$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa File: 0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa (raw, json) Hash identifier: BzD1cEbucgIE9yVW8dhOEOnDfv1Ps0IKy6G0iQJD5gI= Subject key identifier: 56:F8:88:E5:09:3C:97:8C:6A:62:F8:E2:D7:31:76:61:EC:73:FA:29 Certificate issuer: /CN=67961c8b-389c-46be-9541-ceac7d38b9aa Certificate serial: 010D0C9F4328584B92DCEA2AA7134180F9D0AB61 Authority key identifier: 29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 36105 IP address blocks: 159.117.48.0/20 maxlen: 24 204.80.112.0/20 maxlen: 24 216.243.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ea:2a:a7:13:41:80:f9:d0:ab:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67961c8b-389c-46be-9541-ceac7d38b9aa Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=79364f6e-2723-4b49-a6de-4124a816a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:9c:c6:50:02:f8:f3:fc:31:b5:ad:6f:bd: 72:22:10:a8:ee:65:61:46:34:7d:53:10:f6:48:c8: bc:7f:5b:5c:a1:20:1e:df:17:2c:be:80:30:35:1d: 17:c4:de:57:56:2b:0d:7a:62:f3:45:48:38:0f:34: 10:8b:a5:84:9f:be:1f:b2:f6:a6:a3:80:3f:2e:8d: bc:37:7f:c6:af:a2:77:e7:83:c4:e9:f0:cc:76:d3: 18:53:fd:27:cd:58:3d:38:74:79:ec:5b:21:61:43: 7f:65:be:ee:a5:8d:32:44:58:85:f6:c6:4f:76:a0: 62:60:41:65:31:3f:1a:bf:d9:51:73:cd:ad:3b:66: ea:03:5a:24:d4:f3:8f:4c:8b:eb:56:10:4c:95:92: d8:4c:2a:67:62:83:c0:6a:8f:02:d3:f3:cd:73:2f: aa:2d:01:66:29:e5:4b:12:55:72:24:56:70:e5:50: 2d:25:e5:3b:28:9d:e9:7f:43:0e:ee:e5:60:6d:7d: de:dc:97:9d:03:a4:0f:5a:14:81:e8:da:96:a8:1f: 6b:8b:0a:c9:35:e2:bc:07:f7:f6:63:91:40:93:a4: 33:4d:4f:7d:b4:84:a5:62:ec:f8:be:bd:c8:3c:0a: ba:de:95:5d:4b:9e:25:dd:b9:8a:4a:1b:6c:4e:d5: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F8:88:E5:09:3C:97:8C:6A:62:F8:E2:D7:31:76:61:EC:73:FA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/0a990b0e-55c0-36b4-b68a-8e152965c9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa/67961c8b-389c-46be-9541-ceac7d38b9aa.crl X509v3 Authority Key Identifier: keyid:29:47:94:6D:C7:BB:C3:F4:20:E5:58:2D:8F:5A:CD:37:DC:14:BB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67961c8b-389c-46be-9541-ceac7d38b9aa.cer sbgp-ipAddrBlock: critical IPv4: 159.117.48.0/20 204.80.112.0/20 216.243.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ea:10:58:9d:f7:65:b7:42:99:b7:16:02:b5:b1:3d:56:c5: 85:b2:0a:30:00:5c:6d:3b:69:c2:f7:47:d2:fb:d8:04:a6:31: 15:ac:e5:90:2c:bc:54:cc:12:9d:74:79:a0:d1:53:3b:ba:e4: 92:42:94:a7:20:a6:d3:44:91:10:17:ed:1b:cd:34:66:e4:f2: 1c:b5:ed:4b:b8:db:59:85:1e:54:85:a3:be:ae:a8:c0:6e:fa: cc:7e:1e:1e:33:fb:86:04:f0:88:ff:62:7d:ae:1a:67:b0:96: 33:cb:96:24:e0:ce:9e:d7:4c:89:ae:c3:a4:45:7f:fd:cb:ed: df:a3:e7:d1:25:f1:6e:7d:4f:1a:f4:86:3e:62:ef:6b:b8:c8: 8d:d3:aa:ad:da:78:4f:46:36:7c:4a:32:bd:0a:6d:17:3d:cf: ea:28:aa:75:7e:92:52:75:99:1c:30:27:23:58:2e:34:e6:d5: 4e:cf:1a:7f:5e:7c:d1:54:f1:f8:17:e8:f9:b8:92:3c:93:52: 71:30:1e:e8:59:37:cf:14:04:a8:3a:60:f3:f6:76:03:97:85: ae:ab:46:ff:23:67:36:73:dc:53:67:b5:bd:a3:32:f5:21:28: 5e:ba:1f:3a:a2:75:a7:ad:6d:ef:1e:c3:82:c7:d8:b8:a2:97: 8d:6c:e2:3f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuS3OoqpxNBgPnQq2EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc5NjFjOGItMzg5Yy00NmJlLTk1NDEtY2VhYzdkMzhi OWFhMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NzkzNjRmNmUtMjcyMy00YjQ5LWE2ZGUtNDEyNGE4MTZhN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruecxlAC+PP8MbWtb71yIhCo7mVhRjR9UxD2 SMi8f1tcoSAe3xcsvoAwNR0XxN5XVisNemLzRUg4DzQQi6WEn74fsvamo4A/Lo28 N3/Gr6J354PE6fDMdtMYU/0nzVg9OHR57FshYUN/Zb7upY0yRFiF9sZPdqBiYEFl MT8av9lRc82tO2bqA1ok1POPTIvrVhBMlZLYTCpnYoPAao8C0/PNcy+qLQFmKeVL ElVyJFZw5VAtJeU7KJ3pf0MO7uVgbX3e3JedA6QPWhSB6NqWqB9riwrJNeK8B/f2 Y5FAk6QzTU99tISlYuz4vr3IPAq63pVdS54l3bmKShtsTtX4VwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFb4iOUJPJeMamL44tcxdmHsc/opMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2 MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFjN2QzOGI5YWEvMGE5OTBiMGUtNTVjMC0z NmI0LWI2OGEtOGUxNTI5NjVjOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjc5NjFjOGItMzg5Yy00NmJlLTk1 NDEtY2VhYzdkMzhiOWFhLzY3OTYxYzhiLTM4OWMtNDZiZS05NTQxLWNlYWM3ZDM4 YjlhYS5jcmwwHwYDVR0jBBgwFoAUKUeUbce7w/Qg5Vgtj1rNN9wUu5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82Nzk2MWM4Yi0zODljLTQ2YmUtOTU0MS1jZWFj N2QzOGI5YWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEn3UwAwQE zFBwAwQE2PPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB3qEFid92W3Qpm3FgK1sT1WxYWyCjAAXG07acL3 R9L72ASmMRWs5ZAsvFTMEp10eaDRUzu65JJClKcgptNEkRAX7RvNNGbk8hy17Uu4 21mFHlSFo76uqMBu+sx+Hh4z+4YE8Ij/Yn2uGmewljPLliTgzp7XTImuw6RFf/3L 7d+j59El8W59Txr0hj5i72u4yI3Tqq3aeE9GNnxKMr0KbRc9z+ooqnV+klJ1mRww JyNYLjTm1U7PGn9efNFU8fgX6Pm4kjyTUnEwHuhZN88UBKg6YPP2dgOXha6rRv8j ZzZz3FNntb2jMvUhKF66Hzqidaetbe8ew4LH2Liil41s4j8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:43 2025 by rpki-client