$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/1eb4172a-b57a-3f76-b7e6-6bdd6f6c3021.roa File: 1eb4172a-b57a-3f76-b7e6-6bdd6f6c3021.roa (raw, json) Hash identifier: 2X2GNMgO2RRJBOXVccpeRQCjuAc67590Gkk/JuzKEHo= Subject key identifier: DD:B1:D9:90:83:D8:8B:18:E3:26:69:4D:CE:69:53:BE:31:CB:13:6C Certificate issuer: /CN=c25a8f2d-f070-4a47-a89b-ee2b1501bba4 Certificate serial: 010D0C9F4328584FA6F87341B764C1321F966260 Authority key identifier: 4A:B0:B9:67:9C:BF:A6:DA:EE:F6:28:03:76:F7:68:D2:DF:C9:E3:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/1eb4172a-b57a-3f76-b7e6-6bdd6f6c3021.roa Signing time: Wed 28 Oct 2026 13:00:13 +0000 ROA not before: Wed 28 Oct 2026 13:00:13 +0000 ROA not after: Tue 26 Jan 2027 14:00:13 +0000 asID: 13886 IP address blocks: 64.71.72.0/24 maxlen: 24 64.71.73.0/24 maxlen: 24 64.71.74.0/24 maxlen: 24 64.71.75.0/24 maxlen: 24 64.71.76.0/24 maxlen: 24 64.71.77.0/24 maxlen: 24 64.71.78.0/24 maxlen: 24 64.71.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f8:73:41:b7:64:c1:32:1f:96:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25a8f2d-f070-4a47-a89b-ee2b1501bba4 Validity Not Before: Oct 28 13:00:13 2026 GMT Not After : Jan 26 14:00:13 2027 GMT Subject: CN=9adc93ee-e726-43f0-a991-d63a8c613fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:13:ab:ca:ac:3b:80:c9:66:a0:91:af:6e: fc:c5:d5:79:16:f5:fc:59:3d:05:e9:37:cd:19:89: 44:49:24:e2:22:0d:51:ce:5b:f0:f5:94:5a:b8:42: 58:85:f8:e4:c4:8b:ee:27:6b:ed:a8:e1:11:17:42: e6:cd:ea:a3:96:4c:46:11:ab:e1:e8:db:e6:0d:34: 84:c5:ef:3d:8e:49:4a:72:70:64:d9:52:d2:38:e7: 29:49:71:57:b1:68:52:83:38:b8:f7:5b:9c:68:62: 30:ad:43:98:97:28:12:f7:b9:98:7f:3d:67:4c:24: 67:83:e6:62:b0:ec:4c:64:7b:54:9a:19:da:36:7e: ad:c8:4c:6a:d3:4c:52:54:5c:58:2e:94:e6:05:cc: fb:bc:92:09:91:22:5d:33:d2:ca:60:ac:6e:1c:0a: a1:8e:f6:5b:5b:44:4c:3c:db:3d:44:a1:aa:ed:24: 92:3a:02:f3:5f:60:a0:66:d6:8a:64:3f:9e:fc:b9: 1a:10:b8:f3:2c:fc:a2:f2:e8:82:1c:9c:c2:d6:63: f3:40:1d:98:49:74:0b:6f:ac:03:14:fb:28:e4:6c: 0f:45:d2:f4:cd:34:c7:99:0b:82:8f:4d:e6:28:7f: 12:7a:1c:df:3b:7a:50:d1:03:c2:33:7d:a6:22:b9: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B1:D9:90:83:D8:8B:18:E3:26:69:4D:CE:69:53:BE:31:CB:13:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/1eb4172a-b57a-3f76-b7e6-6bdd6f6c3021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.crl X509v3 Authority Key Identifier: keyid:4A:B0:B9:67:9C:BF:A6:DA:EE:F6:28:03:76:F7:68:D2:DF:C9:E3:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c25a8f2d-f070-4a47-a89b-ee2b1501bba4.cer sbgp-ipAddrBlock: critical IPv4: 64.71.