$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa File: fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa (raw, json) Hash identifier: uu/ziXfD3yHYfHMxx2+lvPslMKbsn6IFsIDpBg2N6Rk= Subject key identifier: 52:B9:8B:72:13:8D:D0:4F:5B:43:03:B2:9F:70:AB:60:BE:99:34:D4 Certificate issuer: /CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Certificate serial: 010D0C9F4328584B3821948B7510B7F8F29F1D54 Authority key identifier: A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 30528 IP address blocks: 66.96.16.0/20 maxlen: 20 72.0.64.0/20 maxlen: 20 2001:1928::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:94:8b:75:10:b7:f8:f2:9f:1d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f27cf1f-c7c6-435c-a313-992cc63104f9 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=e215dfe7-ffc8-4b3b-95d0-2f62aba46173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:6e:7b:ae:53:e4:52:62:44:a3:74:44:72: 2c:76:08:a4:45:00:e0:20:a4:74:62:39:30:e9:16: 70:af:99:97:af:36:f9:ab:ea:75:48:5b:32:cc:af: bc:3b:da:53:69:d4:6a:ad:fd:2f:7e:68:e9:83:3e: 05:3e:88:37:05:eb:18:05:84:0b:1a:26:27:ec:82: 9c:b6:84:fe:91:eb:e6:0d:cd:7a:2a:22:04:5f:ae: 9d:ae:17:56:2a:d2:05:0a:f5:3c:e4:3a:d5:9c:82: 76:da:f5:38:78:bd:9e:5a:03:96:1a:a8:e0:3c:02: 6a:c5:54:dd:8b:f0:75:a5:52:ce:ac:af:48:a9:d3: 9b:4d:93:64:81:7e:98:3f:18:e7:0e:b9:65:4e:fd: 07:0b:fa:aa:02:06:06:b9:84:c5:6d:56:c2:45:5b: 06:66:c5:68:df:55:1c:c7:7b:87:d8:be:2b:5f:86: 1f:b4:c0:ef:e7:26:9d:9a:be:15:1e:6e:7f:73:03: 55:4e:45:02:f3:84:6c:e0:1b:25:36:ad:09:5c:83: 93:d4:4d:4b:06:8a:cf:32:2d:1c:a8:c6:07:e1:3f: a2:0c:71:fc:12:18:d2:d7:7e:7e:4a:05:f3:42:4e: 59:71:43:45:c8:dd:f1:2d:34:5e:d2:1d:18:db:3e: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:8B:72:13:8D:D0:4F:5B:43:03:B2:9F:70:AB:60:BE:99:34:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/fb569d49-a3d5-36b7-9d5a-3900ca9f0ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9/0f27cf1f-c7c6-435c-a313-992cc63104f9.crl X509v3 Authority Key Identifier: keyid:A3:5E:76:32:9D:79:D7:81:F8:62:57:35:0A:86:7F:79:E6:3D:2B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0f27cf1f-c7c6-435c-a313-992cc63104f9.cer sbgp-ipAddrBlock: critical IPv4: 66.96.16.0/20 72.0.64.0/20 IPv6: 2001:1928::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b0:7b:7a:bc:61:40:03:f6:03:20:fd:a7:23:43:fd:90:2f: 50:ad:68:e7:05:e2:cb:47:06:cc:8e:95:f0:0c:9d:9a:b1:40: 52:89:23:d7:56:b9:1f:25:1a:11:db:78:12:02:f2:f7:48:98: ea:f2:1c:49:aa:c6:7c:7c:57:55:7f:be:85:1b:a5:cf:df:d9: 1d:c7:43:07:27:7f:a6:08:94:df:59:95:8c:36:18:7c:4a:97: 96:ee:80:95:32:40:2e:c2:79:54:fd:5c:48:5a:ef:d1:eb:82: eb:66:79:5c:07:cb:7b:19:17:b8:7d:32:7b:8b:9b:54:36:43: 34:f4:4c:a9:d8:4a:22:fd:2b:85:ce:8c:6a:d6:f6:45:08:86: a1:bf:ee:c7:60:11:6b:5f:43:c1:61:47:b3:a7:bb:82:7e:45: 1d:ac:8e:be:e6:70:8d:cd:fd:39:09:51:5f:c8:2f:ac:fd:f8: 3e:cb:a9:a9:85:64:58:27:28:61:85:a7:44:e6:17:a1:e1:23: 91:c7:8e:59:d4:ca:09:ac:d4:cf:82:b4:92:b4:97:86:46:4e: 94:2f:1f:1f:49:93:e9:ca:72:e3:9d:c5:82:b4:f3:0b:6e:a2: 54:99:ea:3c:4f:b0:dd:df:ec:71:d8:b8:c0:76:b7:1a:da:3a: c1:ac:ee:97 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEs4IZSLdRC3+PKfHVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyN2NmMWYtYzdjNi00MzVjLWEzMTMtOTkyY2M2MzEw NGY5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTIxNWRmZTctZmZjOC00YjNiLTk1ZDAtMmY2MmFiYTQ2MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1pue65T5FJiRKN0RHIsdgikRQDgIKR0Yjkw 6RZwr5mXrzb5q+p1SFsyzK+8O9pTadRqrf0vfmjpgz4FPog3BesYBYQLGiYn7IKc toT+kevmDc16KiIEX66drhdWKtIFCvU85DrVnIJ22vU4eL2eWgOWGqjgPAJqxVTd i/B1pVLOrK9IqdObTZNkgX6YPxjnDrllTv0HC/qqAgYGuYTFbVbCRVsGZsVo31Uc x3uH2L4rX4YftMDv5yadmr4VHm5/cwNVTkUC84Rs4BslNq0JXIOT1E1LBorPMi0c qMYH4T+iDHH8EhjS135+SgXzQk5ZcUNFyN3xLTRe0h0Y2z53QQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFK5i3ITjdBPW0MDsp9wq2C+mTTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3 Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJjYzYzMTA0ZjkvZmI1NjlkNDktYTNkNS0z NmI3LTlkNWEtMzkwMGNhOWYwZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGYyN2NmMWYtYzdjNi00MzVjLWEz MTMtOTkyY2M2MzEwNGY5LzBmMjdjZjFmLWM3YzYtNDM1Yy1hMzEzLTk5MmNjNjMx MDRmOS5jcmwwHwYDVR0jBBgwFoAUo152Mp1514H4Ylc1CoZ/eeY9K4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wZjI3Y2YxZi1jN2M2LTQzNWMtYTMxMy05OTJj YzYzMTA0ZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQmAQAwQE SABAMA0EAgACMAcDBQAgARkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFqwe3q8YUAD9gMg/acjQ/2QL1Ct aOcF4stHBsyOlfAMnZqxQFKJI9dWuR8lGhHbeBIC8vdImOryHEmqxnx8V1V/voUb pc/f2R3HQwcnf6YIlN9ZlYw2GHxKl5bugJUyQC7CeVT9XEha79HrgutmeVwHy3sZ F7h9MnuLm1Q2QzT0TKnYSiL9K4XOjGrW9kUIhqG/7sdgEWtfQ8FhR7Onu4J+RR2s jr7mcI3N/TkJUV/IL6z9+D7LqamFZFgnKGGFp0TmF6HhI5HHjlnUygms1M+CtJK0 l4ZGTpQvHx9Jk+nKcuOdxYK08wtuolSZ6jxPsN3f7HHYuMB2txraOsGs7pc= -----END CERTIFICATE-----Generated at Tue Oct 21 17:58:18 2025 by rpki-client