$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: BUP2HT0cdAXN7JP8YQ/Q6hXt9q8/BarWnoV4ghm5HUg= Subject key identifier: 38:B7:74:33:4F:66:89:D9:D9:54:12:69:0F:36:D3:31:21:EC:76:F5 Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F4328584B74275195778925E83D8B8D40 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:51:95:77:89:25:e8:3d:8b:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=17348315-6018-4bfd-8a37-8301d7d3b58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:69:20:cc:7d:1d:2f:99:13:93:29:2d:41: 2f:03:de:00:82:ba:01:b3:45:5b:41:ca:f5:ce:ac: 55:05:fc:79:ba:00:d1:ee:fa:47:6f:63:fe:6b:de: b6:aa:60:9b:f8:95:bb:96:0b:cc:d1:d6:f4:28:1e: aa:61:8e:80:74:22:2b:ef:37:ae:ae:9f:1c:d6:21: bb:22:98:0e:1f:b4:82:cc:7c:88:e3:8e:e1:a2:16: a3:2d:05:b0:5f:f6:99:50:43:51:4a:84:62:e3:21: 11:b2:54:cb:48:2f:8f:f8:0c:86:a9:1a:31:ad:61: 24:7b:24:80:f4:d5:89:06:26:d5:9f:38:05:51:b2: 4c:31:86:7d:4b:a3:b3:e8:7e:ef:3a:de:ce:6e:3c: 3e:23:64:40:ee:2e:9c:84:99:e8:cc:51:55:da:7a: d4:18:d8:ee:07:fb:42:2b:e4:3a:14:95:3d:4c:c7: 9f:6b:82:c1:f4:f5:aa:99:1e:cb:2d:64:9f:a0:8d: 27:16:b7:b3:4a:b4:e7:d8:a8:32:f7:68:fb:c6:8a: 2e:ad:42:74:f1:b3:3c:3f:4e:ef:01:75:83:22:3c: d1:16:7a:77:ef:12:2a:56:13:62:39:2c:b0:4f:80: ac:03:79:7f:09:27:33:71:23:aa:f1:71:2c:cf:e3: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:74:33:4F:66:89:D9:D9:54:12:69:0F:36:D3:31:21:EC:76:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:29:68:66:75:ab:16:72:12:b3:df:32:6d:57:74:6d:83:29: cb:ae:a1:57:4d:5a:8f:fa:bf:ff:59:da:3c:c1:2c:47:5f:dd: d3:1e:ba:5b:d6:e7:b8:f7:b7:a2:8d:89:d0:5a:14:6f:a7:64: f6:ce:10:d0:1b:55:35:25:27:8b:04:d5:06:da:a8:f5:22:08: 80:0c:c2:bc:15:62:7a:33:f9:d4:ea:60:82:9b:1d:3e:c7:17: fa:98:dc:e5:42:1d:1b:6b:30:48:77:6d:ec:9d:a5:6e:cb:7e: 88:d6:ef:24:0b:56:0e:1f:e3:5e:05:9b:89:ec:d2:4a:48:29: 9a:e5:f7:02:46:a9:7e:6c:48:b5:ce:5a:22:48:8f:91:34:fd: 5b:5e:ea:b5:64:bc:8c:b5:c0:22:0b:82:8e:13:f6:b3:4e:36: a2:d3:15:3f:3f:dd:85:77:eb:fb:15:01:ac:af:7d:e8:a6:ab: 61:a3:94:f3:00:28:bc:16:fa:40:8d:ee:ff:1d:9d:37:41:20: 69:dc:8c:2d:8e:b2:f6:d6:65:fe:ee:c6:c9:f9:d1:f3:e2:19: 0b:1d:ec:54:ec:8a:83:bf:d4:5f:f0:29:07:81:c0:d4:18:af: e3:69:a7:35:f5:ec:ed:e4:3b:a5:90:a4:0b:ff:94:a8:ed:65: 85:74:81:ec -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEt0J1GVd4kl6D2LjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk MTczNDgzMTUtNjAxOC00YmZkLThhMzctODMwMWQ3ZDNiNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuVpIMx9HS+ZE5MpLUEvA94AgroBs0VbQcr1 zqxVBfx5ugDR7vpHb2P+a962qmCb+JW7lgvM0db0KB6qYY6AdCIr7zeurp8c1iG7 IpgOH7SCzHyI447hohajLQWwX/aZUENRSoRi4yERslTLSC+P+AyGqRoxrWEkeySA 9NWJBibVnzgFUbJMMYZ9S6Oz6H7vOt7Objw+I2RA7i6chJnozFFV2nrUGNjuB/tC K+Q6FJU9TMefa4LB9PWqmR7LLWSfoI0nFrezSrTn2Kgy92j7xoourUJ08bM8P07v AXWDIjzRFnp37xIqVhNiOSywT4CsA3l/CSczcSOq8XEsz+N4UQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDi3dDNPZonZ2VQSaQ820zEh7Hb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAQpaGZ1qxZyErPfMm1XdG2DKcuu oVdNWo/6v/9Z2jzBLEdf3dMeulvW57j3t6KNidBaFG+nZPbOENAbVTUlJ4sE1Qba qPUiCIAMwrwVYnoz+dTqYIKbHT7HF/qY3OVCHRtrMEh3beydpW7LfojW7yQLVg4f 414Fm4ns0kpIKZrl9wJGqX5sSLXOWiJIj5E0/Vte6rVkvIy1wCILgo4T9rNONqLT FT8/3YV36/sVAayvfeimq2GjlPMAKLwW+kCN7v8dnTdBIGncjC2OsvbWZf7uxsn5 0fPiGQsd7FTsioO/1F/wKQeBwNQYr+NppzX17O3kO6WQpAv/lKjtZYV0gew= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:04 2025 by rpki-client