$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa File: 9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json) Hash identifier: YaIpBpLYbBgQ8XhHAmqHCwlVFtLCKyOd7C92Drs7V+k= Subject key identifier: 29:DB:93:D2:63:E0:66:E4:09:82:D5:BA:3D:3A:AF:A5:82:2B:29:69 Certificate issuer: /CN=f9832b96-bd4c-421c-9299-d5f2c689d463 Certificate serial: 010D0C9F4328584AE0312185B0FDBB3DB5AB3CC0 Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 21565 IP address blocks: 64.138.192.0/18 maxlen: 24 64.150.128.0/19 maxlen: 24 66.153.128.0/17 maxlen: 24 66.220.64.0/20 maxlen: 24 67.212.32.0/19 maxlen: 24 107.190.144.0/20 maxlen: 24 108.175.176.0/20 maxlen: 24 152.44.112.0/20 maxlen: 24 159.117.160.0/19 maxlen: 24 162.221.104.0/21 maxlen: 24 162.252.0.0/21 maxlen: 24 198.29.48.0/20 maxlen: 24 198.52.224.0/20 maxlen: 24 198.232.104.0/21 maxlen: 24 206.195.64.0/19 maxlen: 24 216.16.160.0/19 maxlen: 24 216.223.192.0/19 maxlen: 24 2606:8400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:21:85:b0:fd:bb:3d:b5:ab:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=f734134f-247d-44a1-b882-04162f79a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:e2:b9:39:2f:69:5f:e4:c6:e8:dc:15:d2: 95:0e:f3:58:bd:9c:9f:bf:7e:ad:20:79:58:bc:49: 53:f2:7a:cc:97:8e:3c:1b:ca:d4:59:70:80:98:81: ad:76:fe:0c:55:ba:cc:34:6c:9f:64:4a:59:bc:b6: 56:4e:e9:2e:8a:f4:51:07:fc:db:f9:ba:e3:d1:1c: d8:9d:a5:57:26:6a:9b:4f:e7:74:03:45:ea:eb:cc: 36:11:34:65:7f:d9:23:8d:1a:8d:62:2d:99:d2:c4: 32:e4:76:b5:b5:c6:d2:89:9c:17:4a:3b:5b:51:24: c2:a7:6b:60:61:69:2d:6f:e6:1b:77:06:15:fc:ad: 9c:21:ff:df:c3:3f:e4:68:a7:b2:f6:e9:90:44:51: a8:36:a7:78:27:c2:ea:53:6b:dc:73:16:ab:90:6b: 93:10:f7:fb:52:3b:dc:d4:59:6f:6f:78:86:f9:7b: b4:ba:c4:f8:f0:e5:2e:1c:1e:04:0c:71:e6:be:c6: 89:20:3b:ec:c0:a8:91:63:f0:59:03:bf:f0:b9:22: a3:92:68:f0:17:a9:82:aa:b3:39:a4:d0:41:1e:04: 8a:c5:3d:09:b5:22:00:e0:b8:21:04:5b:27:6e:ab: 93:e0:e4:4e:13:dc:1d:f4:c3:a0:63:87:a3:ab:6b: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:93:D2:63:E0:66:E4:09:82:D5:BA:3D:3A:AF:A5:82:2B:29:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl X509v3 Authority Key Identifier: keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer sbgp-ipAddrBlock: critical IPv4: 64.138.192.0/18 64.150.128.0/19 66.153.128.0/17 66.220.64.0/20 67.212.32.0/19 107.190.144.0/20 108.175.176.0/20 152.44.112.0/20 159.117.160.0/19 162.221.104.0/21 162.252.0.0/21 198.29.48.0/20 198.52.224.0/20 198.232.104.0/21 206.195.64.0/19 216.16.160.0/19 216.223.192.0/19 IPv6: 2606:8400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:06:1a:ba:57:35:8f:5f:4d:8c:fe:2d:a2:d9:db:5d:c2:e7: 