$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa File: 654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa (raw, json) Hash identifier: vrCTmcNCqY83B0TaITgBNx47lVc7XYfM/h5vrbzqBJU= Subject key identifier: 8F:2D:18:AD:5A:DF:2B:91:A8:41:12:E8:2B:0A:61:A4:7D:4E:AF:A3 Certificate issuer: /CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Certificate serial: 010D0C9F4328584BB2F83214E8E1CDA5EEDF8800 Authority key identifier: 99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 22652 IP address blocks: 199.38.96.0/24 maxlen: 24 199.38.97.0/24 maxlen: 24 199.38.98.0/24 maxlen: 24 199.38.99.0/24 maxlen: 24 199.38.100.0/24 maxlen: 24 199.38.101.0/24 maxlen: 24 199.38.102.0/24 maxlen: 24 199.38.103.0/24 maxlen: 24 2607:3840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:32:14:e8:e1:cd:a5:ee:df:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf30da6-02ba-45ce-94e7-031c45374cd8 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=421db055-9480-413f-9fc4-5258d2819abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:fb:bc:a0:90:9a:17:86:00:80:00:62:1d: cf:14:46:cf:c6:11:53:a9:55:6c:30:be:f9:20:dd: 83:6b:a9:17:e0:45:63:16:d8:9a:d7:5f:5b:e0:30: 6a:ba:60:f0:90:24:82:bd:08:7a:bd:fe:2e:1a:4a: d4:71:3a:ed:57:c1:44:c6:72:cd:a7:fb:0b:6d:5a: 18:09:b3:7c:bb:f0:75:47:34:04:c1:32:8c:7d:b0: b0:39:de:6f:21:0f:cd:cb:a6:c0:78:53:8e:08:9c: 2d:14:0f:02:d9:86:0b:7d:87:31:bc:44:14:de:9f: 0b:f2:3b:c1:62:2f:0d:f5:83:ac:4e:30:1c:59:3c: 3b:f7:7d:4d:f5:d1:84:e8:7d:6c:9c:aa:22:1e:69: eb:c1:9c:94:e3:80:af:e5:b7:2e:db:ad:d6:48:67: 8d:b7:cf:b5:a4:f1:f8:0f:d8:75:ab:2b:f7:4c:ec: 79:f9:d2:31:5c:e8:01:30:64:3f:c7:7d:d9:77:7f: 5f:1a:e1:d2:a2:c5:0c:b7:f4:e5:32:89:d9:87:43: 43:5e:9f:f5:78:17:1b:f7:64:75:ba:16:bd:9b:8f: 68:92:e6:dc:8e:a0:c9:cf:60:c7:fd:fa:cd:06:63: 40:2b:c5:7f:a6:81:46:d4:a0:de:2d:f7:5c:3a:b1: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:18:AD:5A:DF:2B:91:A8:41:12:E8:2B:0A:61:A4:7D:4E:AF:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/654d6eb1-c7c0-32a5-b89c-a3d89e52a0be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8/9bf30da6-02ba-45ce-94e7-031c45374cd8.crl X509v3 Authority Key Identifier: keyid:99:C8:82:90:49:B0:19:59:FD:B5:80:ED:C3:62:94:EA:1A:8B:45:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bf30da6-02ba-45ce-94e7-031c45374cd8.cer sbgp-ipAddrBlock: critical IPv4: 199.38.96.0/21 IPv6: 2607:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:68:48:46:29:cb:be:44:70:f5:26:1e:d6:66:30:40:0d:0f: