$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa File: b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa (raw, json) Hash identifier: k/1GLJWnExNR53bN2fNZaOnvQodj6uZQdkzMEdxdFUU= Subject key identifier: 91:1E:28:D7:4C:2B:08:50:95:3F:1D:0A:D2:C3:E2:EC:FF:5B:A3:53 Certificate issuer: /CN=87edc032-d938-4504-bf4b-96c599e50195 Certificate serial: 010D0C9F4328584B821CD04DB98AB21D86D0D900 Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 27005 IP address blocks: 65.39.96.0/19 maxlen: 24 69.2.0.0/20 maxlen: 24 148.59.212.0/23 maxlen: 24 162.253.232.0/21 maxlen: 24 207.254.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d0:4d:b9:8a:b2:1d:86:d0:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=3bd1c58f-2364-4328-abd9-a4305998d2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:47:d3:91:82:da:6d:18:ec:35:b8:a8:fd: 75:fe:ba:fb:a2:c5:30:cb:e0:6a:a3:b9:1a:b7:54: 65:40:f8:e9:b1:99:c1:12:fe:a8:7e:7e:7f:a0:09: 6a:c7:41:76:e4:2f:5d:f0:5a:4b:0a:8d:8c:65:99: 58:a1:97:24:21:84:1c:1d:34:a1:9a:49:a8:7e:0c: f9:18:62:94:29:bf:4e:9d:b5:ef:5c:eb:ee:69:47: 55:58:4c:12:34:63:c9:03:da:2f:12:58:27:c1:2a: 2e:b9:cb:80:75:f6:60:98:5c:c4:e0:a8:15:82:bf: 93:48:9c:35:ea:dc:a1:93:1d:a6:c3:db:4d:12:21: 2e:93:98:e2:65:8e:05:05:fa:36:e2:59:45:47:a2: bb:4f:6c:a5:df:b9:31:ad:af:01:c3:ff:0f:87:39: 63:ef:9c:af:74:b6:1c:eb:0f:ed:eb:14:13:da:16: f9:59:8d:e7:10:a1:15:d3:8a:a2:8c:6e:08:61:f5: 4e:8e:36:e4:81:da:49:88:72:eb:3e:50:4b:8e:91: a1:47:58:24:4e:ef:eb:51:5b:0d:a5:10:79:e9:fa: ae:cb:3e:a0:b3:8d:63:ef:5c:53:d2:dc:7f:e7:c4: 0b:af:77:17:94:b2:20:a6:bf:f6:1b:a2:c0:04:c3: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:28:D7:4C:2B:08:50:95:3F:1D:0A:D2:C3:E2:EC:FF:5B:A3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/b21aa04d-0aa5-3b24-8bb8-0cdd905aef81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl X509v3 Authority Key Identifier: keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer sbgp-ipAddrBlock: critical IPv4: 65.39.96.0/19 69.2.0.0/20 148.59.212.0/23 162.253.232.0/21 207.254.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e1:d1:b8:91:c6:2d:5c:1f:86:49:a1:8f:f8:7c:d6:a5:0e: 3d:98:e4:23:00:9a:9a:2f:bb:5b:87:d2:7b:c8:2d:dc:d8:b3: 76:3b:fd:dd:fd:87:8a:50:ff:31:6b:dd:7a:37:bc:d7:a4:90: 97:a3:c3:bc:38:a8:1d:7b:32:19:57:5a:31:cb:58:d0:ad:14: bb:07:33:f8:5d:41:84:c5:5f:8c:78:f6:f2:a3:03:31:a2:d1: b6:08:a8:cd:38:d5:13:c8:3a:33:50:24:b3:6a:23:45:61:cb: bd:3a:6e:0f:70:03:32:2a:2c:3f:e5:05:63:0b:62:a8:8d:a9: 67:a2:f0:51:50:79:90:13:a2:ff:5b:48:0f:5c:c2:17:52:8d: 2f:45:3d:3a:cf:da:49:c8:8c:7b:0f:e0:09:70:76:48:c8:9b: fc:38:0f:83:a2:41:69:5a:35:9b:04:ca:39:6e:0d:67:07:2f: e7:e9:77:0b:0a:19:d7:0c:e7:0f:f6:40:40:07:ae:1e:cd:e8: b8:77:79:fe:bd:4e:da:82:ec:ea:ba:d1:4a:62:8e:3b:16:5a: c7:94:75:a7:65:60:06:68:62:4b:d7:f7:73:71:c9:e3:67:a5: 21:e6:32:af:51:56:6f:fc:8a:0b:e8:6b:7c:1f:64:89:92:2a: 63:84:f5:ae -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEuCHNBNuYqyHYbQ2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdlZGMwMzItZDkzOC00NTA0LWJmNGItOTZjNTk5ZTUw MTk1MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk M2JkMWM1OGYtMjM2NC00MzI4LWFiZDktYTQzMDU5OThkMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW1H05GC2m0Y7DW4qP11/rr7osUwy+Bqo7ka t1RlQPjpsZnBEv6ofn5/oAlqx0F25C9d8FpLCo2MZZlYoZckIYQcHTShmkmofgz5 GGKUKb9OnbXvXOvuaUdVWEwSNGPJA9ovElgnwSouucuAdfZgmFzE4KgVgr+TSJw1 6tyhkx2mw9tNEiEuk5jiZY4FBfo24llFR6K7T2yl37kxra8Bw/8Phzlj75yvdLYc 6w/t6xQT2hb5WY3nEKEV04qijG4IYfVOjjbkgdpJiHLrPlBLjpGhR1gkTu/rUVsN pRB56fquyz6gs41j71xT0tx/58QLr3cXlLIgpr/2G6LABMMuowIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFJEeKNdMKwhQlT8dCtLD4uz/W6NTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84N2Vk YzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1OTllNTAxOTUvYjIxYWEwNGQtMGFhNS0z YjI0LThiYjgtMGNkZDkwNWFlZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODdlZGMwMzItZDkzOC00NTA0LWJm NGItOTZjNTk5ZTUwMTk1Lzg3ZWRjMDMyLWQ5MzgtNDUwNC1iZjRiLTk2YzU5OWU1 MDE5NS5jcmwwHwYDVR0jBBgwFoAUG+7VGGB9PanC6C23Dg6d0AyNYegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84N2VkYzAzMi1kOTM4LTQ1MDQtYmY0Yi05NmM1 OTllNTAxOTUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFQSdgAwQE RQIAAwQBlDvUAwQDov3oAwQDz/7AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAPh0biRxi1cH4ZJoY/4fNal Dj2Y5CMAmpovu1uH0nvILdzYs3Y7/d39h4pQ/zFr3Xo3vNekkJejw7w4qB17MhlX WjHLWNCtFLsHM/hdQYTFX4x49vKjAzGi0bYIqM041RPIOjNQJLNqI0Vhy706bg9w AzIqLD/lBWMLYqiNqWei8FFQeZATov9bSA9cwhdSjS9FPTrP2knIjHsP4AlwdkjI m/w4D4OiQWlaNZsEyjluDWcHL+fpdwsKGdcM5w/2QEAHrh7N6Lh3ef69TtqC7Oq6 0UpijjsWWseUdadlYAZoYkvX93NxyeNnpSHmMq9RVm/8igvoa3wfZImSKmOE9a4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:24:20 2025 by rpki-client