$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa File: 5e890693-6aca-3d03-a030-fd3266100d15.roa (raw, json) Hash identifier: GTFOnAFps68F8ISvGFxxEc6j+gUsgKPvtuOcVSyYXkU= Subject key identifier: A2:EC:67:1C:67:FB:9F:90:98:80:CA:FE:62:E1:22:EA:31:DB:E9:21 Certificate issuer: /CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Certificate serial: 010D0C9F4328584B84E771206253D045220B9C00 Authority key identifier: D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 19515 IP address blocks: 64.18.160.0/19 maxlen: 19 69.4.208.0/20 maxlen: 20 69.67.0.0/20 maxlen: 20 69.173.128.0/20 maxlen: 20 108.59.64.0/20 maxlen: 20 192.247.12.0/22 maxlen: 22 199.253.10.0/23 maxlen: 23 205.237.20.0/24 maxlen: 24 206.108.60.0/24 maxlen: 24 208.111.64.0/19 maxlen: 19 2605:c500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:71:20:62:53:d0:45:22:0b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06bf1e4f-42a6-423f-8cc1-b96d41424679 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3bf7075f-175d-4acd-911b-293100f0e081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:5d:c5:24:06:89:4f:83:60:b0:af:28:be: 52:bc:bc:6f:84:dc:9b:72:c2:78:dd:1f:e9:ac:a7: 57:fe:93:7a:84:74:a4:44:9f:6a:7a:8e:f7:d4:9d: bf:13:42:54:a9:8e:ae:c1:b2:e9:80:74:64:70:de: c7:73:16:25:2f:36:14:38:07:ec:e0:6e:e0:9a:5d: a0:d4:85:d7:4a:e6:fb:97:d5:c8:59:13:e4:85:6b: 5c:36:3e:56:48:e0:b5:46:55:09:2b:72:65:50:4e: 19:8e:cc:89:f0:dc:2e:26:a7:f1:cd:d8:59:a6:ec: 09:24:97:84:3c:e6:21:26:ae:2b:22:1e:5c:dc:5b: 85:a3:42:8a:58:76:aa:1d:8c:96:a4:28:b4:8a:d0: 80:1b:54:4b:c8:b2:20:20:34:8c:5d:34:7b:37:39: d3:b5:96:30:c1:54:a9:f5:c9:1d:b5:1e:a6:2d:50: 3f:9a:d2:ab:27:d7:fb:1f:8d:11:1d:c2:0c:2a:b8: 05:85:85:37:19:2c:da:e3:a2:a1:32:7f:08:d2:cf: 67:f2:46:b8:af:a1:06:0b:d3:57:73:b8:2a:92:eb: 1c:d4:d8:a3:7c:7e:7e:0d:ce:d4:8d:6a:6f:8d:35: af:c9:56:82:4f:b3:ab:1e:08:59:8a:10:5a:ca:75: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EC:67:1C:67:FB:9F:90:98:80:CA:FE:62:E1:22:EA:31:DB:E9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/5e890693-6aca-3d03-a030-fd3266100d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl X509v3 Authority Key Identifier: keyid:D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer sbgp-ipAddrBlock: critical IPv4: 64.18.160.0/19 69.4.208.0/20 69.67.0.0/20 69.173.128.0/20 108.59.64.0/20 192.247.12.0/22 199.253.10.0/23 205.237.20.0/24 206.108.60.0/24 208.111.64.0/19 IPv6: 2605:c500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:66:05:7d:b4:c1:25:29:57:d1:4b:15:de:51:99:78:10: e8:91:9b:53:b9:52:31:8e:d4:9d:a3:09:65:1a:0b:74:df:e5: 