$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa File: 9917fb74-f32d-3244-a63d-665f177752b1.roa (raw, json) Hash identifier: A6oyCO88sfCYAn2FRITdLJ6Er5aQIxA/Gmx6xXocfKA= Subject key identifier: 23:96:69:A8:45:EF:E3:47:C9:64:3B:76:05:BA:F2:69:D9:3D:B3:49 Certificate issuer: /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14 Certificate serial: 010D0C9F4328584B4081A6C60F69603553238A00 Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 14230 IP address blocks: 67.221.32.0/22 maxlen: 24 67.221.36.0/23 maxlen: 24 69.194.7.0/24 maxlen: 24 97.64.76.0/24 maxlen: 24 97.64.93.0/24 maxlen: 24 97.64.100.0/22 maxlen: 24 204.11.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a6:c6:0f:69:60:35:53:23:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=8b9fa523-b38b-4d9c-b73e-fcc396df68c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:d8:59:8b:cc:8b:82:13:9c:11:0a:0a:bf: 14:7a:83:3d:8e:47:0e:98:f4:2e:93:ab:7f:38:1d: 07:35:3e:31:02:aa:1d:de:11:af:8a:55:1b:9f:23: c6:50:c0:0e:6e:92:a2:4b:fd:e1:62:46:52:c6:a3: cd:56:48:00:90:0b:8c:b4:c4:30:71:84:2f:45:94: c1:7a:43:4b:75:9d:90:33:18:a4:46:74:78:e4:73: 2d:6a:a8:80:1c:0d:a3:99:65:8d:38:b2:74:41:84: 3f:b3:bd:64:46:2b:61:90:00:08:4e:7b:11:97:85: 0a:8a:85:34:1d:93:55:2a:3e:86:20:33:0e:54:94: b6:a5:a7:35:6c:bf:be:39:02:c8:2b:91:2f:d0:36: 1a:9a:00:10:0f:38:48:28:97:f2:29:26:d8:aa:db: 3f:1c:cb:0d:63:3a:4e:07:39:53:e6:cd:dc:a7:3a: 73:2d:9f:c7:02:d7:1f:f2:a5:87:bf:75:d5:e0:28: fd:d8:a2:af:d8:b8:6e:d5:75:2e:48:3c:fb:9d:32: 11:0c:a0:40:6a:cc:4e:97:e6:aa:00:56:90:6a:43: 26:dc:93:b3:25:47:2b:44:b1:bf:fc:2f:be:1d:cc: 37:84:43:3c:ae:a9:e8:45:5a:9d:7a:62:9e:fd:48: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:96:69:A8:45:EF:E3:47:C9:64:3B:76:05:BA:F2:69:D9:3D:B3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/9917fb74-f32d-3244-a63d-665f177752b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl X509v3 Authority Key Identifier: keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer sbgp-ipAddrBlock: critical IPv4: 67.221.32.0-67.221.37.255 69.194.7.0/24 97.64.76.0/24 97.64.93.0/24 97.64.100.0/22 204.11.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0a:8e:8f:3a:59:91:89:35:7e:ce:48:7d:e6:08:2f:0a:74: 26:fa:5a:12:db:93:17:e7:91:a1:3a:ab:8b:eb:71:83:d4:cc: 9b:36:76:3c:b2:8d:82:da:44:6f:ea:cc:98:64:9d:59:70:3f: e0:01:86:69:fa:69:bb:a9:54:45:4b:c7:30:8c:3c:47:cc:db: cf:1e:de:8d:7a:7e:22:b2:1a:84:08:13:08:23:64:c9:b1:ee: 2a:20:7c:cb:fb:fa:1c:d8:30:5d:f6:34:67:23:ce:5d:1c:5b: a9:ca:bb:01:06:83:b9:12:3a:cc:f7:f4:78:a1:49:8e:66:58: ef:8d:9c:79:5a:81:c7:17:bd:0b:0e:aa:53:61:6f:ea:e8:01: ad:1b:62:b4:d6:c4:69:2a:c4:15:a6:2c:c4:29:9a:ed:25:df: e1:d0:66:52:5e:90:1a:b3:bb:fd:55:0f:26:e0:06:ae:c2:c0: cb:3e:67:49:4b:b9:0d:ef:83:68:28:80:c7:6c:2c:de:fb:bc: 0c:c5:9d:46:22:75:7c:dc:fd:6a:66:40:0e:f7:7d:08:58:0b: 58:c0:04:e5:ac:eb:ba:41:b7:53:8f:9b:18:f3:f7:db:df:24: 3e:f6:a7:6d:93:fe:83:23:a6:33:80:d1:d0:2e:0e:2b:f2:6d: a3:41:5e:06 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEtAgabGD2lgNVMjigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmYjY5NjYtZTZlNy00Y2IyLWJkZWUtOGQyNmU1OWQ5 YTE0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OGI5ZmE1MjMtYjM4Yi00ZDljLWI3M2UtZmNjMzk2ZGY2OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO7YWYvMi4ITnBEKCr8UeoM9jkcOmPQuk6t/ OB0HNT4xAqod3hGvilUbnyPGUMAObpKiS/3hYkZSxqPNVkgAkAuMtMQwcYQvRZTB ekNLdZ2QMxikRnR45HMtaqiAHA2jmWWNOLJ0QYQ/s71kRithkAAITnsRl4UKioU0 HZNVKj6GIDMOVJS2pac1bL++OQLIK5Ev0DYamgAQDzhIKJfyKSbYqts/HMsNYzpO BzlT5s3cpzpzLZ/HAtcf8qWHv3XV4Cj92KKv2Lhu1XUuSDz7nTIRDKBAasxOl+aq AFaQakMm3JOzJUcrRLG//C++Hcw3hEM8rqnoRVqdemKe/Uj+FwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFCOWaahF7+NHyWQ7dgW68mnZPbNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNmZi Njk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2ZTU5ZDlhMTQvOTkxN2ZiNzQtZjMyZC0z MjQ0LWE2M2QtNjY1ZjE3Nzc1MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTZmYjY5NjYtZTZlNy00Y2IyLWJk ZWUtOGQyNmU1OWQ5YTE0L2U2ZmI2OTY2LWU2ZTctNGNiMi1iZGVlLThkMjZlNTlk OWExNC5jcmwwHwYDVR0jBBgwFoAU8Ox+ebW+yLRnWn4ForN4Q38UKGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNmZiNjk2Ni1lNmU3LTRjYjItYmRlZS04ZDI2 ZTU5ZDlhMTQuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAVD3SAD BAFD3SQDBABFwgcDBABhQEwDBABhQF0DBAJhQGQDBAHMC9gwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMwqO jzpZkYk1fs5IfeYILwp0JvpaEtuTF+eRoTqri+txg9TMmzZ2PLKNgtpEb+rMmGSd WXA/4AGGafppu6lURUvHMIw8R8zbzx7ejXp+IrIahAgTCCNkybHuKiB8y/v6HNgw XfY0ZyPOXRxbqcq7AQaDuRI6zPf0eKFJjmZY742ceVqBxxe9Cw6qU2Fv6ugBrRti tNbEaSrEFaYsxCma7SXf4dBmUl6QGrO7/VUPJuAGrsLAyz5nSUu5De+DaCiAx2ws 3vu8DMWdRiJ1fNz9amZADvd9CFgLWMAE5azrukG3U4+bGPP3298kPvanbZP+gyOm M4DR0C4OK/Jto0FeBg== -----END CERTIFICATE-----Generated at Tue Oct 21 07:23:55 2025 by rpki-client