$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa File: 38917362-89be-3070-88f1-aeb91e6b0dea.roa (raw, json) Hash identifier: qjFDYvyeQD5Ni0Bz0KQgB7D63BU976VIGTxt0iQQNlc= Subject key identifier: 44:CB:63:C0:73:25:9D:F6:65:F4:C0:E0:8B:83:70:0A:56:B0:D7:5D Certificate issuer: /CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Certificate serial: 010D0C9F4328584B95A78A7F951F22894003EFC0 Authority key identifier: E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 47027 IP address blocks: 69.60.64.0/20 maxlen: 24 172.97.120.0/22 maxlen: 24 184.171.192.0/20 maxlen: 24 192.243.76.0/22 maxlen: 24 199.188.172.0/22 maxlen: 24 204.235.208.0/20 maxlen: 24 206.123.28.0/23 maxlen: 24 208.84.124.0/22 maxlen: 24 216.118.128.0/19 maxlen: 24 2607:fff8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8a:7f:95:1f:22:89:40:03:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2ebb7cff-2135-43b6-bb12-5644892081d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:fb:2a:3d:ff:f7:fc:74:7c:3b:93:ad:2a: 4e:7c:07:75:00:6c:8a:3e:a6:26:1c:9a:e7:56:97: ad:15:1b:48:5b:8b:8f:c6:25:61:52:5e:d5:69:5d: 77:f1:77:2d:09:b0:6a:da:20:eb:de:ca:7d:52:8b: 18:ca:50:c4:51:5f:2d:2f:4a:39:35:d8:fc:36:bf: e6:b5:99:71:e5:a7:7b:d1:f5:18:3e:c4:2e:74:59: fa:2a:d3:fe:c4:c5:33:3d:fa:1a:37:63:bc:50:5f: 14:ec:d6:69:31:d2:6f:1d:39:8e:bc:c6:22:74:e7: 46:1e:6e:6a:4f:6b:42:05:88:11:9a:3f:ed:60:8d: 62:8c:54:a6:a3:00:3b:86:12:80:e5:9b:ac:21:71: 97:08:20:5f:0f:d8:96:f3:a1:8c:c3:97:08:26:9a: 56:de:e0:e1:8f:a4:d8:8e:94:5c:0b:5d:d7:9d:13: 8d:04:62:ad:a6:ad:07:a7:21:36:39:21:1e:59:96: 11:aa:d0:db:eb:5c:0f:84:38:8d:d1:34:94:3a:cb: 8e:ae:30:6d:73:a9:ab:87:3d:20:98:ce:cc:2f:8d: 7f:f1:6d:8f:aa:40:21:b0:ee:5f:7e:e9:f5:cc:9a: 73:99:f4:c6:d0:66:b5:a9:22:56:14:6c:f6:37:36: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:63:C0:73:25:9D:F6:65:F4:C0:E0:8B:83:70:0A:56:B0:D7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl X509v3 Authority Key Identifier: keyid:E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer sbgp-ipAddrBlock: critical IPv4: 69.60.64.0/20 172.97.120.0/22 184.171.192.0/20 192.243.76.0/22 199.188.172.0/22 204.235.208.0/20 206.123.28.0/23 208.84.124.0/22 216.118.128.0/19 IPv6: 2607:fff8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0d:dc:92:39:a1:e0:80:bd:a1:1f:8d:6d:12:3c:0a:b8:d3: 3b:fc:a0:15:b9:2c:8e:f1:5b:e7:84:4d:28:44:a1:29:a5:6e: 36:96:45:68:d6:0d:02:88:82:cb:37:f0:b9:63:a0:54:41:c2: 