$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa File: 864d8067-3825-33b1-b76e-1c3b72be155f.roa (raw, json) Hash identifier: zygXAm5MvoX+C8Ad4Q6MHB1IyD8easydbMfmGY0hkoI= Subject key identifier: 91:62:8C:B5:98:74:F0:BB:FE:FB:93:9D:E1:CB:17:E4:20:41:68:23 Certificate issuer: /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Certificate serial: 010D0C9F4328584B821CC3014E068A30B2144340 Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 18616 IP address blocks: 52.119.64.0/19 maxlen: 32 64.111.64.0/20 maxlen: 32 68.233.176.0/20 maxlen: 32 163.182.128.0/19 maxlen: 32 163.182.160.0/23 maxlen: 32 198.254.112.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c3:01:4e:06:8a:30:b2:14:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=3a7e945a-40c9-4b2a-a287-d8403e44e129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:d2:d2:d3:94:28:ec:e4:b8:06:be:4b:aa: 60:d7:95:7e:3e:cd:e9:15:e4:72:09:25:00:1f:e1: ea:b9:63:23:dc:cc:82:4a:b7:c2:ff:b9:e1:40:26: cd:79:b1:0c:c5:df:fe:92:e7:72:06:d2:a4:6d:e1: 5b:5f:9d:3f:cc:a3:61:e9:45:64:db:4b:aa:b7:20: c5:cb:ef:c3:f6:65:ec:e0:c0:7d:e0:33:52:11:e2: 6f:6f:30:bb:27:ed:d2:c4:ff:49:1a:de:46:cc:45: 55:a0:0f:4f:07:00:da:63:fa:25:8a:6a:2d:d8:4a: 45:7e:ce:7c:9b:ef:9b:49:9a:62:37:0e:27:4c:48: 17:53:d5:bd:53:b6:b3:be:af:74:76:d9:18:62:f6: 67:f1:1a:67:96:3a:d8:dc:e6:6a:9f:8b:21:16:34: dc:d7:83:51:40:4d:71:77:a4:dc:81:cc:0d:57:dc: 7b:ba:24:7c:46:7d:93:dd:71:be:ad:a5:cd:56:a6: ec:d4:ac:dc:00:7f:12:1f:78:47:62:dd:b6:a2:ae: d5:0e:c8:a9:f2:45:f2:34:fc:eb:f4:42:82:8f:3d: ce:51:b9:7c:3b:12:2f:3a:ce:0c:d2:e2:bb:9e:fb: dc:c5:19:67:f3:7c:ff:94:cb:19:ca:3e:04:a9:32: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:62:8C:B5:98:74:F0:BB:FE:FB:93:9D:E1:CB:17:E4:20:41:68:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl X509v3 Authority Key Identifier: keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer sbgp-ipAddrBlock: critical IPv4: 52.119.64.0/19 64.111.64.0/20 68.233.176.0/20 163.182.128.0-163.182.161.255 198.254.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:23:24:53:67:0a:99:eb:da:e6:d8:79:cd:90:f3:7c:98:fc: cf:3b:a1:93:9e:1f:20:b4:58:12:bf:57:42:e1:87:18:c7:f3: 82:04:0e:8c:8a:d6:93:21:7f:41:1f:2d:1e:b0:13:88:83:c4: d4:d0:70:12:1a:02:5c:a3:a1:74:ae:d4:26:d8:a2:f6:23:5f: ba:d0:68:34:36:8c:df:7d:64:e8:46:55:dc:c8:96:2d:4c:80: bf:f0:f4:71:e7:1a:40:41:a6:46:79:eb:74:2e:41:7d:07:13: 7d:d6:cb:c6:4f:56:5e:44:63:05:f1:f2:38:cf:36:5a:08:0a: 7b:9a:dd:e1:3a:fa:6c:12:a9:3e:a7:10:b0:2f:67:bc:b3:03: 13:d8:86:b5:cc:fc:18:e4:a0:31:61:d1:e1:43:06:47:03:c8: 9c:40:f6:29:18:28:6c:cc:cd:83:a0:66:96:65:89:72:af:f9: 86:6b:a5:c6:ce:42:00:15:01:11:32:4e:b2:2c:71:de:96:0d: 5e:fe:a8:a8:15:71:ad:23:55:63:7f:87:38:02:a9:ff:ca:23: d0:42:63:a3:41:4c:46:30:27:52:e1:f9:8d:6a:30:a4:06:6e: e8:a4:ea:d9:8a:fe:cc:7e:5c:c2:dc:ea:5f:30:84:ff:61:80: 1a:26:7d:6b -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEuCHMMBTgaKMLIUQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NmY1YzMtY2M4MS00YWNkLTgyMDktYzI4YjZmNWI3 OTg0MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk M2E3ZTk0NWEtNDBjOS00YjJhLWEyODctZDg0MDNlNDRlMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdLS0tOUKOzkuAa+S6pg15V+Ps3pFeRyCSUA H+HquWMj3MyCSrfC/7nhQCbNebEMxd/+kudyBtKkbeFbX50/zKNh6UVk20uqtyDF y+/D9mXs4MB94DNSEeJvbzC7J+3SxP9JGt5GzEVVoA9PBwDaY/olimot2EpFfs58 m++bSZpiNw4nTEgXU9W9U7azvq90dtkYYvZn8RpnljrY3OZqn4shFjTc14NRQE1x d6TcgcwNV9x7uiR8Rn2T3XG+raXNVqbs1KzcAH8SH3hHYt22oq7VDsip8kXyNPzr 9EKCjz3OUbl8OxIvOs4M0uK7nvvcxRln83z/lMsZyj4EqTKePQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFJFijLWYdPC7/vuTneHLF+QgQWgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2 ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhiNmY1Yjc5ODQvODY0ZDgwNjctMzgyNS0z M2IxLWI3NmUtMWMzYjcyYmUxNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWM4NmY1YzMtY2M4MS00YWNkLTgy MDktYzI4YjZmNWI3OTg0LzljODZmNWMzLWNjODEtNGFjZC04MjA5LWMyOGI2ZjVi Nzk4NC5jcmwwHwYDVR0jBBgwFoAUAtKGNKaNQAcaGCa7Z0eLWJH/0icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhi NmY1Yjc5ODQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFNHdAAwQE QG9AAwQEROmwMAwDBAejtoADBAGjtqADBATG/nAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJiMkU2cKmeva 5th5zZDzfJj8zzuhk54fILRYEr9XQuGHGMfzggQOjIrWkyF/QR8tHrATiIPE1NBw EhoCXKOhdK7UJtii9iNfutBoNDaM331k6EZV3MiWLUyAv/D0cecaQEGmRnnrdC5B fQcTfdbLxk9WXkRjBfHyOM82WggKe5rd4Tr6bBKpPqcQsC9nvLMDE9iGtcz8GOSg MWHR4UMGRwPInED2KRgobMzNg6BmlmWJcq/5hmulxs5CABUBETJOsixx3pYNXv6o qBVxrSNVY3+HOAKp/8oj0EJjo0FMRjAnUuH5jWowpAZu6KTq2Yr+zH5cwtzqXzCE /2GAGiZ9aw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:27 2025 by rpki-client