$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa File: cda65907-ce3f-342f-b106-fe8256cae008.roa (raw, json) Hash identifier: yETsANysWE85K0+wtfgyNc9M/vcw6oL1Pi48NS/DpXQ= Subject key identifier: 84:80:2C:8D:46:4C:6C:4E:75:73:35:CD:D7:86:63:D4:15:14:CC:EF Certificate issuer: /CN=25283898-2dc3-4477-af3c-b64dd3c800ab Certificate serial: 010D0C9F4328584B047C11696AC30BCA794B2900 Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13692 IP address blocks: 67.219.224.0/20 maxlen: 20 100.42.160.0/20 maxlen: 20 108.174.176.0/20 maxlen: 20 192.86.0.0/24 maxlen: 24 192.175.50.0/23 maxlen: 23 198.100.136.0/21 maxlen: 21 208.77.176.0/21 maxlen: 21 2607:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:11:69:6a:c3:0b:ca:79:4b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=02ccf6a8-ed40-44e0-b9cd-4236a38a8c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:2f:ad:62:11:3e:26:7c:e0:74:db:50:c8: fe:65:c0:84:a1:d8:1f:8c:b4:61:6e:56:1e:c0:18: bb:a5:10:9d:4f:d3:3d:8f:39:2e:3f:9e:a0:5f:19: 20:10:15:a2:c0:02:12:91:f7:a2:72:83:26:a9:83: 55:24:94:b1:c9:75:01:ea:d5:30:35:a6:df:da:5e: ba:eb:21:20:77:38:1a:66:95:5a:8d:dc:08:e4:13: 02:bd:91:5d:dd:31:cc:53:de:b6:c9:b4:c5:2e:23: 53:3c:9c:e8:4d:ad:5d:51:41:3a:51:46:c6:ad:84: 46:37:2b:c8:f8:13:57:35:85:01:ce:7a:65:35:92: 2d:94:ec:7c:4b:35:1b:06:4c:34:d3:24:de:10:da: 80:48:2e:45:d3:58:98:04:10:a7:ec:64:61:9d:08: 21:f3:54:73:49:93:88:12:95:65:d5:1f:0b:b5:da: 34:6d:a8:4b:24:8e:a9:b5:ff:25:66:a9:b4:4f:8f: 19:53:8b:f5:c0:bf:6b:cd:a6:76:9c:35:40:73:55: 39:e3:f3:e6:ec:42:cd:20:3e:d3:ca:f7:f4:e9:50: e1:14:af:84:7c:7c:72:ed:e0:42:44:d2:15:c2:73: 31:97:45:ee:91:29:75:cc:87:8f:93:61:99:49:2d: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:80:2C:8D:46:4C:6C:4E:75:73:35:CD:D7:86:63:D4:15:14:CC:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/cda65907-ce3f-342f-b106-fe8256cae008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl X509v3 Authority Key Identifier: keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer sbgp-ipAddrBlock: critical IPv4: 67.219.224.0/20 100.42.160.0/20 108.174.176.0/20 192.86.0.0/24 192.175.50.0/23 198.100.136.0/21 208.77.176.0/21 IPv6: 2607:8600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:20:fc:e3:81:7e:18:06:b2:b0:38:e4:9a:44:26:47:c6:57: 1b:70:62:79:45:b3:6e:e6:55:33:95:9d:30:e6:4f:33:c8:c8: 68:f7:07:ad:45:6d:ac:42:8a:8a:88:e6:db:a9:17:82:3c:c9: 23:36:7d:cf:0c:0d:1e:8c:ab:2d:48:7b:60:97:8f:3c:39:30: 9c:94:a1:dd:c0:30:d8:18:10:f3:26:ec:ac:cd:10:b8:b7:dc: 66:4e:88:3c:72:70:14:cc:79:de:a2:81:b1:c8:62:24:da:8f: 20:5d:ec:62:d1:3c:b7:fa:4d:72:cf:e1:be:d0:29:3e:4b:2e: 44:a8:af:76:c5:7b:b9:1f:fa:0c:bb:37:d2:8f:7a:d3:95:30: 3b:ea:72:41:fc:38:5c:1b:f4:4a:e2:bc:8e:57:37:20:68:fc: 45:5d:14:72:50:04:85:09:3d:37:b3:80:09:00:07:99:a2:81: 98:df:e4:a9:a2:a7:ef:36:7f:a9:48:89:eb:ee:05:7e:f9:c8: fa:3a:44:57:ab:a8:a0:7c:9b:a7:e9:9f:73:22:70:56:54:64: 43:9a:61:17:9f:de:34:87:62:d4:af:b6:02:dd:59:a6:b5:a0: 01:92:62:51:7a:17:fa:83:e5:e1:21:27:62:95:16:9d:b6:36: 7f:f5:13:05 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIUAQ0Mn0MoWEsEfBFpasMLynlLKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgw MGFiMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDJjY2Y2YTgtZWQ0MC00NGUwLWI5Y2QtNDIzNmEzOGE4YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzecvrWIRPiZ84HTbUMj+ZcCEodgfjLRhblYe wBi7pRCdT9M9jzkuP56gXxkgEBWiwAISkfeicoMmqYNVJJSxyXUB6tUwNabf2l66 6yEgdzgaZpVajdwI5BMCvZFd3THMU962ybTFLiNTPJzoTa1dUUE6UUbGrYRGNyvI +BNXNYUBznplNZItlOx8SzUbBkw00yTeENqASC5F01iYBBCn7GRhnQgh81RzSZOI EpVl1R8Ltdo0bahLJI6ptf8lZqm0T48ZU4v1wL9rzaZ2nDVAc1U54/Pm7ELNID7T yvf06VDhFK+EfHxy7eBCRNIVwnMxl0XukSl1zIePk2GZSS2eswIDAQABo4IDiDCC A4QwHQYDVR0OBBYEFISALI1GTGxOdXM1zdeGY9QVFMzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4 Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvY2RhNjU5MDctY2UzZi0z NDJmLWIxMDYtZmU4MjU2Y2FlMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjUyODM4OTgtMmRjMy00NDc3LWFm M2MtYjY0ZGQzYzgwMGFiLzI1MjgzODk4LTJkYzMtNDQ3Ny1hZjNjLWI2NGRkM2M4 MDBhYi5jcmwwHwYDVR0jBBgwFoAUHX6NmYvAQseU6/FQOTSqDFBgE98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRk ZDNjODAwYWIuY2VyMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQEQ9vgAwQE ZCqgAwQEbK6wAwQAwFYAAwQBwK8yAwQDxmSIAwQD0E2wMA0EAgACMAcDBQAmB4YA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAg/OOBfhgGsrA45JpEJkfGVxtwYnlFs27mVTOVnTDmTzPIyGj3 B61FbaxCioqI5tupF4I8ySM2fc8MDR6Mqy1Ie2CXjzw5MJyUod3AMNgYEPMm7KzN ELi33GZOiDxycBTMed6igbHIYiTajyBd7GLRPLf6TXLP4b7QKT5LLkSor3bFe7kf +gy7N9KPetOVMDvqckH8OFwb9ErivI5XNyBo/EVdFHJQBIUJPTezgAkAB5migZjf 5Kmip+82f6lIievuBX75yPo6RFerqKB8m6fpn3MicFZUZEOaYRef3jSHYtSvtgLd Waa1oAGSYlF6F/qD5eEhJ2KVFp22Nn/1EwU= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:33 2025 by rpki-client