37:09:e8:81:93:34:36:bc:ee:f4:2f:bf:ff:f6:7b:8f:f0:20: b1:a6:7b:20:77:3b:c8:d0:3e:29:ad:51:da:25:90:55:44:a0: a8:3d:3b:45:59:50:df:60:de:04:e0:5b:b3:89:02:73:0e:8b: 5c:f6:48:f3:1b:35:3d:2a:8a:71:de:3b:f3:78:bc:1b:5a:04: 62:5b:f4:16:d7:88:54:c8:41:cf:5a:62:20:f9:5a:5d:15:19: 5d:23:d3:03:4e:03:89:58:7a:d2:31:e9:31:d9:25:b0:41:a8: 0b:dc:b7:31:10:91:52:2f:85:d8:ca:c1:9b:0f:0f:a6:a5:9b: 4f:08:75:5a:69:aa:b1:dd:87:87:ed:55:fa:da:54:77:56:7e: 45:5e:22:e5:b1:e6:5b:db:91:a0:3a:a6:19:d6:c3:08:4a:7b: d4:ea:b5:f8:bd:a6:86:f7:94:bc:64:58:b4:9f:1a:fe:94:f0: 10:f0:a3:30:78:93:95:d3:a2:fc:84:5e:c4:bb:10:d9:66:d8: 98:19:ac:a6 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEuVp4p/lR8iiUAD78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZjZDZjZWMtNGNkNi00ZmEwLWIzYWYtMzU0YTdiYzMy NWJlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmViYjdjZmYtMjEzNS00M2I2LWJiMTItNTY0NDg5MjA4MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxev7Kj3/9/x0fDuTrSpOfAd1AGyKPqYmHJrn VpetFRtIW4uPxiVhUl7VaV138XctCbBq2iDr3sp9UosYylDEUV8tL0o5Ndj8Nr/m tZlx5ad70fUYPsQudFn6KtP+xMUzPfoaN2O8UF8U7NZpMdJvHTmOvMYidOdGHm5q T2tCBYgRmj/tYI1ijFSmowA7hhKA5ZusIXGXCCBfD9iW86GMw5cIJppW3uDhj6TY jpRcC13XnRONBGKtpq0HpyE2OSEeWZYRqtDb61wPhDiN0TSUOsuOrjBtc6mrhz0g mM7ML41/8W2PqkAhsO5ffun1zJpzmfTG0Ga1qSJWFGz2NzbJrQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFETLY8BzJZ32ZfTA4IuDcApWsNddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNk NmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRhN2JjMzI1YmUvMzg5MTczNjItODliZS0z MDcwLTg4ZjEtYWViOTFlNmIwZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzZjZDZjZWMtNGNkNi00ZmEwLWIz YWYtMzU0YTdiYzMyNWJlL2M2Y2Q2Y2VjLTRjZDYtNGZhMC1iM2FmLTM1NGE3YmMz MjViZS5jcmwwHwYDVR0jBBgwFoAU5s1XOWa5tW6rUljXW3FD2KdY2o0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNmNkNmNlYy00Y2Q2LTRmYTAtYjNhZi0zNTRh N2JjMzI1YmUuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQERTxAAwQC rGF4AwQEuKvAAwQCwPNMAwQCx7ysAwQEzOvQAwQBznscAwQC0FR8AwQF2HaAMA0E AgACMAcDBQAmB//4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADgN3JI5oeCAvaEfjW0SPAq40zv8oBW5LI7x W+eETShEoSmlbjaWRWjWDQKIgss38LljoFRBwjcJ6IGTNDa87vQvv//2e4/wILGm eyB3O8jQPimtUdolkFVEoKg9O0VZUN9g3gTgW7OJAnMOi1z2SPMbNT0qinHeO/N4 vBtaBGJb9BbXiFTIQc9aYiD5Wl0VGV0j0wNOA4lYetIx6THZJbBBqAvctzEQkVIv hdjKwZsPD6alm08IdVppqrHdh4ftVfraVHdWfkVeIuWx5lvbkaA6phnWwwhKe9Tq tfi9pob3lLxkWLSfGv6U8BDwozB4k5XTovyEXsS7ENlm2JgZrKY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:29:32 2025 by rpki-client