$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa File: 25e93338-0441-3306-b1a8-28fe60a47de0.roa (raw, json) Hash identifier: 8KvwSQebYhN6uHMXD8ffUfTNE/ASwla5QGE/uIAi/q0= Subject key identifier: 8F:9F:2D:44:F9:6C:8A:13:48:33:3E:0D:C8:B9:8C:FC:28:EE:F5:D2 Certificate issuer: /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Certificate serial: 010D0C9F4328584B1F01752BCB5D7D5A4005FEC0 Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 33125 IP address blocks: 66.97.96.0/20 maxlen: 24 204.9.152.0/21 maxlen: 24 204.11.128.0/21 maxlen: 24 204.15.24.0/21 maxlen: 24 204.15.104.0/21 maxlen: 24 207.200.224.0/19 maxlen: 24 2604:9540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:75:2b:cb:5d:7d:5a:40:05:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=293e7683-c3d7-4611-8964-37cbda2dd3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:88:d5:8f:34:be:e7:db:30:26:ff:2c:ee: db:64:28:d7:e4:b4:0e:36:a1:4a:d1:a1:f4:13:a1: dd:5c:1a:2d:44:61:4c:6c:39:4a:6c:b0:a8:f8:7f: 29:3c:06:65:ca:4a:b7:05:28:aa:e6:42:62:2d:f7: fd:fa:23:6d:30:2d:3c:7e:18:71:5f:fe:ff:7c:14: 48:d9:84:f4:cf:d6:a8:f2:25:d8:20:8c:8b:1d:3d: f8:4c:66:d0:0d:ca:00:d1:ee:0c:cf:f2:fe:5e:ba: d3:16:ea:ea:a4:d3:b2:1c:f5:c9:7d:27:92:df:09: a0:f4:97:91:8e:04:7a:3f:a3:28:2a:d8:87:44:03: 08:63:79:1c:ba:a5:77:d1:9e:bf:bf:f1:6d:d0:0e: 65:ad:63:4e:a9:a6:c3:16:9e:44:75:e9:8a:b1:3e: b3:71:9a:57:b8:59:28:29:de:78:95:c7:25:4a:32: d3:8b:41:a5:e9:2c:5d:1e:e3:1c:81:6b:83:75:b0: 54:36:51:1b:43:00:10:6e:f5:f2:3e:99:a8:21:35: 17:7f:1f:ff:e6:a4:74:a3:f2:97:5c:7b:90:24:eb: 16:ed:df:0b:93:82:9e:13:d5:6a:a1:13:3b:5a:f9: 67:4a:cc:6c:bd:ff:df:ab:2d:1d:b4:cd:d7:0c:8b: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9F:2D:44:F9:6C:8A:13:48:33:3E:0D:C8:B9:8C:FC:28:EE:F5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/25e93338-0441-3306-b1a8-28fe60a47de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl X509v3 Authority Key Identifier: keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer sbgp-ipAddrBlock: critical IPv4: 66.97.96.0/20 204.9.152.0/21 204.11.128.0/21 204.15.24.0/21 204.15.104.0/21 207.200.224.0/19 IPv6: 2604:9540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b1:22:91:71:02:b1:e4:a8:32:ad:66:ca:c2:3e:3b:2c:a2: 2a:25:9e:03:9b:30:65:47:c4:3e:a7:eb:35:e0:5e:e5:1b:15: ad:cf:c4:ff:04:f8:6e:af:34:1e:a4:d6:dd:09:f7:3f:54:5e: 2b:64:f1:e7:9a:ad:7c:ec:2a:7d:a0:7c:ae:99:3b:a3:cd:15: 7a:37:b6:f0:b3:bf:89:28:a3:92:69:64:76:4d:f8:e0:18:ec: 1a:e5:20:b8:76:cc:e0:64:92:2e:c5:ee:29:41:20:95:85:8a: 57:f8:d0:ea:69:0a:ad:d7:58:c8:d1:50:52:06:ec:fb:27:6d: e4:da:9b:ff:77:55:bc:60:10:4d:59:b3:c4:78:52:70:54:b2: 24:28:ee:4b:f1:ea:4b:57:d3:bd:10:21:4a:0b:0d:13:6c:ae: 4e:45:1c:d3:9b:4c:6b:e4:ed:8c:32:0d:74:03:f7:64:74:1d: d0:5e:b8:4e:8a:14:a1:d7:6b:b3:02:7c:3b:83:ee:c1:ac:c8: a9:99:b2:63:66:f6:4c:f4:9d:77:8e:fa:22:1b:b5:89:3c:ea: 70:59:f7:86:d2:4a:20:a4:1b:bf:9a:08:f8:3c:ff:c5:09:f5: c6:e6:e4:96:b8:f4:4f:1c:f2:c4:42:44:2e:92:af:e2:5c:2e: 08:40:52:d0 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEsfAXUry119WkAF/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2YzM1M2QtMmFlNC00YTI4LThkZjctMGE5MDZiN2M2 OTYzMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MjkzZTc2ODMtYzNkNy00NjExLTg5NjQtMzdjYmRhMmRkM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1SI1Y80vufbMCb/LO7bZCjX5LQONqFK0aH0 E6HdXBotRGFMbDlKbLCo+H8pPAZlykq3BSiq5kJiLff9+iNtMC08fhhxX/7/fBRI 2YT0z9ao8iXYIIyLHT34TGbQDcoA0e4Mz/L+XrrTFurqpNOyHPXJfSeS3wmg9JeR jgR6P6MoKtiHRAMIY3kcuqV30Z6/v/Ft0A5lrWNOqabDFp5EdemKsT6zcZpXuFko Kd54lcclSjLTi0Gl6SxdHuMcgWuDdbBUNlEbQwAQbvXyPpmoITUXfx//5qR0o/KX XHuQJOsW7d8Lk4KeE9VqoRM7WvlnSsxsvf/fqy0dtM3XDIuOGwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFI+fLUT5bIoTSDM+Dci5jPwo7vXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jODZj MzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3YzY5NjMvMjVlOTMzMzgtMDQ0MS0z MzA2LWIxYTgtMjhmZTYwYTQ3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzg2YzM1M2QtMmFlNC00YTI4LThk ZjctMGE5MDZiN2M2OTYzL2M4NmMzNTNkLTJhZTQtNGEyOC04ZGY3LTBhOTA2Yjdj Njk2My5jcmwwHwYDVR0jBBgwFoAU49nhggrznCVs6xuwMmm+fyT9fvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkw NmI3YzY5NjMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEQmFgAwQD zAmYAwQDzAuAAwQDzA8YAwQDzA9oAwQFz8jgMA0EAgACMAcDBQAmBJVAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAGqxIpFxArHkqDKtZsrCPjssoiolngObMGVHxD6n6zXgXuUbFa3PxP8E+G6v NB6k1t0J9z9UXitk8eearXzsKn2gfK6ZO6PNFXo3tvCzv4koo5JpZHZN+OAY7Brl ILh2zOBkki7F7ilBIJWFilf40OppCq3XWMjRUFIG7PsnbeTam/93VbxgEE1Zs8R4 UnBUsiQo7kvx6ktX070QIUoLDRNsrk5FHNObTGvk7YwyDXQD92R0HdBeuE6KFKHX a7MCfDuD7sGsyKmZsmNm9kz0nXeO+iIbtYk86nBZ94bSSiCkG7+aCPg8/8UJ9cbm 5Ja49E8c8sRCRC6Sr+JcLghAUtA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:53 2025 by rpki-client