$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa File: d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa (raw, json) Hash identifier: phwQXR/ry+TPAbtKdVw/hiyc19Q5+vSxrrAnOmcBzVs= Subject key identifier: 4B:48:F4:0B:AB:88:66:D2:EE:82:F0:48:40:F2:A9:9D:47:30:05:E9 Certificate issuer: /CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee Certificate serial: 010D0C9F4328584B5B073BFED458710D556EBE50 Authority key identifier: E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 4261 IP address blocks: 69.64.0.0/20 maxlen: 20 173.237.224.0/20 maxlen: 20 216.135.64.0/19 maxlen: 19 2605:8000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3b:fe:d4:58:71:0d:55:6e:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=863af1bd-f9d2-4f11-a54a-638bbfba1397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:23:4c:4f:7f:1d:4a:80:a0:a1:f5:97:1f: 3f:a3:d0:5f:1d:1c:1e:42:5a:7a:19:78:d8:d4:7f: 67:79:4a:b1:1d:60:e6:c4:ef:38:4e:a2:27:a3:54: d5:66:b2:34:38:fb:a2:62:42:33:54:5d:8f:fc:ef: 0a:68:80:81:4f:95:d7:6e:0e:62:c0:4a:75:d9:34: c9:a5:74:e0:b5:2d:5d:c9:10:34:dc:88:5d:69:3c: 0f:f2:e7:82:14:1b:53:75:99:b5:77:51:04:04:f3: e1:64:7c:25:9e:22:71:03:8a:bd:5a:3c:07:f9:ea: ab:c1:a1:2f:de:22:55:11:fa:a3:99:58:00:f7:7c: 0a:f2:03:ad:45:af:0b:89:ca:0b:25:f3:47:64:b3: 8c:fa:bb:97:df:f8:a9:4e:98:75:a0:81:f6:e9:e5: a3:4f:58:6b:fe:fb:44:9e:03:9f:b2:13:4a:bb:9f: d5:49:09:58:f4:b7:a9:99:4a:e3:1c:d4:5f:38:46: f7:21:63:e5:d1:78:9c:41:5c:46:db:53:0d:1d:c0: 85:49:ee:05:d5:61:e5:bd:26:34:ac:20:81:51:5a: 20:87:a6:27:2e:bc:0c:65:47:a4:a3:d7:6a:be:4a: a6:62:a8:09:71:7b:1f:61:4e:7b:e9:11:d3:59:e5: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:48:F4:0B:AB:88:66:D2:EE:82:F0:48:40:F2:A9:9D:47:30:05:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/d9f1ac03-5c2e-379a-b3e5-edb0a9db9dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.crl X509v3 Authority Key Identifier: keyid:E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer sbgp-ipAddrBlock: critical IPv4: 69.64.0.0/20 173.237.224.0/20 216.135.64.0/19 IPv6: 2605:8000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:f6:eb:c4:08:9d:02:82:a5:d5:e0:95:11:6a:7c:e0:8b: 6b:ee:e2:0c:7e:10:1f:1f:cb:15:03:d2:bc:fe:6b:2e:dc:bf: 0e:58:8c:4a:04:4d:5a:bc:d2:7e:0f:40:71:70:06:0e:ab:a9: 99:2e:d9:2c:67:9c:82:5b:b4:65:ac:a1:10:7f:15:21:b4:db: e2:f8:6b:73:d6:71:99:74:ce:43:35:de:01:e5:bc:3a:5e:1c: aa:19:14:42:ca:3a:5b:e4:f8:79:53:b9:35:34:58:18:f8:30: d0:f0:46:42:aa:c0:3b:4c:9b:ab:5c:f9:45:29:78:3e:8e:47: a6:e3:52:69:b3:ae:a9:b3:8b:d0:6c:15:03:aa:21:48:79:59: 9b:02:19:04:52:21:02:0b:6f:8b:eb:21:d5:eb:c7:25:11:20: 14:ed:b9:f3:d0:f7:4b:e0:19:d7:06:89:15:d3:3b:77:91:1c: eb:c6:cc:44:3c:19:3c:38:25:90:4c:e1:03:e3:86:aa:ea:95: 2d:2a:29:4f:cd:27:8f:19:6e:c2:7c:71:6b:80:a5:1e:79:43: e7:a0:8a:00:44:d0:f8:0a:1e:a1:3b:d7:4a:2d:36:97:85:8a: bb:18:4c:9f:42:94:0e:08:12:c4:75:48:b1:f5:3a:0f:4b:20: ba:08:69:53 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEtbBzv+1FhxDVVuvlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwMWQxZDctOGIxZS00ZGUxLThiMDctZTkzNDJlOGQ5 NWVlMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODYzYWYxYmQtZjlkMi00ZjExLWE1NGEtNjM4YmJmYmExMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54UjTE9/HUqAoKH1lx8/o9BfHRweQlp6GXjY 1H9neUqxHWDmxO84TqIno1TVZrI0OPuiYkIzVF2P/O8KaICBT5XXbg5iwEp12TTJ pXTgtS1dyRA03IhdaTwP8ueCFBtTdZm1d1EEBPPhZHwlniJxA4q9WjwH+eqrwaEv 3iJVEfqjmVgA93wK8gOtRa8LicoLJfNHZLOM+ruX3/ipTph1oIH26eWjT1hr/vtE ngOfshNKu5/VSQlY9LepmUrjHNRfOEb3IWPl0XicQVxG21MNHcCFSe4F1WHlvSY0 rCCBUVogh6YnLrwMZUeko9dqvkqmYqgJcXsfYU576RHTWeWLcwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFEtI9AuriGbS7oLwSEDyqZ1HMAXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAx ZDFkNy04YjFlLTRkZTEtOGIwNy1lOTM0MmU4ZDk1ZWUvZDlmMWFjMDMtNWMyZS0z NzlhLWIzZTUtZWRiMGE5ZGI5ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWYwMWQxZDctOGIxZS00ZGUxLThi MDctZTkzNDJlOGQ5NWVlLzFmMDFkMWQ3LThiMWUtNGRlMS04YjA3LWU5MzQyZThk OTVlZS5jcmwwHwYDVR0jBBgwFoAU55APkPesNFdSglX+FOX+oKsY4iYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjAxZDFkNy04YjFlLTRkZTEtOGIwNy1lOTM0 MmU4ZDk1ZWUuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQERUAAAwQE re3gAwQF2IdAMA0EAgACMAcDBQAmBYAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADyq9uvECJ0CgqXV4JUR anzgi2vu4gx+EB8fyxUD0rz+ay7cvw5YjEoETVq80n4PQHFwBg6rqZku2SxnnIJb tGWsoRB/FSG02+L4a3PWcZl0zkM13gHlvDpeHKoZFELKOlvk+HlTuTU0WBj4MNDw RkKqwDtMm6tc+UUpeD6OR6bjUmmzrqmzi9BsFQOqIUh5WZsCGQRSIQILb4vrIdXr xyURIBTtufPQ90vgGdcGiRXTO3eRHOvGzEQ8GTw4JZBM4QPjhqrqlS0qKU/NJ48Z bsJ8cWuApR55Q+egigBE0PgKHqE710otNpeFirsYTJ9ClA4IEsR1SLH1Og9LILoI aVM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:24 2025 by rpki-client