$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/6fa7bd9a-caca-3580-98c3-b520760da5c8.roa File: 6fa7bd9a-caca-3580-98c3-b520760da5c8.roa (raw, json) Hash identifier: dmPoC+OJyFgD6ItZjilrfOO1OQgD4a3rn17z0svuxMU= Subject key identifier: 2C:F1:C0:B2:CC:65:5F:1B:A3:91:BF:FC:8A:66:D1:03:CB:11:19:67 Certificate issuer: /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Certificate serial: 010D0C9F4328584B2496C8C9F949C2F4F7547780 Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/6fa7bd9a-caca-3580-98c3-b520760da5c8.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 36131 IP address blocks: 83.229.89.0/24 maxlen: 24 83.229.90.0/24 maxlen: 24 104.36.224.0/24 maxlen: 24 192.12.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c8:c9:f9:49:c2:f4:f7:54:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=9422b5db-fb27-40c4-a863-a7297cda830b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:0b:fd:4d:c9:61:b5:ea:03:0a:16:5b:09: 8b:d6:f1:81:83:5c:8b:1f:fc:6f:9d:78:ac:1f:9f: 88:3c:8d:06:ac:0d:f4:8f:61:7c:de:18:15:9d:9d: 65:f9:8d:4a:4b:59:ed:4a:9e:b6:b7:ee:03:fb:bf: b0:6f:21:25:e7:01:c1:5d:9a:9d:c8:ee:59:88:b0: 17:25:13:68:7b:21:a9:67:41:a5:4e:04:06:4b:2f: d3:bf:31:b9:da:fd:14:af:d4:68:01:56:6f:0e:4f: 7d:70:c9:cf:8f:ee:88:96:67:18:ab:5c:5c:20:fd: db:0c:06:b2:d5:96:8a:48:75:3f:f6:cb:86:59:8f: eb:b6:41:17:b4:bf:f6:e3:ac:ed:9d:22:de:d8:28: 6e:31:83:90:7d:2e:ac:ae:fe:0f:4a:5b:b2:9c:a1: 2b:ca:2a:df:63:76:d8:89:d9:91:b1:ec:2f:61:a7: 32:87:95:2e:f5:00:de:3a:5f:f2:79:55:d1:9b:c4: ae:ea:9b:f6:3f:14:71:82:c1:e0:f6:a7:27:27:c1: 20:a0:fc:7c:bd:78:a8:64:a0:b2:44:c5:76:bc:2d: af:ff:04:8f:dd:40:e5:a3:91:6e:a6:ab:ac:39:31: 00:1a:cc:64:82:46:42:83:54:c8:0c:f6:7a:59:cf: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:C0:B2:CC:65:5F:1B:A3:91:BF:FC:8A:66:D1:03:CB:11:19:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/6fa7bd9a-caca-3580-98c3-b520760da5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl X509v3 Authority Key Identifier: keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer sbgp-ipAddrBlock: critical IPv4: 83.229.89.0-83.229.90.255 104.36.224.0/24 192.12.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c6:8f:9e:a4:1b:b6:42:21:23:37:54:44:68:ae:30:d7:5a: b3:f7:a1:e5:33:44:79:b5:08:09:1c:27:c5:b0:49:e0:66:ab: 6e:1e:c0:3a:08:dd:04:cd:d4:3e:94:e6:21:af:9e:50:5b:a0: d9:da:d0:56:08:12:c1:33:dc:a0:d1:84:06:e7:6b:1f:f4:44: fa:e3:bd:46:07:37:91:b8:0b:dd:f8:90:58:6b:c0:e8:12:0f: 9f:ea:b9:7f:8f:f9:41:c5:c1:4a:11:4f:0a:2b:d7:81:01:57: e0:1e:d3:29:89:14:02:08:63:c5:a1:30:3b:16:19:64:27:5e: fb:06:18:68:df:68:d9:16:40:9c:07:22:de:94:29:d6:3e:2c: 70:ea:19:71:01:b2:0d:8f:aa:4f:ae:68:31:17:cc:45:96:08: 7d:3c:31:c3:26:06:72:2f:30:9c:25:af:c3:1a:6c:ea:c5:d9: 4f:13:21:6e:29:70:cd:e3:37:64:be:ce:ec:e2:d6:0a:74:73: 5d:88:fc:b0:19:76:0f:ba:70:89:51:01:fd:14:d6:86:09:57: 1d:e6:8c:73:2f:2f:a9:08:eb:f9:78:d8:8c:1f:8d:38:39:fa: 4d:ac:dc:65:36:ef:ce:aa:e1:a2:9d:74:97:04:e3:7c:63:ae: 31:65:62:37 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEsklsjJ+UnC9PdUd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIz MjUxMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk OTQyMmI1ZGItZmIyNy00MGM0LWE4NjMtYTcyOTdjZGE4MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGML/U3JYbXqAwoWWwmL1vGBg1yLH/xvnXis H5+IPI0GrA30j2F83hgVnZ1l+Y1KS1ntSp62t+4D+7+wbyEl5wHBXZqdyO5ZiLAX JRNoeyGpZ0GlTgQGSy/TvzG52v0Ur9RoAVZvDk99cMnPj+6IlmcYq1xcIP3bDAay 1ZaKSHU/9suGWY/rtkEXtL/246ztnSLe2ChuMYOQfS6srv4PSluynKEryirfY3bY idmRsewvYacyh5Uu9QDeOl/yeVXRm8Su6pv2PxRxgsHg9qcnJ8EgoPx8vXioZKCy RMV2vC2v/wSP3UDlo5FupqusOTEAGsxkgkZCg1TIDPZ6Wc/efQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFCzxwLLMZV8bo5G//Ipm0QPLERlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTky NTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvNmZhN2JkOWEtY2FjYS0z NTgwLTk4YzMtYjUyMDc2MGRhNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTU5MjUzZmUtOGI0Zi00OGY2LTlm ZTEtMTA5ZGY2YmIzMjUxLzU1OTI1M2ZlLThiNGYtNDhmNi05ZmUxLTEwOWRmNmJi MzI1MS5jcmwwHwYDVR0jBBgwFoAU+dOqBOdJT5n/YbCdWYtxuQDxUwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlk ZjZiYjMyNTEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABT5VkD BABT5VoDBABoJOADBADADB8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqMaPnqQbtkIhIzdURGiuMNdas/eh 5TNEebUICRwnxbBJ4Garbh7AOgjdBM3UPpTmIa+eUFug2drQVggSwTPcoNGEBudr H/RE+uO9Rgc3kbgL3fiQWGvA6BIPn+q5f4/5QcXBShFPCivXgQFX4B7TKYkUAghj xaEwOxYZZCde+wYYaN9o2RZAnAci3pQp1j4scOoZcQGyDY+qT65oMRfMRZYIfTwx wyYGci8wnCWvwxps6sXZTxMhbilwzeM3ZL7O7OLWCnRzXYj8sBl2D7pwiVEB/RTW hglXHeaMcy8vqQjr+XjYjB+NODn6TazcZTbvzqrhop10lwTjfGOuMWViNw== -----END CERTIFICATE-----Generated at Mon Oct 20 10:39:17 2025 by rpki-client