$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa File: 3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa (raw, json) Hash identifier: pjscNgsHk8kknZoIGcN2xwOzjwiBFGWjjCAnUPfCyfs= Subject key identifier: 5F:2A:A4:B2:64:1C:42:B5:9A:B0:6C:C3:FB:64:56:18:8A:F4:35:28 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584B41E70CF87BEDCBF8AC266278 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 26935 IP address blocks: 66.35.0.0/20 maxlen: 20 69.55.208.0/20 maxlen: 20 207.32.192.0/20 maxlen: 20 2607:f688::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0c:f8:7b:ed:cb:f8:ac:26:62:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=a36faaa9-1bf0-4fae-8e7f-612ca06928bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:41:39:cf:57:56:79:f1:58:16:aa:6f:c6: 29:12:54:2f:14:db:77:fc:c8:6f:6f:05:01:c1:78: 02:bb:a7:78:85:c3:89:63:f1:81:85:e3:fa:24:b2: 44:ec:31:df:bc:39:ec:93:8c:80:c5:06:87:73:55: c8:01:a9:41:43:1a:37:b0:20:0a:69:af:93:c2:bb: a4:99:f1:42:3b:cc:c8:56:98:f1:b8:c5:8b:9a:e6: f8:82:bc:d9:5c:ba:97:3e:01:39:94:69:2b:d0:90: 7a:34:4a:11:10:0c:e9:f8:a8:96:bb:4c:01:e4:70: 1b:5e:c8:06:6f:c3:75:bb:77:e4:8d:be:41:be:ab: 31:76:9f:51:17:e7:36:71:83:d8:de:9a:01:3a:77: e2:6f:fc:a1:a6:59:97:4a:07:1f:c0:e0:fc:41:6d: e5:41:0e:cb:ba:c4:f1:90:b0:89:36:7d:c0:9b:04: fa:00:74:ac:85:79:3f:0b:6f:13:37:b1:40:c9:6d: 7e:7a:9f:e1:9b:48:4e:c6:d2:16:3b:a6:3a:dd:46: 5a:66:59:90:cc:a2:19:3b:38:6a:e7:23:f6:ed:00: 23:ba:e3:22:2f:5e:3e:81:68:80:5a:48:d5:1f:f1: e7:f0:f4:cc:a8:16:5c:9b:da:f4:a1:6f:71:4b:df: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2A:A4:B2:64:1C:42:B5:9A:B0:6C:C3:FB:64:56:18:8A:F4:35:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 66.35.0.0/20 69.55.208.0/20 207.32.192.0/20 IPv6: 2607:f688::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:13:11:ac:4c:ba:9c:08:3a:aa:a2:55:93:a3:2a:3f:87:9f: 82:f5:cb:6f:b1:9c:28:c9:8e:fa:35:23:7f:49:27:77:ff:c1: af:85:37:f7:89:85:a5:ef:9d:ca:c8:dc:1c:4d:0d:25:a5:20: ae:2d:6c:58:c8:8d:7b:86:aa:61:9f:82:62:02:72:18:ba:e0: ec:97:72:07:44:ff:6b:11:09:60:63:f5:62:70:17:9a:cf:27: a6:4c:36:2a:5b:d8:c5:62:fd:80:c6:4d:bf:24:09:7d:b8:23: bd:f5:c9:b8:db:86:08:47:4f:3c:ff:36:54:e3:c7:05:ca:77: ee:f5:21:ec:97:b8:2e:8a:5a:34:36:d6:59:87:b5:06:6e:12: 9a:f9:e7:13:af:2f:6f:4e:01:b9:c2:f3:e7:62:bc:fa:85:6e: fd:db:19:1e:6d:58:62:f2:de:c1:95:e9:f3:05:68:0e:7a:97: 57:48:1f:8b:83:a0:6d:5f:f5:a9:5a:3c:f0:5c:9c:eb:09:cd: a3:59:40:7c:5b:88:90:55:58:f4:27:45:23:27:64:71:ec:47: 72:98:25:34:58:13:3a:62:9d:0d:48:90:39:84:3a:eb:d6:35: b9:b5:2f:c4:d0:d8:80:da:fe:ab:da:43:67:1e:57:c2:15:8a: 8a:3d:7c:10 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEtB5wz4e+3L+KwmYngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YTM2ZmFhYTktMWJmMC00ZmFlLThlN2YtNjEyY2EwNjkyOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhVBOc9XVnnxWBaqb8YpElQvFNt3/MhvbwUB wXgCu6d4hcOJY/GBheP6JLJE7DHfvDnsk4yAxQaHc1XIAalBQxo3sCAKaa+Twruk mfFCO8zIVpjxuMWLmub4grzZXLqXPgE5lGkr0JB6NEoREAzp+KiWu0wB5HAbXsgG b8N1u3fkjb5Bvqsxdp9RF+c2cYPY3poBOnfib/yhplmXSgcfwOD8QW3lQQ7LusTx kLCJNn3AmwT6AHSshXk/C28TN7FAyW1+ep/hm0hOxtIWO6Y63UZaZlmQzKIZOzhq 5yP27QAjuuMiL14+gWiAWkjVH/Hn8PTMqBZcm9r0oW9xS98HawIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFF8qpLJkHEK1mrBsw/tkVhiK9DUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvM2I4ZTg0MWYtMGExZS0z NTZiLTkzOTAtYmMyZDYxZjFjNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQiMAAwQE RTfQAwQEzyDAMA0EAgACMAcDBQAmB/aIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHQTEaxMupwIOqqiVZOj Kj+Hn4L1y2+xnCjJjvo1I39JJ3f/wa+FN/eJhaXvncrI3BxNDSWlIK4tbFjIjXuG qmGfgmICchi64OyXcgdE/2sRCWBj9WJwF5rPJ6ZMNipb2MVi/YDGTb8kCX24I731 ybjbhghHTzz/NlTjxwXKd+71IeyXuC6KWjQ21lmHtQZuEpr55xOvL29OAbnC8+di vPqFbv3bGR5tWGLy3sGV6fMFaA56l1dIH4uDoG1f9alaPPBcnOsJzaNZQHxbiJBV WPQnRSMnZHHsR3KYJTRYEzpinQ1IkDmEOuvWNbm1L8TQ2IDa/qvaQ2ceV8IVioo9 fBA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:02:04 2025 by rpki-client