77:37:b7:5e:e5:db:7d:fa:73:1b:a9:c4:4c:fa:3a:e4:17:85: af:c7:9e:ad:9f:49:1b:af:90:cd:3f:17:ce:89:2e:7b:07:0f: dd:5b:9e:92:be:06:49:c2:40:dc:a0:28:43:d7:92:22:00:c5: a7:1f:89:3c:66:16:18:bf:28:d0:7b:6c:1e:86:4c:3b:03:df: 65:75:c7:59:6d:cc:a1:1d:fb:56:eb:3a:fb:81:1c:c1:1a:2d: 27:52:30:be:92:9d:76:ba:78:dc:0c:f8:6e:a8:13:28:d5:a9: c9:34:10:46:e6:d2:3c:50:08:32:ea:e1:39:bb:10:3a:bf:ce: d7:00:47:b3:bf:d3:d4:ea:a0:ae:65:e1:1e:82:4d:a5:b9:d3: f8:ec:ea:ae:99:62:89:2b:1a:8b:bf:97:38:a0:86:51:54:47: a9:42:20:9b:a4:7a:c2:ff:62:0a:d8:80:73:40:73:85:54:53: 80:99:fe:e1:d3:a8:43:7f:34:c5:13:ae:66:8a:78:4c:06:ec: 0e:c7:66:f5:2c:c5:64:d0:92:02:11:34:d7:e1:cc:b2:33:d2: d6:5d:a2:7c -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIUAQ0Mn0MoWEuE53EgYlPQRSILnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZiZjFlNGYtNDJhNi00MjNmLThjYzEtYjk2ZDQxNDI0 Njc5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2JmNzA3NWYtMTc1ZC00YWNkLTkxMWItMjkzMTAwZjBlMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9pdxSQGiU+DYLCvKL5SvLxvhNybcsJ43R/p rKdX/pN6hHSkRJ9qeo731J2/E0JUqY6uwbLpgHRkcN7HcxYlLzYUOAfs4G7gml2g 1IXXSub7l9XIWRPkhWtcNj5WSOC1RlUJK3JlUE4ZjsyJ8NwuJqfxzdhZpuwJJJeE POYhJq4rIh5c3FuFo0KKWHaqHYyWpCi0itCAG1RLyLIgIDSMXTR7NznTtZYwwVSp 9ckdtR6mLVA/mtKrJ9f7H40RHcIMKrgFhYU3GSza46KhMn8I0s9n8ka4r6EGC9NX c7gqkusc1NijfH5+Dc7UjWpvjTWvyVaCT7OrHghZihBaynWm+wIDAQABo4IDmjCC A5YwHQYDVR0OBBYEFKLsZxxn+5+QmIDK/mLhIuox2+khMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJm MWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZkNDE0MjQ2NzkvNWU4OTA2OTMtNmFjYS0z ZDAzLWEwMzAtZmQzMjY2MTAwZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDZiZjFlNGYtNDJhNi00MjNmLThj YzEtYjk2ZDQxNDI0Njc5LzA2YmYxZTRmLTQyYTYtNDIzZi04Y2MxLWI5NmQ0MTQy NDY3OS5jcmwwHwYDVR0jBBgwFoAU1hmpS4V43aoyTHJlRGEHIHwhrrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNmJmMWU0Zi00MmE2LTQyM2YtOGNjMS1iOTZk NDE0MjQ2NzkuY2VyMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQFQBKgAwQE RQTQAwQERUMAAwQERa2AAwQEbDtAAwQCwPcMAwQBx/0KAwQAze0UAwQAzmw8AwQF 0G9AMA0EAgACMAcDBQAmBcUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA+LZgV9tMElKVfRSxXeUZl4EOiR m1O5UjGO1J2jCWUaC3Tf5Xc3t17l2336cxupxEz6OuQXha/Hnq2fSRuvkM0/F86J LnsHD91bnpK+BknCQNygKEPXkiIAxacfiTxmFhi/KNB7bB6GTDsD32V1x1ltzKEd +1brOvuBHMEaLSdSML6SnXa6eNwM+G6oEyjVqck0EEbm0jxQCDLq4Tm7EDq/ztcA R7O/09TqoK5l4R6CTaW50/js6q6ZYokrGou/lzighlFUR6lCIJukesL/YgrYgHNA c4VUU4CZ/uHTqEN/NMUTrmaKeEwG7A7HZvUsxWTQkgIRNNfhzLIz0tZdonw= -----END CERTIFICATE-----Generated at Tue Oct 21 06:52:22 2025 by rpki-client