$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa File: 20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa (raw, json) Hash identifier: JhTlkIfctVPrw95mPKBJkJm8pn+lg0dH2GlY0ogjutY= Subject key identifier: 9B:48:5F:21:A4:83:F7:D8:EB:F5:65:94:A3:7D:2F:2B:6B:44:C1:3A Certificate issuer: /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Certificate serial: 010D0C9F4328584B1AD16E9994F840713C4032E0 Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 64.57.8.0/21 maxlen: 21 64.57.8.0/24 maxlen: 24 64.57.9.0/24 maxlen: 24 64.57.10.0/24 maxlen: 24 64.57.11.0/24 maxlen: 24 64.57.12.0/24 maxlen: 24 64.57.13.0/24 maxlen: 24 64.57.14.0/24 maxlen: 24 64.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:6e:99:94:f8:40:71:3c:40:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=61a0cdf6-16fb-4749-a3bc-67ecd982cfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:b3:59:23:87:30:a0:38:f1:86:48:27:6e: 8a:20:0c:a7:59:b9:2a:47:0f:a3:73:47:e4:12:62: 7a:ce:a0:cd:e9:cc:34:4d:a1:4f:b3:a7:b5:ac:5a: 03:2c:e0:57:25:29:df:a1:7d:82:8a:e7:8f:43:72: 73:11:61:37:f7:b2:c4:e5:11:be:98:46:09:84:a2: 46:01:1c:46:fc:84:cf:d6:30:cb:18:f4:0f:ab:d0: 70:1e:46:77:cf:2a:89:ac:0c:7a:ae:a4:18:12:55: f0:8f:99:7c:11:81:19:f5:59:fc:80:85:64:cc:e4: 8b:a2:96:4d:00:4e:70:8e:36:da:32:a1:92:6c:0d: 95:0d:eb:ef:bc:a4:6b:04:4d:08:e1:8b:55:e7:a1: e8:f9:15:35:20:ea:78:3d:d6:7e:91:ef:95:de:29: 36:1f:c4:28:f2:49:ce:82:f6:44:ad:20:d1:21:63: f1:f9:27:fb:d4:42:5b:e6:38:d4:f9:cc:3a:2a:ba: da:76:f4:b0:a7:d5:81:02:19:23:1c:f5:43:46:b6: 88:27:72:ce:9b:ed:4d:96:f8:d6:32:e3:42:82:9f: 7e:0f:b3:c1:f4:5e:1d:d7:5d:e9:70:97:ff:27:2b: ff:cd:55:2c:44:05:26:79:14:37:00:9a:0b:ca:39: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:5F:21:A4:83:F7:D8:EB:F5:65:94:A3:7D:2F:2B:6B:44:C1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/20c6f98d-a739-3e55-8480-2f3ea3c0232c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl X509v3 Authority Key Identifier: keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a2:b8:9a:34:60:79:d9:be:66:bf:63:92:e4:7c:86:e8:d6: 8c:e1:76:b6:b7:f3:dd:3b:e7:5a:09:6d:d5:4f:26:66:a9:b1: 71:08:d1:9a:c0:3f:6c:61:73:84:bc:c9:1e:59:df:4e:58:b3: 48:fd:c2:96:75:b4:32:8b:38:43:42:5c:d9:cb:1a:fe:48:e7: bd:1c:20:c7:79:f3:5b:c9:19:15:14:86:89:ad:42:15:76:4f: 9d:73:05:fb:b7:3a:fc:29:d4:4b:10:8d:c5:fe:4c:6d:62:2a: 58:7e:2e:24:89:be:ba:c3:97:1d:00:12:d9:54:9d:51:0f:0c: 17:79:15:ca:95:a7:9e:e1:96:52:ec:17:dd:21:33:76:90:db: 67:78:ed:6b:06:81:51:7a:6b:94:8b:12:a8:01:1b:b5:e0:49: ae:89:a2:4e:32:3f:68:ff:2b:87:e0:f2:e2:e4:a4:89:06:d6: 00:cc:fe:2e:2b:85:a4:93:78:58:14:5a:11:ef:e4:ab:11:f3: 99:98:36:44:2c:12:4e:3b:ff:f4:41:62:42:a8:a7:b4:4d:ae: 2e:b9:9d:f1:4e:61:41:0b:94:c2:87:bd:27:60:2f:55:31:f1: 61:d4:cf:8f:22:0a:10:a2:0c:ca:c0:8b:f3:ec:64:66:7d:6f: 16:fe:2a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0W6ZlPhAcTxAMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzMzNlZDYtYjc0Zi00NjY1LWI3YTgtMmYwNGRmNmY4 N2YzMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjFhMGNkZjYtMTZmYi00NzQ5LWEzYmMtNjdlY2Q5ODJjZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7azWSOHMKA48YZIJ26KIAynWbkqRw+jc0fk EmJ6zqDN6cw0TaFPs6e1rFoDLOBXJSnfoX2CiuePQ3JzEWE397LE5RG+mEYJhKJG ARxG/ITP1jDLGPQPq9BwHkZ3zyqJrAx6rqQYElXwj5l8EYEZ9Vn8gIVkzOSLopZN AE5wjjbaMqGSbA2VDevvvKRrBE0I4YtV56Ho+RU1IOp4PdZ+ke+V3ik2H8Qo8knO gvZErSDRIWPx+Sf71EJb5jjU+cw6KrradvSwp9WBAhkjHPVDRraIJ3LOm+1NlvjW MuNCgp9+D7PB9F4d113pcJf/Jyv/zVUsRAUmeRQ3AJoLyjmVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtIXyGkg/fY6/VllKN9LytrRME6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMz M2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0ZGY2Zjg3ZjMvMjBjNmY5OGQtYTczOS0z ZTU1LTg0ODAtMmYzZWEzYzAyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjYzMzNlZDYtYjc0Zi00NjY1LWI3 YTgtMmYwNGRmNmY4N2YzL2Y2MzMzZWQ2LWI3NGYtNDY2NS1iN2E4LTJmMDRkZjZm ODdmMy5jcmwwHwYDVR0jBBgwFoAUSQK1tUOT0m/tMI1Qpa/gqEUI3Z0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMzM2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0 ZGY2Zjg3ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOiuJo0YHnZvma/Y5LkfIbo1ozhdra3890751oJbdVPJmapsXEI0ZrA P2xhc4S8yR5Z305Ys0j9wpZ1tDKLOENCXNnLGv5I570cIMd581vJGRUUhomtQhV2 T51zBfu3Ovwp1EsQjcX+TG1iKlh+LiSJvrrDlx0AEtlUnVEPDBd5FcqVp57hllLs F90hM3aQ22d47WsGgVF6a5SLEqgBG7XgSa6Jok4yP2j/K4fg8uLkpIkG1gDM/i4r haSTeFgUWhHv5KsR85mYNkQsEk47//RBYkKop7RNri65nfFOYUELlMKHvSdgL1Ux 8WHUz48iChCiDMrAi/PsZGZ9bxb+Knw= -----END CERTIFICATE-----Generated at Thu Oct 9 19:56:47 2025 by rpki-client