$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa File: 03d609bb-e0d2-3ffa-8996-b2eac543f536.roa (raw, json) Hash identifier: ArGWXPZIet1iJ/P3+G6CiLw2bo9GXxhXdRdwcC4vbI4= Subject key identifier: 6F:D4:1D:C9:30:3F:C1:98:81:6E:44:7A:C8:B5:B1:57:3A:72:F3:E9 Certificate issuer: /CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Certificate serial: 010D0C9F4328584B6631E77D4D3E52B3E0BA3EA0 Authority key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30417 IP address blocks: 172.81.4.0/22 maxlen: 24 192.64.196.0/23 maxlen: 24 199.85.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:e7:7d:4d:3e:52:b3:e0:ba:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=c6e8a593-2046-4dcb-8718-e33f41d2161c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:1d:f2:2e:31:0b:bf:14:88:42:d4:62:70: ca:50:7c:13:cd:1f:a6:66:4d:a0:91:84:6c:85:78: bf:d9:fb:fa:7b:ba:23:31:21:76:36:4e:22:1d:cf: e5:67:50:86:ee:47:43:ec:82:36:77:27:2b:7c:36: 00:17:8f:39:4c:32:26:b5:50:2a:6c:a2:95:25:c9: d6:3b:f6:a6:5c:f4:b3:f1:b6:23:3c:41:5c:30:04: 33:7a:e5:6f:81:62:99:24:d3:2d:3e:6f:9e:49:37: b4:27:68:08:ec:aa:d7:27:0e:ea:90:db:b6:74:ed: 12:d5:43:28:92:d5:13:5c:c9:ed:b9:c8:00:49:68: dc:ef:c9:40:1a:82:a1:47:a2:33:d1:c1:f9:96:5c: 74:c6:92:33:fd:06:2e:98:dd:4a:3a:f7:dc:00:c1: cc:5c:eb:60:d4:6d:09:41:ae:bc:d0:97:c1:4b:3a: 26:e3:9f:96:d8:3c:66:0b:10:9a:25:a8:32:d0:ff: f2:d9:ca:d0:2d:4d:0c:19:16:73:e2:90:4f:40:b9: d9:55:a0:ea:0f:92:32:76:62:2e:ae:54:2f:3a:e8: 37:06:33:f7:61:96:ad:fe:2e:9a:9b:df:60:33:10: 4a:5d:a6:ab:d6:ec:13:86:a6:45:39:a1:86:1f:73: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D4:1D:C9:30:3F:C1:98:81:6E:44:7A:C8:B5:B1:57:3A:72:F3:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl X509v3 Authority Key Identifier: keyid:C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 199.85.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dd:12:a7:31:54:66:00:47:d4:cd:29:38:34:82:d6:c4:86: 99:57:20:db:4f:b2:20:7f:1f:b2:2a:37:52:a8:66:6e:63:0d: 7f:68:7c:0b:d0:14:58:d4:13:82:c3:f7:6f:9c:ce:fb:4d:2b: 56:64:bd:93:4b:10:0b:59:b3:ef:33:f8:df:cd:a7:d6:da:81: be:7a:a9:84:69:e9:bd:f3:49:20:27:6f:a4:79:a1:75:9f:92: d5:13:af:2a:b8:36:09:70:3a:46:43:a1:22:15:90:17:d6:16: c2:d8:74:b1:c8:a6:cc:a9:44:21:2b:ae:16:5d:97:21:b3:ef: 36:fc:c9:67:4e:64:2b:b7:95:91:10:4f:8b:0e:f7:2e:c3:7c: 78:62:bd:42:70:e2:4a:58:a5:74:38:a6:aa:87:5c:d2:2d:2a: 99:f9:21:28:e1:b8:4c:42:8c:e6:9b:07:71:df:8b:a9:2d:b6: a3:63:1a:98:38:c1:97:ba:af:6b:98:a4:16:6b:8e:ea:58:ac: a2:97:11:36:56:00:3d:0d:a0:4b:38:5a:ac:27:f6:5d:6f:2d: 92:75:dd:f0:9c:1c:0b:6e:57:84:f2:8e:a5:89:6b:34:c2:f2: 1a:1b:f3:e0:f1:31:30:3f:a8:de:9f:7f:23:4f:e9:76:88:be: 2b:f5:db:da -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtmMed9TT5Ss+C6PqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNh M2IwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YzZlOGE1OTMtMjA0Ni00ZGNiLTg3MTgtZTMzZjQxZDIxNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxod8i4xC78UiELUYnDKUHwTzR+mZk2gkYRs hXi/2fv6e7ojMSF2Nk4iHc/lZ1CG7kdD7II2dycrfDYAF485TDImtVAqbKKVJcnW O/amXPSz8bYjPEFcMAQzeuVvgWKZJNMtPm+eSTe0J2gI7KrXJw7qkNu2dO0S1UMo ktUTXMntucgASWjc78lAGoKhR6Iz0cH5llx0xpIz/QYumN1KOvfcAMHMXOtg1G0J Qa680JfBSzom45+W2DxmCxCaJagy0P/y2crQLU0MGRZz4pBPQLnZVaDqD5IydmIu rlQvOug3BjP3YZat/i6am99gMxBKXaar1uwThqZFOaGGH3P5owIDAQABo4IDYTCC A10wHQYDVR0OBBYEFG/UHckwP8GYgW5Eesi1sVc6cvPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NWRm NzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMDNkNjA5YmItZTBkMi0z ZmZhLTg5OTYtYjJlYWM1NDNmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjVkZjcyYTUtZjBkYS00YzY0LTk1 M2EtMTVhNjJkNWNhM2IwLzY1ZGY3MmE1LWYwZGEtNGM2NC05NTNhLTE1YTYyZDVj YTNiMC5jcmwwHwYDVR0jBBgwFoAUw/ftawHjYye8m7oJ+guJtIPPlyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2 MmQ1Y2EzYjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCrFEEAwQB wEDEAwQAx1X1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAbdEqcxVGYAR9TNKTg0gtbEhplXINtPsiB/H7Iq N1KoZm5jDX9ofAvQFFjUE4LD92+czvtNK1ZkvZNLEAtZs+8z+N/Np9bagb56qYRp 6b3zSSAnb6R5oXWfktUTryq4NglwOkZDoSIVkBfWFsLYdLHIpsypRCErrhZdlyGz 7zb8yWdOZCu3lZEQT4sO9y7DfHhivUJw4kpYpXQ4pqqHXNItKpn5ISjhuExCjOab B3Hfi6kttqNjGpg4wZe6r2uYpBZrjupYrKKXETZWAD0NoEs4Wqwn9l1vLZJ13fCc HAtuV4TyjqWJazTC8hob8+DxMTA/qN6ffyNP6XaIviv129o= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:14 2025 by rpki-client