$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa File: de58c588-4488-3729-a7e1-98130f91c66c.roa (raw, json) Hash identifier: 0MJTOlWmj3fHAMwVyO5rTC+mRbXMYP1nygvv43ezR0M= Subject key identifier: D0:5A:96:9C:92:44:48:A1:FA:2C:6E:27:43:C6:6C:DE:17:2C:E1:F9 Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Certificate serial: 010D0C9F4328584B0B76A5BFE4C5C41F455F1C00 Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 32867 IP address blocks: 64.5.64.0/20 maxlen: 20 64.186.16.0/21 maxlen: 21 66.172.192.0/18 maxlen: 18 74.221.32.0/20 maxlen: 20 199.116.180.0/22 maxlen: 22 199.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a5:bf:e4:c5:c4:1f:45:5f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=8dc9cf9a-2c48-4b04-a756-5243e6af857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:09:82:9b:9a:8d:ce:65:bf:f6:4a:76:fb: 09:92:67:c9:28:e2:e0:4d:d0:ae:28:f7:ce:69:c3: 58:09:7b:f2:bd:bf:63:2e:ec:70:5f:84:35:18:cb: 0b:1b:a2:10:af:ae:7c:90:0e:c4:f8:c8:33:12:2e: 35:0c:64:aa:5d:69:83:d7:b2:26:a4:92:4b:ab:b3: 81:86:1b:31:b7:3f:22:f6:de:8a:02:85:ad:dc:d3: 84:cc:53:12:9a:94:ee:c9:43:6e:c5:c8:31:5a:d4: 10:5f:24:0b:90:d3:f3:80:7b:c3:a7:e3:52:09:5f: 1b:81:9b:27:3e:fa:a8:59:e2:a9:ae:a4:30:d0:5a: 90:12:d4:5a:65:05:83:67:f1:42:22:6c:c7:94:08: 45:63:b1:3a:99:5c:7d:1c:4a:37:6a:0f:54:43:be: 67:cb:ba:9b:c6:4a:e1:1e:a8:b6:a4:13:0b:47:31: e8:90:80:0c:1d:cf:20:d1:4e:07:7b:6f:fc:3f:63: a4:40:64:9a:2e:48:53:b8:67:0c:92:27:fa:29:5c: f2:fd:9b:37:e3:e8:31:ad:db:bb:6a:62:1f:77:9d: 4a:48:f7:a9:ea:04:f4:42:17:7d:4e:14:9b:33:c9: 0d:ca:0d:ff:5f:3b:f5:26:58:32:3c:5b:fd:d1:5e: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:96:9C:92:44:48:A1:FA:2C:6E:27:43:C6:6C:DE:17:2C:E1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl X509v3 Authority Key Identifier: keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer sbgp-ipAddrBlock: critical IPv4: 64.5.64.0/20 64.186.16.0/21 66.172.192.0/18 74.221.32.0/20 199.116.180.0/22 199.247.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4c:66:e8:b9:2a:ac:9e:6d:1e:d0:2f:32:95:82:3b:1c:21: 66:63:f1:f8:64:cd:22:fb:50:a9:01:a1:98:1f:f5:8f:74:58: 93:18:17:b6:96:fe:09:5b:56:3e:0c:2e:90:af:d4:13:cb:b1: 2b:20:e2:69:6e:f3:dd:95:e2:f9:f3:fb:4c:33:c9:3a:7c:3e: 72:d9:a4:45:76:97:05:52:f3:42:e3:ac:4e:7d:41:59:c0:32: cf:35:0b:32:9c:a5:f3:bb:ea:72:1e:2b:e7:53:0f:45:0e:42: 6f:6d:bf:79:44:f9:a3:44:12:e3:a3:d1:d3:be:2e:89:83:cd: b0:05:2d:36:ca:1c:87:83:a1:ec:a4:0a:f6:78:04:aa:f1:25: 15:bf:6f:ca:06:56:4c:26:0f:19:f7:11:32:d1:f5:93:56:85: ee:b9:3d:8d:35:ad:33:8b:a6:79:f0:48:c7:d2:77:f1:9a:25: c4:32:b1:c0:c4:c2:d5:f1:a8:45:a8:b7:69:88:2f:1b:bb:3f: cb:11:66:32:51:be:20:af:55:83:14:94:91:67:90:b0:31:be: 82:d6:28:9a:24:bc:9c:62:fc:f6:51:b4:81:5e:58:d0:65:8b: 5a:f4:e3:29:29:25:05:fb:80:c5:21:8c:da:05:35:82:3c:46: 4c:67:ad:97 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEsLdqW/5MXEH0VfHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy ODQ5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk OGRjOWNmOWEtMmM0OC00YjA0LWE3NTYtNTI0M2U2YWY4NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO4Jgpuajc5lv/ZKdvsJkmfJKOLgTdCuKPfO acNYCXvyvb9jLuxwX4Q1GMsLG6IQr658kA7E+MgzEi41DGSqXWmD17ImpJJLq7OB hhsxtz8i9t6KAoWt3NOEzFMSmpTuyUNuxcgxWtQQXyQLkNPzgHvDp+NSCV8bgZsn PvqoWeKprqQw0FqQEtRaZQWDZ/FCImzHlAhFY7E6mVx9HEo3ag9UQ75ny7qbxkrh Hqi2pBMLRzHokIAMHc8g0U4He2/8P2OkQGSaLkhTuGcMkif6KVzy/Zs34+gxrdu7 amIfd51KSPep6gT0Qhd9ThSbM8kNyg3/Xzv1JlgyPFv90V7FSwIDAQABo4IDczCC A28wHQYDVR0OBBYEFNBalpySREih+ixuJ0PGbN4XLOH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvZGU1OGM1ODgtNDQ4OC0z NzI5LWE3ZTEtOTgxMzBmOTFjNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4 YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1 Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl ZjE3NTI4NDkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEQAVAAwQD QLoQAwQGQqzAAwQESt0gAwQCx3S0AwQEx/dAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF1MZui5KqyebR7Q LzKVgjscIWZj8fhkzSL7UKkBoZgf9Y90WJMYF7aW/glbVj4MLpCv1BPLsSsg4mlu 892V4vnz+0wzyTp8PnLZpEV2lwVS80LjrE59QVnAMs81CzKcpfO76nIeK+dTD0UO Qm9tv3lE+aNEEuOj0dO+LomDzbAFLTbKHIeDoeykCvZ4BKrxJRW/b8oGVkwmDxn3 ETLR9ZNWhe65PY01rTOLpnnwSMfSd/GaJcQyscDEwtXxqEWot2mILxu7P8sRZjJR viCvVYMUlJFnkLAxvoLWKJokvJxi/PZRtIFeWNBli1r04ykpJQX7gMUhjNoFNYI8 RkxnrZc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:50 2025 by rpki-client