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:19:2b:50:78:36:b3:3d:5e:e1:9e:7f:5c:25:3c:09:c5:0e: e7:96:b0:0a:b1:a4:a6:83:a2:43:49:e2:54:82:43:e8:b6:b9: 09:c5:a5:9a:ef:c2:dd:64:52:ae:15:57:73:fe:2c:36:fb:d3: 4f:cc:26:e5:28:0c:c1:38:ac:7f:3d:e8:cd:f3:d8:81:35:e2: 20:c2:f3:8e:ee:58:30:f3:7e:3d:60:62:45:31:c7:0a:55:8f: fe:00:83:99:a1:70:8d:71:a6:44:c0:03:06:69:48:f2:92:76: 83:38:bf:f9:97:50:d3:af:57:d2:fb:0f:8d:07:41:d5:29:81: a0:ca:5a:6e:e4:a9:14:c7:4e:b3:c0:ea:7d:f8:f2:54:fb:4e: 32:ea:32:e0:1f:a0:37:90:93:c8:d0:e4:75:59:5f:1a:e0:14: 9a:15:f6:2a:e3:74:d4:45:1b:3a:79:97:37:d2:f7:93:52:70: 63:0c:42:79:98:7b:1e:ce:54:97:37:df:98:3b:b0:3f:39:bd: 25:27:3b:79:35:44:5b:f9:d3:8f:db:60:59:f9:0d:98:d7:0c: 0c:8a:8f:f1:ac:a9:4c:e6:53:e7:84:9e:43:3a:60:46:72:3b: ac:f9:a2:a3:ee:2c:2f:ea:98:90:4d:f2:53:15:f6:5f:9e:5c: fb:51:92:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+m+HNBt2TBMh+WYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1YThmMmQtZjA3MC00YTQ3LWE4OWItZWUyYjE1MDFi YmE0MB4XDTI2MTAyODEzMDAxM1oXDTI3MDEyNjE0MDAxM1owLzEtMCsGA1UEAxMk OWFkYzkzZWUtZTcyNi00M2YwLWE5OTEtZDYzYThjNjEzZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT0Tq8qsO4DJZqCRr278xdV5FvX8WT0F6TfN GYlESSTiIg1Rzlvw9ZRauEJYhfjkxIvuJ2vtqOERF0LmzeqjlkxGEavh6NvmDTSE xe89jklKcnBk2VLSOOcpSXFXsWhSgzi491ucaGIwrUOYlygS97mYfz1nTCRng+Zi sOxMZHtUmhnaNn6tyExq00xSVFxYLpTmBcz7vJIJkSJdM9LKYKxuHAqhjvZbW0RM PNs9RKGq7SSSOgLzX2CgZtaKZD+e/LkaELjzLPyi8uiCHJzC1mPzQB2YSXQLb6wD FPso5GwPRdL0zTTHmQuCj03mKH8SehzfO3pQ0QPCM32mIrl6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2x2ZCD2IsY4yZpTc5pU74xyxNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMjVh OGYyZC1mMDcwLTRhNDctYTg5Yi1lZTJiMTUwMWJiYTQvMWViNDE3MmEtYjU3YS0z Zjc2LWI3ZTYtNmJkZDZmNmMzMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYzI1YThmMmQtZjA3MC00YTQ3LWE4 OWItZWUyYjE1MDFiYmE0L2MyNWE4ZjJkLWYwNzAtNGE0Ny1hODliLWVlMmIxNTAx YmJhNC5jcmwwHwYDVR0jBBgwFoAUSrC5Z5y/ptru9igDdvdo0t/J47UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jMjVhOGYyZC1mMDcwLTRhNDctYTg5Yi1lZTJi MTUwMWJiYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsZK1B4NrM9XuGef1wlPAnFDueWsAqxpKaDokNJ4lSCQ+i2uQnFpZrv wt1kUq4VV3P+LDb700/MJuUoDME4rH896M3z2IE14iDC847uWDDzfj1gYkUxxwpV j/4Ag5mhcI1xpkTAAwZpSPKSdoM4v/mXUNOvV9L7D40HQdUpgaDKWm7kqRTHTrPA 6n348lT7TjLqMuAfoDeQk8jQ5HVZXxrgFJoV9irjdNRFGzp5lzfS95NScGMMQnmY ex7OVJc335g7sD85vSUnO3k1RFv504/bYFn5DZjXDAyKj/GsqUzmU+eEnkM6YEZy O6z5oqPuLC/qmJBN8lMV9l+eXPtRklI= -----END CERTIFICATE-----Generated at Thu Oct 29 08:14:06 2026 by rpki-client