$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa File: 3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa (raw, json) Hash identifier: 7f7kkXAIBwZZHq88WtOkOkgrTD3TkvaW00IovVwcFfQ= Subject key identifier: 60:7E:B0:5A:88:F0:BC:1A:A0:B9:16:F2:02:CB:A7:31:3C:88:18:80 Certificate issuer: /CN=e64236ac-e54b-4545-b57e-b971e5d37968 Certificate serial: 010D0C9F4328584B4D11CFDDBE068706D808BD00 Authority key identifier: 1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 16478 IP address blocks: 216.162.112.0/20 maxlen: 20 216.162.112.0/24 maxlen: 24 216.162.113.0/24 maxlen: 24 216.162.114.0/24 maxlen: 24 216.162.115.0/24 maxlen: 24 216.162.116.0/24 maxlen: 24 216.162.117.0/24 maxlen: 24 216.162.118.0/24 maxlen: 24 216.162.119.0/24 maxlen: 24 216.162.120.0/24 maxlen: 24 216.162.121.0/24 maxlen: 24 216.162.122.0/24 maxlen: 24 216.162.123.0/24 maxlen: 24 216.162.124.0/24 maxlen: 24 216.162.125.0/24 maxlen: 24 216.162.126.0/24 maxlen: 24 216.162.127.0/24 maxlen: 24 2620:11f:4000::/40 maxlen: 40 2620:11f:4000::/44 maxlen: 44 2620:11f:4010::/44 maxlen: 44 2620:11f:4020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:cf:dd:be:06:87:06:d8:08:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e64236ac-e54b-4545-b57e-b971e5d37968 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=0461d5bf-e4ea-4e06-b3e9-bc7c372192fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:e0:0e:97:ff:c0:c1:82:d0:55:fc:8b:0f: 55:e7:e3:ef:f1:ad:c1:d7:63:c9:36:c4:81:50:88: 2c:da:2e:f3:87:a5:5f:b6:60:8b:f0:19:d4:c1:77: cb:42:3e:b1:e9:7f:16:c1:09:cb:ad:bc:13:96:86: 55:36:11:9a:71:5c:41:14:d5:a9:6f:3f:26:9f:11: f8:59:ca:32:27:64:36:1c:e9:6d:56:19:cf:94:68: 7e:d8:be:a0:c6:3a:a3:3c:58:63:30:0b:31:00:b2: 21:06:1f:2f:6f:cf:4c:d9:02:71:66:7a:90:99:7b: 04:12:50:77:67:3d:63:07:13:11:73:5a:10:8e:9d: bc:7f:d4:62:4e:ee:3d:bf:4d:30:5a:4c:ec:97:c6: 6e:fa:dd:1f:35:35:e7:a1:02:19:8c:9c:f3:92:20: ee:24:7d:ba:3f:7b:b3:6a:b7:fd:4d:f1:57:ac:16: fb:ff:62:27:31:ed:35:ca:0e:93:dc:86:11:96:70: 29:53:c3:58:eb:22:4f:02:a9:59:31:fc:81:f8:34: 83:e5:e3:19:87:d5:95:36:11:05:4c:c3:97:c2:8b: db:cf:e7:70:95:85:86:b7:38:a5:03:28:c5:c2:cb: 4a:c0:21:47:25:fc:8a:ab:08:c9:97:5e:07:fd:bb: 0c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:B0:5A:88:F0:BC:1A:A0:B9:16:F2:02:CB:A7:31:3C:88:18:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.crl X509v3 Authority Key Identifier: keyid:1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer sbgp-ipAddrBlock: critical IPv4: 216.162.112.0/20 IPv6: 