$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa File: 5e6b3956-f389-30ac-a866-34bb38831507.roa (raw, json) Hash identifier: u9fOhtyRdpYz3p7+nd4HbHk+XfeEZnn5wljMFugOVVM= Subject key identifier: C9:D2:4D:5E:AA:41:F9:83:34:E8:B7:95:9C:94:AE:B0:41:7D:00:C0 Certificate issuer: /CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Certificate serial: 010D0C9F4328584B965B99FE430405AAA83B2280 Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa Signing time: Mon 20 Oct 2025 19:03:31 +0000 ROA not before: Mon 20 Oct 2025 19:03:31 +0000 ROA not after: Sun 18 Jan 2026 20:03:31 +0000 asID: 1421 IP address blocks: 66.39.192.0/19 maxlen: 24 66.220.58.0/24 maxlen: 24 69.64.240.0/20 maxlen: 24 74.126.144.0/20 maxlen: 24 162.211.176.0/22 maxlen: 24 162.216.96.0/23 maxlen: 24 162.216.100.0/22 maxlen: 24 199.38.232.0/22 maxlen: 24 199.101.92.0/22 maxlen: 24 2001:4848::/32 maxlen: 48 2605:dc80::/32 maxlen: 48 2606:9100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:5b:99:fe:43:04:05:aa:a8:3b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421 Validity Not Before: Oct 20 19:03:31 2025 GMT Not After : Jan 18 20:03:31 2026 GMT Subject: CN=25429835-2417-406a-8a74-385095dca0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:72:6b:30:ee:44:e7:26:55:f6:95:1c:2a: 66:e2:12:39:ad:8e:4a:8f:49:91:05:ba:7b:d5:9b: 52:1e:4a:f8:4a:b7:0c:2f:7e:3c:09:60:b7:bd:d4: 23:e5:26:62:5b:29:0d:d9:b4:e0:b1:f7:5f:c3:e5: 93:2b:2c:12:7d:0a:7b:e3:86:41:56:08:9e:70:93: de:a6:7b:f7:c5:16:e4:f9:a8:8a:66:09:9f:f6:8f: e9:b1:33:7d:61:90:3c:64:51:a8:73:11:36:ce:6e: 9b:91:0d:d0:2b:90:fb:8e:d5:b5:69:d8:fd:ff:a1: 14:1f:72:b2:a7:67:23:87:b6:25:15:b7:57:95:2b: fa:0f:68:39:3e:9f:89:c4:74:88:d9:5d:03:ea:3d: 1c:f1:b0:04:78:61:10:81:9d:8c:b1:57:6e:9f:e4: 47:29:0c:dc:b2:0b:83:e9:f1:ae:37:dd:db:02:86: 8f:66:17:25:9d:d4:cc:7e:79:95:ca:f8:44:7f:57: b7:bc:ae:4b:f7:6c:39:06:de:c0:b4:7a:04:43:94: 38:5b:7d:e9:7f:72:c6:af:5a:34:85:79:89:ff:79: 38:45:23:49:40:16:a2:ab:b0:4b:7a:5f:8a:3b:3d: 88:13:98:6e:61:d9:30:d0:c1:9b:d3:be:01:42:45: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:4D:5E:AA:41:F9:83:34:E8:B7:95:9C:94:AE:B0:41:7D:00:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl X509v3 Authority Key Identifier: keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer sbgp-ipAddrBlock: critical IPv4: 66.39.192.0/19 66.220.58.0/24 69.64.240.0/20 74.126.144.0/20 162.211.176.0/22 162.216.96.0/23 162.216.100.0/22 199.38.232.0/22 199.101.92.0/22 IPv6: 2001:4848::/32 2605:dc80::/32 2606:9100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:49:8a:72:51:cf:4f:d3:1a:ff:5a:86:7a:4d:8d:d1:1d:47: b6:71:68:c0:0f:ff:48:37:55:ce:f2:64:6e:46:b1:ee:92:4b: 6e:fb:15:f2:e9:83:f3:ed:dd:19:0c:c0:ec:54:15:bb:07:59: 85:e3:f4:fd:dc:63:bb:b7:11:1e:02:91:98:bf:fa:e1:4c:16: bf:4d:a3:32:a6:41:39:36:64:aa:b8:74:76:70:85:c8:b1:f3: 96:8b:40:34:df:57:2a:1b:66:d4:ad:a0:ed:da:21:ca:b8:ef: 40:b1:e4:ad:b1:98:06:45:29:96:f4:22:c3:59:3a:0e:b1:dd: 0a:86:83:77:17:ba:9f:e3:41:7a:07:a2:fa:8c:59:84:2e:94: b3:82:ac:7a:6f:2f:e5:89:63:8d:49:c5:3c:1c:9f:b4:b0:2d: 09:f4:8d:85:dc:3e:93:08:c3:4c:25:05:08:41:92:98:bc:1a: e9:02:bd:1d:3e:70:62:8e:80:31:14:eb:5c:68:e6:11:57:8d: 76:87:2e:f1:13:91:f4:40:06:ea:b5:50:7f:e6:50:5e:ba:42: b4:ca:f2:77:81:91:d5:49:6b:ea:cd:07:45:1a:7a:a1:20:7d: bb:25:af:e8:d1:01:aa:01:db:27:c1:73:41:e0:77:8e:1f:7e: 92:1f:b7:c8 -----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgIUAQ0Mn0MoWEuWW5n+QwQFqqg7IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJmNTY3YTAtNGNmOC00MjlkLTgyYjMtM2QyODRhMjQ2 NDIxMB4XDTI1MTAyMDE5MDMzMVoXDTI2MDExODIwMDMzMVowLzEtMCsGA1UEAxMk MjU0Mjk4MzUtMjQxNy00MDZhLThhNzQtMzg1MDk1ZGNhMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV1yazDuROcmVfaVHCpm4hI5rY5Kj0mRBbp7 1ZtSHkr4SrcML348CWC3vdQj5SZiWykN2bTgsfdfw+WTKywSfQp744ZBVgiecJPe pnv3xRbk+aiKZgmf9o/psTN9YZA8ZFGocxE2zm6bkQ3QK5D7jtW1adj9/6EUH3Ky p2cjh7YlFbdXlSv6D2g5Pp+JxHSI2V0D6j0c8bAEeGEQgZ2MsVdun+RHKQzcsguD 6fGuN93bAoaPZhclndTMfnmVyvhEf1e3vK5L92w5Bt7AtHoEQ5Q4W33pf3LGr1o0 hXmJ/3k4RSNJQBaiq7BLel+KOz2IE5huYdkw0MGb074BQkVnyQIDAQABo4IDojCC A54wHQYDVR0OBBYEFMnSTV6qQfmDNOi3lZyUrrBBfQDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1 NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4NGEyNDY0MjEvNWU2YjM5NTYtZjM4OS0z MGFjLWE4NjYtMzRiYjM4ODMxNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWJmNTY3YTAtNGNmOC00MjlkLTgy YjMtM2QyODRhMjQ2NDIxL2ViZjU2N2EwLTRjZjgtNDI5ZC04MmIzLTNkMjg0YTI0 NjQyMS5jcmwwHwYDVR0jBBgwFoAUvNxgVjT3uQPm5V7F/U3uzGmVQTcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYmY1NjdhMC00Y2Y4LTQyOWQtODJiMy0zZDI4 NGEyNDY0MjEuY2VyMGwGCCsGAQUFBwEHAQH/BF0wWzA8BAIAATA2AwQFQifAAwQA Qtw6AwQERUDwAwQESn6QAwQCotOwAwQBothgAwQCothkAwQCxyboAwQCx2VcMBsE AgACMBUDBQAgAUhIAwUAJgXcgAMFACYGkQAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgUmKclHPT9Ma/1qG ek2N0R1HtnFowA//SDdVzvJkbkax7pJLbvsV8umD8+3dGQzA7FQVuwdZheP0/dxj u7cRHgKRmL/64UwWv02jMqZBOTZkqrh0dnCFyLHzlotANN9XKhtm1K2g7dohyrjv QLHkrbGYBkUplvQiw1k6DrHdCoaDdxe6n+NBegei+oxZhC6Us4Ksem8v5YljjUnF PByftLAtCfSNhdw+kwjDTCUFCEGSmLwa6QK9HT5wYo6AMRTrXGjmEVeNdocu8ROR 9EAG6rVQf+ZQXrpCtMryd4GR1Ulr6s0HRRp6oSB9uyWv6NEBqgHbJ8FzQeB3jh9+ kh+3yA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:29:22 2025 by rpki-client