b5:79:a1:a0:57:ee:bd:ca:62:4a:f6:ed:fe:48:11:25:e5:e2: 39:27:c7:91:13:9b:8c:7c:57:fd:7e:25:09:35:53:80:11:b0: ed:01:cc:22:74:02:78:6e:12:7d:3a:c5:f1:8b:fc:2e:57:22: 26:56:2d:73:49:32:58:c9:db:8d:56:f3:ba:cd:49:7f:35:8a: e8:a8:9a:8a:c8:bf:17:48:61:3a:87:f1:d8:3d:2c:af:7d:95: 8a:5f:11:74:12:12:12:d8:dd:08:4b:b7:e8:72:2a:16:49:3f: 51:55:a5:bc:58:4d:0d:82:98:b0:e0:ec:37:27:9e:63:7b:60: ad:7a:d7:c5:80:7b:ee:1a:da:32:5d:43:32:e4:0c:aa:c6:a9: 72:86:9e:86:67:e4:ff:0c:87:0a:a1:1e:1c:eb:85:14:53:ac: c0:ce:91:0e:ee:77:d0:4b:67:e4:b0:81:fb:2d:84:0d:13:99: 92:20:71:c0:c8:b7:2f:ea:b2:3c:62:60:f0:cd:d4:74:2c:db: d8:64:41:45:9f:f5:13:45:e5:ac:b0:77:1f:2f:3e:ca:d2:0e: 8a:8b:e4:21:73:36:b2:70:e7:06:21:e9:d6:e9:a9:26:84:28: 19:86:88:2f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuy+DIU6OHNpe7fiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmMzBkYTYtMDJiYS00NWNlLTk0ZTctMDMxYzQ1Mzc0 Y2Q4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDIxZGIwNTUtOTQ4MC00MTNmLTlmYzQtNTI1OGQyODE5YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1n7vKCQmheGAIAAYh3PFEbPxhFTqVVsML75 IN2Da6kX4EVjFtia119b4DBqumDwkCSCvQh6vf4uGkrUcTrtV8FExnLNp/sLbVoY CbN8u/B1RzQEwTKMfbCwOd5vIQ/Ny6bAeFOOCJwtFA8C2YYLfYcxvEQU3p8L8jvB Yi8N9YOsTjAcWTw7931N9dGE6H1snKoiHmnrwZyU44Cv5bcu263WSGeNt8+1pPH4 D9h1qyv3TOx5+dIxXOgBMGQ/x33Zd39fGuHSosUMt/TlMonZh0NDXp/1eBcb92R1 uha9m49okubcjqDJz2DH/frNBmNAK8V/poFG1KDeLfdcOrFjrQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFI8tGK1a3yuRqEES6CsKYaR9Tq+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YmYz MGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFjNDUzNzRjZDgvNjU0ZDZlYjEtYzdjMC0z MmE1LWI4OWMtYTNkODllNTJhMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWJmMzBkYTYtMDJiYS00NWNlLTk0 ZTctMDMxYzQ1Mzc0Y2Q4LzliZjMwZGE2LTAyYmEtNDVjZS05NGU3LTAzMWM0NTM3 NGNkOC5jcmwwHwYDVR0jBBgwFoAUmciCkEmwGVn9tYDtw2KU6hqLRR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YmYzMGRhNi0wMmJhLTQ1Y2UtOTRlNy0wMzFj NDUzNzRjZDguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxyZgMA0E AgACMAcDBQAmBzhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHpoSEYpy75EcPUmHtZmMEAND7V5oaBX7r3K Ykr27f5IESXl4jknx5ETm4x8V/1+JQk1U4ARsO0BzCJ0AnhuEn06xfGL/C5XIiZW LXNJMljJ241W87rNSX81iuiomorIvxdIYTqH8dg9LK99lYpfEXQSEhLY3QhLt+hy KhZJP1FVpbxYTQ2CmLDg7DcnnmN7YK1618WAe+4a2jJdQzLkDKrGqXKGnoZn5P8M hwqhHhzrhRRTrMDOkQ7ud9BLZ+SwgfsthA0TmZIgccDIty/qsjxiYPDN1HQs29hk QUWf9RNF5aywdx8vPsrSDoqL5CFzNrJw5wYh6dbpqSaEKBmGiC8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:19:34 2025 by rpki-client