2620:11f:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9f:66:f1:9f:f7:5f:a7:23:61:4a:0f:30:41:db:61:65:32: 82:86:86:3f:18:e3:54:93:f4:a4:27:a7:e9:5f:e7:f5:2b:64: 54:38:15:9e:ed:6e:f9:e9:55:44:a0:75:31:c7:04:ee:36:2d: 56:85:2b:1f:96:3a:12:f6:d6:f9:da:9a:d8:33:92:6d:5a:38: f6:55:a7:71:10:f6:50:1e:18:d8:2d:f3:69:ff:46:af:2c:a5: b2:39:28:a3:ba:0d:ba:a1:d4:6a:2e:5c:79:3e:f3:e2:8c:e3: b8:ae:91:7c:d5:f1:96:47:70:52:2f:52:85:fa:7c:65:5b:08: ce:0d:29:1b:7e:b8:ac:c7:5b:2a:90:16:0c:fa:c6:3d:59:21: f5:e0:08:30:70:4e:ec:6f:79:d9:06:ec:45:f1:ef:fc:2e:25: 5f:4a:b6:58:58:df:83:27:9e:cc:a5:5f:ae:1c:c3:b8:9e:16: b0:f4:70:e6:27:c1:55:75:d2:55:f0:87:a6:94:79:91:3b:d5: 50:c1:c9:53:a0:60:6a:24:9d:c9:1d:dd:c6:c3:2b:c8:2b:ed: 4b:70:57:8f:a9:b2:fd:f1:de:a4:35:32:c7:c0:02:07:07:1c: 50:4d:20:d9:44:b9:1e:57:77:a9:7d:d0:b2:5d:3d:4c:f9:78: a3:85:60:38 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtNEc/dvgaHBtgIvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY0MjM2YWMtZTU0Yi00NTQ1LWI1N2UtYjk3MWU1ZDM3 OTY4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDQ2MWQ1YmYtZTRlYS00ZTA2LWIzZTktYmM3YzM3MjE5MmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj7gDpf/wMGC0FX8iw9V5+Pv8a3B12PJNsSB UIgs2i7zh6VftmCL8BnUwXfLQj6x6X8WwQnLrbwTloZVNhGacVxBFNWpbz8mnxH4 WcoyJ2Q2HOltVhnPlGh+2L6gxjqjPFhjMAsxALIhBh8vb89M2QJxZnqQmXsEElB3 Zz1jBxMRc1oQjp28f9RiTu49v00wWkzsl8Zu+t0fNTXnoQIZjJzzkiDuJH26P3uz arf9TfFXrBb7/2InMe01yg6T3IYRlnApU8NY6yJPAqlZMfyB+DSD5eMZh9WVNhEF TMOXwovbz+dwlYWGtzilAyjFwstKwCFHJfyKqwjJl14H/bsMyQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGB+sFqI8LwaoLkW8gLLpzE8iBiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjQy MzZhYy1lNTRiLTQ1NDUtYjU3ZS1iOTcxZTVkMzc5NjgvM2MxOTVlMzUtZTgyNS0z ZDlkLWFkYmUtZGZiODBmNDBiZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTY0MjM2YWMtZTU0Yi00NTQ1LWI1 N2UtYjk3MWU1ZDM3OTY4L2U2NDIzNmFjLWU1NGItNDU0NS1iNTdlLWI5NzFlNWQz Nzk2OC5jcmwwHwYDVR0jBBgwFoAUHx77070MTX5Oyl4YbCGgC6oPDnQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjQyMzZhYy1lNTRiLTQ1NDUtYjU3ZS1iOTcx ZTVkMzc5NjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQE2KJwMA4E AgACMAgDBgAmIAEfQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpn2bxn/dfpyNhSg8wQdthZTKChoY/GONU k/SkJ6fpX+f1K2RUOBWe7W756VVEoHUxxwTuNi1WhSsfljoS9tb52prYM5JtWjj2 VadxEPZQHhjYLfNp/0avLKWyOSijug26odRqLlx5PvPijOO4rpF81fGWR3BSL1KF +nxlWwjODSkbfrisx1sqkBYM+sY9WSH14AgwcE7sb3nZBuxF8e/8LiVfSrZYWN+D J57MpV+uHMO4nhaw9HDmJ8FVddJV8IemlHmRO9VQwclToGBqJJ3JHd3GwyvIK+1L cFePqbL98d6kNTLHwAIHBxxQTSDZRLkeV3epfdCyXT1M+XijhWA4 -----END CERTIFICATE-----Generated at Wed Oct 22 00:11:39 2025 by rpki-client