50:92:fa:52:74:3d:21:f1:61:b7:79:a4:66:64:71:4e:dc:5e: 38:8e:19:09:39:c5:81:9e:8f:92:45:ab:df:fa:4e:10:22:d5: 37:19:ad:11:59:2a:62:4a:2a:c6:5e:94:38:49:a3:85:15:61: d2:ad:f7:d4:86:63:a7:d0:fa:41:c0:e6:0a:b6:33:c8:e5:75: ba:d1:42:db:db:71:73:48:7a:0f:f0:46:8b:69:c5:17:89:13: 96:bc:de:54:5a:44:8b:49:90:1b:f3:a2:69:ed:a3:f6:ee:e8: 24:a1:3c:c0:03:2a:90:e2:c7:7c:25:ad:8e:b2:62:78:4b:69: 77:5f:a8:fc:3c:81:59:4c:6a:a7:47:dd:9b:0b:ee:cd:aa:a6: 22:8b:9c:c8:cd:ec:58:1e:f4:ad:06:bc:16:98:8f:ca:10:c9: d0:06:21:d5:b7:c9:cd:94:5e:9a:e3:2d:30:12:d4:b4:79:05: e3:ec:c4:80:31:9e:1c:31:b5:34:65:0c:10:9f:ef:2a:2d:3c: 7e:bf:8c:f9:c8:ac:fc:eb:8c:f1:d1:d8:f0:a0:c7:05:19:f9: c6:9e:82:b7:22:ee:02:54:94:8b:c0:57:e8:85:41:89:78:4f: 6f:02:01:80 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUAQ0Mn0MoWErgMSGFsP27PbWrPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk4MzJiOTYtYmQ0Yy00MjFjLTkyOTktZDVmMmM2ODlk NDYzMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk ZjczNDEzNGYtMjQ3ZC00NGExLWI4ODItMDQxNjJmNzlhODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQviuTkvaV/kxujcFdKVDvNYvZyfv36tIHlY vElT8nrMl448G8rUWXCAmIGtdv4MVbrMNGyfZEpZvLZWTukuivRRB/zb+brj0RzY naVXJmqbT+d0A0Xq68w2ETRlf9kjjRqNYi2Z0sQy5Ha1tcbSiZwXSjtbUSTCp2tg YWktb+YbdwYV/K2cIf/fwz/kaKey9umQRFGoNqd4J8LqU2vccxarkGuTEPf7Ujvc 1Flvb3iG+Xu0usT48OUuHB4EDHHmvsaJIDvswKiRY/BZA7/wuSKjkmjwF6mCqrM5 pNBBHgSKxT0JtSIA4LghBFsnbquT4OROE9wd9MOgY4ejq2smdwIDAQABo4IDxTCC A8EwHQYDVR0OBBYEFCnbk9Jj4GbkCYLVuj06r6WCKylpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mOTgz MmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYyYzY4OWQ0NjMvOWM2ZmI2ZGItOWFkMC0z MzJlLWJiMDUtOGM4ZGJhYWU5ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjk4MzJiOTYtYmQ0Yy00MjFjLTky OTktZDVmMmM2ODlkNDYzL2Y5ODMyYjk2LWJkNGMtNDIxYy05Mjk5LWQ1ZjJjNjg5 ZDQ2My5jcmwwHwYDVR0jBBgwFoAUIJy7QWbatQu1lPk0Lr1MbdBTEVQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mOTgzMmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYy YzY4OWQ0NjMuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEBkCKwAME BUCWgAMEB0KZgAMEBELcQAMEBUPUIAMEBGu+kAMEBGyvsAMEBJgscAMEBZ91oAME A6LdaAMEA6L8AAMEBMYdMAMEBMY04AMEA8boaAMEBc7DQAMEBdgQoAMEBdjfwDAN BAIAAjAHAwUAJgaEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaBhq6VzWPX02M/i2i2dtdwudQkvpSdD0h 8WG3eaRmZHFO3F44jhkJOcWBno+SRavf+k4QItU3Ga0RWSpiSirGXpQ4SaOFFWHS rffUhmOn0PpBwOYKtjPI5XW60ULb23FzSHoP8EaLacUXiROWvN5UWkSLSZAb86Jp 7aP27ugkoTzAAyqQ4sd8Ja2OsmJ4S2l3X6j8PIFZTGqnR92bC+7NqqYii5zIzexY HvStBrwWmI/KEMnQBiHVt8nNlF6a4y0wEtS0eQXj7MSAMZ4cMbU0ZQwQn+8qLTx+ v4z5yKz864zx0djwoMcFGfnGnoK3Iu4CVJSLwFfohUGJeE9vAgGA -----END CERTIFICATE-----Generated at Sat Aug 23 22:46:55 2025 by rpki-client