$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa File: cd9eef01-ff5f-3461-982d-ae650cfc798a.roa (raw, json) Hash identifier: Xu30pMU4RyLvqxusTJA1iI4pg36zGYQiVExyX2MqjSs= Subject key identifier: 49:9C:3E:D4:C2:21:0C:D7:69:3F:08:12:83:5C:15:61:65:FC:A8:8D Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584B8E8C0D36830B4477EACBCA00 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 46455 IP address blocks: 74.214.0.0/20 maxlen: 24 143.223.224.0/20 maxlen: 24 146.12.128.0/19 maxlen: 24 146.12.192.0/20 maxlen: 24 158.247.32.0/20 maxlen: 24 167.150.64.0/21 maxlen: 24 195.85.64.0/23 maxlen: 24 195.85.118.0/23 maxlen: 24 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:8c:0d:36:83:0b:44:77:ea:cb:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=c431d294-ec63-4280-ab2e-3e3683d4af96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:ec:22:8c:ee:ba:e1:2a:90:d8:b3:ac:99: 69:d9:94:76:be:a4:97:b8:e2:db:91:0c:b7:5c:52: bb:86:0f:06:d0:c2:9d:e2:b3:ef:c9:46:20:ee:5b: ec:85:03:05:00:88:4c:f9:2a:9c:da:c2:08:6a:a8: f0:cf:ae:49:2e:23:79:43:5e:59:e7:73:ed:76:39: 1d:b6:e5:b0:2c:80:dc:20:e7:82:00:fc:b3:c0:fb: 70:86:d0:91:15:57:a6:92:d8:1e:21:ab:bc:84:d8: 5d:be:a5:78:43:a1:6e:e4:62:6a:f8:6e:e3:84:aa: 1c:1a:b9:37:f7:eb:cb:4a:9a:f6:b8:9e:1d:ea:30: 07:19:d3:b4:ed:90:70:4d:be:7a:08:f1:47:bb:98: 2c:05:63:bc:65:b2:ee:90:97:90:43:89:4a:50:f4: 23:7b:94:e9:28:6a:f8:70:e6:04:f4:05:c1:79:ad: 96:0a:d1:b8:ed:dd:b7:86:ce:70:3f:03:f9:b2:f9: 89:01:32:84:50:63:a8:6e:11:18:0f:97:87:91:c9: 65:48:fb:aa:e3:51:64:30:46:21:23:d4:f2:3e:4c: 99:98:5d:4f:04:0d:d0:c5:a4:28:58:7e:77:9e:a7: d3:4a:08:9b:a9:d4:ad:d8:f9:70:1d:51:a3:97:87: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9C:3E:D4:C2:21:0C:D7:69:3F:08:12:83:5C:15:61:65:FC:A8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 74.214.0.0/20 143.223.224.0/20 146.12.128.0/19 146.12.192.0/20 158.247.32.0/20 167.150.64.0/21 195.85.64.0/23 195.85.118.0/23 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cc:42:9e:c1:65:db:9f:d6:03:b2:68:5d:a4:61:19:96:76: d5:26:e9:3c:29:1c:72:c9:b3:f0:50:fc:14:a6:06:eb:2f:d4: 08:59:f0:36:7b:a6:c3:cc:7d:c6:29:c6:34:10:7d:f3:7e:fc: 61:59:18:68:49:65:5f:a9:e4:84:18:b7:8f:77:95:60:6c:9a: d6:0e:9f:88:ef:ab:bf:41:60:c6:b1:07:e7:bd:ea:7d:bb:cf: 54:c3:ce:dc:f3:ed:96:a5:67:ef:a2:97:fd:0d:0e:fe:27:da: 7d:4f:05:ae:10:06:70:2a:9c:a5:5f:66:9d:3e:f6:2f:34:0e: 5a:1a:5d:08:a7:40:bb:23:e7:93:5f:40:8c:b0:82:43:da:cd: 4f:ca:10:01:b7:49:35:da:c0:59:33:6e:09:35:b3:ad:a3:58: 30:59:18:27:17:95:8a:ad:be:ac:de:31:09:5f:2a:21:30:6a: f1:47:e9:d6:af:3e:21:08:cd:30:0e:59:bb:35:e9:18:cf:3d: 58:a4:b2:f1:1d:2d:e0:ad:88:e8:53:28:95:09:7b:d4:af:68: 10:a8:56:3f:f3:7d:94:5b:f3:0c:14:4c:3c:16:a2:01:84:00: 0f:dd:9a:e6:3f:4d:76:64:46:c1:04:3d:3c:0c:e0:aa:2a:85: d2:06:46:31 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEuOjA02gwtEd+rLygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YzQzMWQyOTQtZWM2My00MjgwLWFiMmUtM2UzNjgzZDRhZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFrsIozuuuEqkNizrJlp2ZR2vqSXuOLbkQy3 XFK7hg8G0MKd4rPvyUYg7lvshQMFAIhM+Sqc2sIIaqjwz65JLiN5Q15Z53Ptdjkd tuWwLIDcIOeCAPyzwPtwhtCRFVemktgeIau8hNhdvqV4Q6Fu5GJq+G7jhKocGrk3 9+vLSpr2uJ4d6jAHGdO07ZBwTb56CPFHu5gsBWO8ZbLukJeQQ4lKUPQje5TpKGr4 cOYE9AXBea2WCtG47d23hs5wPwP5svmJATKEUGOobhEYD5eHkcllSPuq41FkMEYh I9TyPkyZmF1PBA3QxaQoWH53nqfTSgibqdSt2PlwHVGjl4cB8wIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFEmcPtTCIQzXaT8IEoNcFWFl/KiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvY2Q5ZWVmMDEtZmY1Zi0z NDYxLTk4MmQtYWU2NTBjZmM3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEStYAAwQE j9/gAwQFkgyAAwQEkgzAAwQEnvcgAwQDp5ZAAwQBw1VAAwQBw1V2AwQDzlJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHMQp7BZduf1gOyaF2kYRmWdtUm6TwpHHLJs/BQ/BSmBusv1AhZ8DZ7 psPMfcYpxjQQffN+/GFZGGhJZV+p5IQYt493lWBsmtYOn4jvq79BYMaxB+e96n27 z1TDztzz7ZalZ++il/0NDv4n2n1PBa4QBnAqnKVfZp0+9i80DloaXQinQLsj55Nf QIywgkPazU/KEAG3STXawFkzbgk1s62jWDBZGCcXlYqtvqzeMQlfKiEwavFH6dav PiEIzTAOWbs16RjPPViksvEdLeCtiOhTKJUJe9SvaBCoVj/zfZRb8wwUTDwWogGE AA/dmuY/TXZkRsEEPTwM4KoqhdIGRjE= -----END CERTIFICATE-----Generated at Tue Oct 21 09:43:59 2025 by rpki-client