$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa File: a1511da0-2047-36ce-973f-c8381433105e.roa (raw, json) Hash identifier: sfmXXSE9ohLBhU7CDxxyANvgPPbHjMfmSa+BTa2VrwE= Subject key identifier: 55:B1:CC:94:1E:57:78:72:C2:12:B8:60:48:E4:B9:BE:A6:F7:06:B2 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F4328584B4E77088175F0EB58969F4900 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 6128 IP address blocks: 24.38.0.0/17 maxlen: 24 24.157.32.0/19 maxlen: 24 24.246.96.0/19 maxlen: 24 63.247.160.0/19 maxlen: 24 65.51.0.0/16 maxlen: 24 69.27.224.0/19 maxlen: 24 69.74.0.0/16 maxlen: 24 108.179.0.0/18 maxlen: 24 173.251.0.0/17 maxlen: 24 198.46.96.0/19 maxlen: 24 216.255.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:08:81:75:f0:eb:58:96:9f:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=2197a15a-caf9-4ca7-b1dc-e6cc6dfe296b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:3e:ab:13:17:86:eb:cf:5d:37:cb:c9:29: 68:06:36:3b:6b:1c:31:d6:59:18:00:4e:4f:a9:ae: db:e0:12:10:eb:9e:a9:81:9d:0d:16:de:21:5a:2e: 43:59:97:71:93:73:16:72:1d:5f:4c:5b:6b:28:ed: 2f:0a:5d:dd:71:8b:73:75:4e:00:63:79:d6:5e:e4: d9:7e:3f:20:7a:48:ca:4f:94:20:fe:45:6c:ad:03: d1:32:9a:31:8b:a3:a6:6e:11:50:8d:b5:d0:8b:1b: fe:db:b7:84:6c:32:70:92:8a:82:c3:d3:ce:1d:99: 5f:81:73:42:5d:8a:33:78:e8:42:0c:2d:83:e1:eb: ad:7c:6f:cc:5d:1b:e3:3a:af:16:ed:5d:d0:03:e9: e4:4f:1a:59:01:26:f2:fe:64:87:d4:a4:68:73:e7: a1:44:be:72:b3:2b:a4:96:a2:94:bb:80:a8:30:21: 24:d7:8c:66:16:07:1b:12:83:70:59:6f:f6:38:5c: e6:1d:f5:ee:5b:27:23:ca:39:a2:d6:82:62:80:d5: 91:48:04:90:92:d8:4b:b0:b3:36:90:22:a4:ad:da: bc:c5:58:6b:4a:24:ef:29:2b:20:8c:24:a6:b4:97: 26:8c:b9:26:0e:ab:15:2b:65:76:63:ab:61:10:74: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:CC:94:1E:57:78:72:C2:12:B8:60:48:E4:B9:BE:A6:F7:06:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a1511da0-2047-36ce-973f-c8381433105e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.0.0/17 24.157.32.0/19 24.246.96.0/19 63.247.160.0/19 65.51.0.0/16 69.27.224.0/19 69.74.0.0/16 108.179.0.0/18 173.251.0.0/17 198.46.96.0/19 216.255.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:85:6f:58:5f:3f:b9:38:23:1d:9b:bd:0b:53:4a:b1:8d:91: 38:eb:3d:23:cb:98:8f:a7:a0:75:2c:0a:e0:39:19:6b:fe:04: d6:1d:c6:25:8e:90:8c:75:df:07:00:11:ed:13:d6:38:d4:0c: 00:b3:a5:09:1e:74:63:cd:4b:b8:00:1d:7b:16:b8:cb:bc:02: d5:b8:21:40:04:dd:8b:e3:5b:e1:a7:88:c3:6d:2b:6f:2c:44: d6:86:04:12:4a:8c:f9:c9:e4:83:8e:b5:44:5f:14:52:f7:93: 92:f9:e4:58:71:a7:aa:fc:4d:b0:41:e1:86:a4:b1:0f:58:a2: b1:fd:fe:a3:9c:e7:3f:6a:b4:96:14:50:43:0f:97:2e:64:1b: f6:40:76:fb:15:8a:99:8e:35:b1:39:d1:99:eb:95:39:e0:3f: 1c:09:49:fd:1d:20:b8:2e:fa:77:40:fd:f7:bf:29:c4:12:d5: 29:e9:a7:35:47:2a:10:df:72:f0:5e:4d:a8:32:9e:be:c9:ba: d5:aa:a9:82:b1:eb:ed:89:0b:44:10:49:69:86:b0:d6:40:b5: 74:a0:dc:c1:cb:86:7e:9c:cb:20:fd:2c:5c:12:92:ce:31:0d: 6c:19:90:bd:86:ec:79:d2:fb:7b:50:44:55:34:97:63:14:25: cd:f1:08:05 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEtOdwiBdfDrWJafSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk MjE5N2ExNWEtY2FmOS00Y2E3LWIxZGMtZTZjYzZkZmUyOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZw+qxMXhuvPXTfLySloBjY7axwx1lkYAE5P qa7b4BIQ656pgZ0NFt4hWi5DWZdxk3MWch1fTFtrKO0vCl3dcYtzdU4AY3nWXuTZ fj8gekjKT5Qg/kVsrQPRMpoxi6OmbhFQjbXQixv+27eEbDJwkoqCw9POHZlfgXNC XYozeOhCDC2D4eutfG/MXRvjOq8W7V3QA+nkTxpZASby/mSH1KRoc+ehRL5ysyuk lqKUu4CoMCEk14xmFgcbEoNwWW/2OFzmHfXuWycjyjmi1oJigNWRSASQkthLsLM2 kCKkrdq8xVhrSiTvKSsgjCSmtJcmjLkmDqsVK2V2Y6thEHRY4wIDAQABo4IDjzCC A4swHQYDVR0OBBYEFFWxzJQeV3hywhK4YEjkub6m9wayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTE1MTFkYTAtMjA0Ny0z NmNlLTk3M2YtYzgzODE0MzMxMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQHGCYAAwQF GJ0gAwQFGPZgAwQFP/egAwMAQTMDBAVFG+ADAwBFSgMEBmyzAAMEB637AAMEBcYu YAMEBdj/YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQB3hW9YXz+5OCMdm70LU0qxjZE46z0jy5iPp6B1LArg ORlr/gTWHcYljpCMdd8HABHtE9Y41AwAs6UJHnRjzUu4AB17FrjLvALVuCFABN2L 41vhp4jDbStvLETWhgQSSoz5yeSDjrVEXxRS95OS+eRYcaeq/E2wQeGGpLEPWKKx /f6jnOc/arSWFFBDD5cuZBv2QHb7FYqZjjWxOdGZ65U54D8cCUn9HSC4Lvp3QP33 vynEEtUp6ac1RyoQ33LwXk2oMp6+ybrVqqmCsevtiQtEEElphrDWQLV0oNzBy4Z+ nMsg/SxcEpLOMQ1sGZC9hux50vt7UERVNJdjFCXN8QgF -----END CERTIFICATE-----Generated at Fri Oct 10 17:34:44 2025 by rpki-client