$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json) Hash identifier: p5qIN3NwyL6ZEXMBt13fXy+9MiyIsg9qP0d+LBNWWIs= Subject key identifier: 3E:AC:DF:FE:2E:03:F8:2E:ED:21:4E:C0:47:F6:1C:EE:9F:FB:15:21 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F4328584B4081A32706F1DEDE58CA27A0 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 16509 IP address blocks: 64.207.222.0/24 maxlen: 24 64.207.223.0/24 maxlen: 24 67.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a3:27:06:f1:de:de:58:ca:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=e1f33cc6-f34e-4733-a693-5ca12a396524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:9f:47:cf:02:57:9f:a0:58:b5:f9:d2:cb: ef:4b:21:19:dd:f9:4b:ac:88:85:1c:27:52:ea:51: f2:34:6b:b6:d1:ac:df:07:42:97:0e:50:fa:b5:a6: a2:46:09:05:b4:72:a6:c4:a6:f0:71:ed:b5:b6:c1: 58:0e:64:9b:a5:fa:02:b9:07:95:aa:38:79:c0:e0: 82:3f:99:1e:60:62:0f:f4:7c:ad:8d:17:de:5f:2f: 4b:2a:11:ff:dd:d2:a2:c0:71:07:b2:45:5a:9e:f6: 22:9a:35:1a:68:2a:86:2c:0b:04:00:4c:26:88:e5: 85:fc:79:b3:e0:32:26:dd:3d:f5:1a:b5:58:37:45: 16:ba:2e:00:3c:f0:d2:38:a8:5a:21:a9:4d:8f:70: ae:e2:7f:8f:9c:70:cc:8b:8e:60:92:77:0b:ec:26: 9d:b2:06:a2:8b:41:40:16:f1:de:5c:e7:ae:35:16: a1:68:fb:e3:44:73:02:8d:03:03:6a:45:7d:7e:94: 10:6c:2d:67:f8:d4:8a:3e:98:d3:f4:b0:e0:22:64: 24:52:0b:7a:9c:92:5e:11:7f:89:dd:5d:9b:64:f4: db:06:af:df:f1:60:4d:1f:7e:14:5f:67:cb:60:18: 0c:01:8f:ba:9a:96:9d:ad:20:e7:93:35:b5:dc:dc: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:DF:FE:2E:03:F8:2E:ED:21:4E:C0:47:F6:1C:EE:9F:FB:15:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2c:23:ed:23:77:bd:d4:f5:16:32:ea:c2:8d:47:ac:39:96: 5b:b7:6e:cc:51:25:e1:87:16:1a:9a:a2:f6:fe:bc:28:86:67: 6d:be:aa:85:61:cf:4c:06:c6:c9:e5:95:c5:dd:9e:b1:92:d6: 4b:45:fe:d0:8c:f6:1c:bf:88:ed:06:d3:27:0f:f4:df:61:97: 13:e3:77:b8:0d:08:10:79:0e:1f:8d:57:fb:7d:02:81:6c:e6: b9:14:b3:80:f5:9f:8f:49:34:99:65:4b:a4:27:64:be:da:c6: 9c:53:e4:58:1a:42:a2:36:1f:9d:94:bd:71:bc:71:7e:d2:1a: 42:d0:be:e4:5e:c4:b6:35:72:17:3d:77:e4:75:77:d5:0b:d5: 52:80:0c:63:8e:aa:40:d9:a9:da:fb:eb:bb:4e:65:bc:c6:f1: e1:6e:74:27:39:25:1b:43:13:cb:ff:66:ae:ef:94:99:fa:09: f5:34:85:4e:cf:0c:fa:d9:be:8c:97:9f:74:89:9f:c0:19:b1: 71:c3:cc:07:ec:28:ea:0c:11:d8:e5:8a:41:63:73:85:08:90: 7f:40:76:10:77:1f:d8:9e:9c:59:0a:1f:06:e8:85:cc:21:fd: 59:04:4c:b0:60:f6:f2:4b:69:04:9f:8c:21:2c:57:3c:25:84: 96:a3:39:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtAgaMnBvHe3ljKJ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZTFmMzNjYzYtZjM0ZS00NzMzLWE2OTMtNWNhMTJhMzk2NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjASfR88CV5+gWLX50svvSyEZ3flLrIiFHCdS 6lHyNGu20azfB0KXDlD6taaiRgkFtHKmxKbwce21tsFYDmSbpfoCuQeVqjh5wOCC P5keYGIP9HytjRfeXy9LKhH/3dKiwHEHskVanvYimjUaaCqGLAsEAEwmiOWF/Hmz 4DIm3T31GrVYN0UWui4APPDSOKhaIalNj3Cu4n+PnHDMi45gkncL7Cadsgaii0FA FvHeXOeuNRahaPvjRHMCjQMDakV9fpQQbC1n+NSKPpjT9LDgImQkUgt6nJJeEX+J 3V2bZPTbBq/f8WBNH34UX2fLYBgMAY+6mpadrSDnkzW13NzU+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD6s3/4uA/gu7SFOwEf2HO6f+xUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvMjk2NDc0Y2EtOWEyYi0z NWYxLWE5MDAtNjIyNzZjNGI4MjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQM/eAwQA Q97+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABwsI+0jd73U9RYy6sKNR6w5llu3bsxRJeGHFhqaovb+vCiG Z22+qoVhz0wGxsnllcXdnrGS1ktF/tCM9hy/iO0G0ycP9N9hlxPjd7gNCBB5Dh+N V/t9AoFs5rkUs4D1n49JNJllS6QnZL7axpxT5FgaQqI2H52UvXG8cX7SGkLQvuRe xLY1chc9d+R1d9UL1VKADGOOqkDZqdr767tOZbzG8eFudCc5JRtDE8v/Zq7vlJn6 CfU0hU7PDPrZvoyXn3SJn8AZsXHDzAfsKOoMEdjlikFjc4UIkH9AdhB3H9ienFkK Hwbohcwh/VkETLBg9vJLaQSfjCEsVzwlhJajOZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:57 2025 by rpki-client