:e0:45:8f: 64:c8:1d:ca:16:00:a4:16:f7:3e:54:0d:0a:bc:87: c5:7f:9b:d5:23:ab:0a:45:9a:27:db:db:11:02:78: 56:04:ec:a4:98:a3:78:c5:3c:4a:e9:59:10:84:3a: a4:e6:6c:06:d9:81:29:c3:ec:2e:53:df:0d:fe:75: 46:72:f9:39:b2:fb:20:0a:4f:dc:52:aa:ee:01:b3: 0f:b4:46:75:61:e4:46:ce:55:f2:7c:55:0c:0c:fc: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:17:89:FF:E5:57:FD:EF:BD:64:AD:31:D9:89:B0:8E:4B:C9:22:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/40a9efc6-1973-364b-8ea1-ec6d323c238d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2e:0d:4c:7b:0c:2f:19:a2:c0:8c:ae:9c:a6:9b:10:00:40: 0b:67:c6:33:47:94:5a:58:f0:ec:6f:ff:47:fe:bd:71:e0:f9: 85:ec:d8:22:19:7e:29:3c:8d:cc:34:d6:7d:a4:14:76:a6:7e: cb:e9:ae:af:b5:e5:13:e9:ec:32:6f:07:3d:fa:bb:fc:b3:e6: 31:b2:6e:a3:e4:31:9e:69:84:c8:1d:f2:88:d7:8d:23:f3:ae: 84:e4:28:3d:f3:68:80:57:50:35:20:e8:33:8d:50:13:bd:5f: b6:2d:bf:3c:bd:35:75:34:9a:8a:cf:8b:62:73:46:cf:ad:ac: dd:a6:2e:53:e9:e8:45:17:62:be:88:8a:5f:00:91:74:18:d5: bc:8d:e4:84:44:2a:83:3a:28:55:46:21:1d:fb:4a:df:a6:26: 1a:33:bb:8f:0b:dd:6d:80:73:61:a7:38:99:34:92:c5:d4:c9: df:63:a7:fd:1f:10:9a:08:51:c3:35:bc:ba:4c:61:89:b1:51: c0:00:b9:3a:ed:76:e3:87:cd:4d:42:24:50:6b:5b:20:0a:71: 71:ba:6a:b7:78:6a:19:89:fe:b0:fd:a0:08:0e:99:83:e1:96: b9:80:f4:94:1c:49:ea:7a:38:4f:3c:5a:66:49:68:0c:73:d4: 16:65:3a:9a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuy+DKsKGg2GdHth4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTdlNGJlNTgtY2VkYy00NTNhLWE3N2YtYzU4MDI3NGIwOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjIJT9mrKv82S9LwMHkDmfa0dODCQfw5v/ek 0MZ20EABs89ywbdLqQOHVKekT3S36dgzDrNrE5zaSagFumF1DjCwg8ZreAAdDHY3 2NWHD7Gxgiw6OF2YRYbOxIrYZUXs2aIW5bnKHhwynL6l6BQQjW9qicKo2mXIBBWK gvHws2qrMhLcg0MWDjRxqt2h2rsKawpHH6M8ITYN3e4CNh2rRkngRY9kyB3KFgCk Fvc+VA0KvIfFf5vVI6sKRZon29sRAnhWBOykmKN4xTxK6VkQhDqk5mwG2YEpw+wu U98N/nVGcvk5svsgCk/cUqruAbMPtEZ1YeRGzlXyfFUMDPxZRQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAMXif/lV/3vvWStMdmJsI5LySJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNDBhOWVmYzYtMTk3My0z NjRiLThlYTEtZWM2ZDMyM2MyMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAE8uDUx7DC8ZosCMrpymmxAAQAtnxjNHlFpY 8Oxv/0f+vXHg+YXs2CIZfik8jcw01n2kFHamfsvprq+15RPp7DJvBz36u/yz5jGy bqPkMZ5phMgd8ojXjSPzroTkKD3zaIBXUDUg6DONUBO9X7Ytvzy9NXU0morPi2Jz Rs+trN2mLlPp6EUXYr6Iil8AkXQY1byN5IREKoM6KFVGIR37St+mJhozu48L3W2A c2GnOJk0ksXUyd9jp/0fEJoIUcM1vLpMYYmxUcAAuTrtduOHzU1CJFBrWyAKcXG6 ard4ahmJ/rD9oAgOmYPhlrmA9JQcSep6OE88WmZJaAxz1BZlOpo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:14 2025 by rpki-client