$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa File: cea2d881-3d76-3a80-94b9-42e2473af64d.roa (raw, json) Hash identifier: QV3yeP3xCznjCfJhCl7jbnAyA70zPwk9E4ictXYUmi8= Subject key identifier: 94:A1:B6:C9:3D:DE:57:E8:FD:38:3A:9E:F7:53:A3:CD:95:21:74:19 Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Certificate serial: 010D0C9F4328584B80B767E5D65E4230E340BD00 Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 33387 IP address blocks: 63.141.224.0/19 maxlen: 24 74.91.16.0/20 maxlen: 24 107.150.32.0/19 maxlen: 24 142.54.160.0/19 maxlen: 24 192.151.144.0/20 maxlen: 24 192.187.96.0/19 maxlen: 24 198.204.224.0/19 maxlen: 24 199.168.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:67:e5:d6:5e:42:30:e3:40:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e6bb448a-fb19-482a-8c7f-4a47d9b4e6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:82:52:5b:21:2b:2e:28:56:68:ec:6d:a8: 0a:f1:0e:9e:0d:e9:65:c6:9a:b5:e1:95:05:b5:f4: d2:8e:27:4a:e6:28:c3:2a:0d:6b:7b:bb:ec:35:b1: 2a:31:2f:4f:40:c1:76:e2:fb:44:d4:b9:0c:82:48: a7:e6:60:ec:39:85:22:93:a0:bd:11:15:27:e9:9c: 00:84:d1:e0:0f:fb:14:be:38:d0:90:5e:5d:32:ee: d7:3e:25:ad:cb:b6:cb:68:9d:a0:94:65:5d:d7:7a: df:58:21:61:a2:1d:5a:78:1d:20:d6:56:b9:74:6c: df:45:c1:6d:00:d8:24:35:4d:38:f4:38:ea:3e:8d: dd:21:b8:b1:1b:b0:c8:d6:16:bd:11:64:de:3c:b1: 83:a5:54:2d:ce:fc:20:7b:b2:91:f7:e0:e6:61:cf: c6:1f:8f:22:7c:15:b2:fd:97:40:94:35:27:6a:38: 13:9d:2b:16:8c:9b:dd:ea:71:2e:72:04:ed:7f:0e: ca:37:35:18:e3:03:90:91:c5:54:97:06:0f:86:2f: 8b:c8:45:80:c3:d9:8f:33:17:6f:16:24:9e:95:4f: fb:ee:a7:b8:14:e9:39:c3:e1:f5:4e:23:cb:85:3a: dd:b5:3e:67:4e:a3:f7:fc:87:88:05:60:05:fa:f2: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A1:B6:C9:3D:DE:57:E8:FD:38:3A:9E:F7:53:A3:CD:95:21:74:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/cea2d881-3d76-3a80-94b9-42e2473af64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl X509v3 Authority Key Identifier: keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer sbgp-ipAddrBlock: critical IPv4: 63.141.224.0/19 74.91.16.0/20 107.150.32.0/19 142.54.160.0/19 192.151.144.0/20 192.187.96.0/19 198.204.224.0/19 199.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d5:79:22:b7:25:d3:09:9e:dd:6b:9d:f4:b2:94:71:26:dd: 83:5b:2d:71:4e:80:55:2e:0c:be:45:07:96:bf:cb:90:7a:b1: 88:9e:1f:43:07:34:c5:7f:f9:86:3a:7d:a2:2a:e0:cc:5e:8f: f7:9d:97:10:b2:96:c9:61:cf:1d:c6:ea:54:f9:f5:d1:a2:3d: 5b:54:e3:85:87:7d:ad:40:de:54:17:d8:45:62:0c:bc:32:53: 11:26:43:57:2a:2f:bc:3c:b8:9d:c7:7a:b7:18:7a:68:a4:66: 59:3d:c9:a4:73:59:45:e5:d0:d7:f8:9d:70:00:32:54:51:07: 91:12:e6:db:52:71:a8:dc:3c:d2:14:1e:fd:a9:dd:71:b5:a9: 95:8d:00:e8:90:01:d9:c5:64:a8:40:18:46:f3:23:1c:b3:d3: 50:6f:60:cd:ae:2f:74:a0:d8:85:dd:ec:8d:d6:26:ad:1e:96: 82:99:c5:b4:9d:74:72:fc:a7:11:cc:e4:e0:b7:4e:bd:6f:9c: 0f:43:37:92:65:79:ee:c5:2a:63:53:62:06:17:5b:4d:e2:c2: ad:7b:7c:0d:eb:fd:b0:cd:7b:84:a1:39:a1:05:27:01:72:31: a7:98:2f:19:e0:01:32:fe:8c:18:44:f4:9b:4e:a5:9e:70:21: 0a:1a:4c:5d -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEuAt2fl1l5CMONAvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj YzU1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTZiYjQ0OGEtZmIxOS00ODJhLThjN2YtNGE0N2Q5YjRlNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iyCUlshKy4oVmjsbagK8Q6eDellxpq14ZUF tfTSjidK5ijDKg1re7vsNbEqMS9PQMF24vtE1LkMgkin5mDsOYUik6C9ERUn6ZwA hNHgD/sUvjjQkF5dMu7XPiWty7bLaJ2glGVd13rfWCFhoh1aeB0g1la5dGzfRcFt ANgkNU049DjqPo3dIbixG7DI1ha9EWTePLGDpVQtzvwge7KR9+DmYc/GH48ifBWy /ZdAlDUnajgTnSsWjJvd6nEucgTtfw7KNzUY4wOQkcVUlwYPhi+LyEWAw9mPMxdv FiSelU/77qe4FOk5w+H1TiPLhTrdtT5nTqP3/IeIBWAF+vLetwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFJShtsk93lfo/Tg6nvdTo82VIXQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0 YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvY2VhMmQ4ODEtM2Q3Ni0z YTgwLTk0YjktNDJlMjQ3M2FmNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4 Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz MzY0OGNjNTUuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFP43gAwQE SlsQAwQFa5YgAwQFjjagAwQEwJeQAwQFwLtgAwQFxszgAwQDx6hgMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE/VeSK3JdMJnt1rnfSylHEm3YNbLXFOgFUuDL5FB5a/y5B6sYieH0MHNMV/+YY6 faIq4Mxej/edlxCylslhzx3G6lT59dGiPVtU44WHfa1A3lQX2EViDLwyUxEmQ1cq L7w8uJ3HercYemikZlk9yaRzWUXl0Nf4nXAAMlRRB5ES5ttScajcPNIUHv2p3XG1 qZWNAOiQAdnFZKhAGEbzIxyz01BvYM2uL3Sg2IXd7I3WJq0eloKZxbSddHL8pxHM 5OC3Tr1vnA9DN5Jlee7FKmNTYgYXW03iwq17fA3r/bDNe4ShOaEFJwFyMaeYLxng ATL+jBhE9JtOpZ5wIQoaTF0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:38 2025 by rpki-client