$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa File: aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (raw, json) Hash identifier: nxEaUyfTAFtx27n+Vsn61Au519AdSGgN6smW7FSJvTA= Subject key identifier: 15:59:E0:1A:5B:8B:CF:33:68:D2:02:39:30:C6:59:75:42:7E:6C:C7 Certificate issuer: /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Certificate serial: 010D0C9F4328584B1C36BF5E8B11133AEFE679C0 Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 11059 IP address blocks: 64.234.228.0/22 maxlen: 22 136.175.64.0/23 maxlen: 23 199.202.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:bf:5e:8b:11:13:3a:ef:e6:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=fc253e25-f2c9-4d14-8351-e986facedf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:2b:dd:8d:d3:00:dc:ca:41:82:1a:69:cd: 48:0c:f7:0d:d1:8f:a6:7c:37:a8:e3:2f:ac:c0:05: 78:a3:62:48:e4:cc:00:59:40:fc:47:cc:1a:79:6b: 49:5b:75:8a:96:4a:d3:85:ab:00:33:06:54:76:f7: 8b:ba:ca:b2:12:25:a0:64:5c:a2:99:f2:61:69:2b: e0:ed:ec:58:fc:c0:76:81:46:a8:4c:3e:73:59:24: ac:5a:4e:1f:68:0d:c3:82:8d:a7:4d:ca:a0:87:e5: 81:23:1d:98:97:17:c9:07:b9:c4:8f:de:76:a9:ac: 03:df:d2:ec:c8:7a:85:b7:b6:fb:e2:c3:3e:fd:44: ce:26:2b:dd:f7:75:36:02:05:18:d9:8a:5b:08:41: 8c:d7:1b:48:77:56:42:61:de:18:28:6b:ed:a0:fb: e9:57:b6:2f:ea:bf:71:7b:49:31:3c:41:38:44:63: 74:a7:27:b6:33:20:62:db:3e:bc:f8:f5:65:31:83: 8c:0f:6c:5d:5e:3e:c5:f6:51:c2:2a:ab:90:2c:52: 8a:34:24:7b:ce:ad:28:6a:f3:af:ed:89:f9:89:77: 3c:20:aa:59:8d:a1:c0:30:28:ec:41:82:fe:d7:66: 43:f9:ca:91:ab:7d:b7:0e:7e:b0:6a:e2:90:97:c7: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:E0:1A:5B:8B:CF:33:68:D2:02:39:30:C6:59:75:42:7E:6C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl X509v3 Authority Key Identifier: keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer sbgp-ipAddrBlock: critical IPv4: 64.234.228.0/22 136.175.64.0/23 199.202.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:03:ea:bc:49:46:54:79:0e:f4:51:0e:a3:0d:d8:14:b2:c8: 97:d1:05:74:80:5f:0e:36:64:90:84:df:ba:fe:67:83:22:2d: b9:a8:80:ee:8e:b0:68:90:f4:aa:d9:83:46:1d:c9:0d:c4:8f: 36:f3:12:e4:ba:0f:ad:f4:d2:12:84:ea:86:a5:d5:63:8d:a1: fe:4b:67:9b:f4:a2:14:92:7e:bc:49:a8:4a:8c:a4:45:11:be: b7:93:22:d7:38:e6:5c:75:a9:7c:ad:9c:78:03:20:da:7e:99: 9e:a2:8d:7b:27:98:04:da:08:9a:a6:57:fb:9f:4e:55:eb:4b: a3:4e:74:4f:83:d7:ba:5a:e4:ee:3c:10:8b:9f:a2:1a:13:0e: 6c:0d:11:c3:8f:de:68:41:ee:57:e2:90:6a:ce:49:db:31:9a: c8:e6:a4:64:05:fd:e5:09:67:58:69:79:7a:33:8b:c2:d4:99: 37:53:34:59:18:11:70:45:48:46:50:3b:f6:a2:6e:23:41:ea: cd:5d:98:47:6f:ca:b4:74:f7:a9:63:1b:ac:b3:2c:b6:64:b2: 4e:6e:5d:6a:b5:c2:0a:f6:e7:15:91:19:65:db:f4:e2:a1:d1: 2e:43:19:dd:15:ae:cb:f9:7b:ea:5c:77:61:94:7e:f6:13:af: 3b:d1:76:4e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEscNr9eixETOu/mecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll ZGUzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmMyNTNlMjUtZjJjOS00ZDE0LTgzNTEtZTk4NmZhY2VkZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXYr3Y3TANzKQYIaac1IDPcN0Y+mfDeo4y+s wAV4o2JI5MwAWUD8R8waeWtJW3WKlkrThasAMwZUdveLusqyEiWgZFyimfJhaSvg 7exY/MB2gUaoTD5zWSSsWk4faA3Dgo2nTcqgh+WBIx2YlxfJB7nEj952qawD39Ls yHqFt7b74sM+/UTOJivd93U2AgUY2YpbCEGM1xtId1ZCYd4YKGvtoPvpV7Yv6r9x e0kxPEE4RGN0pye2MyBi2z68+PVlMYOMD2xdXj7F9lHCKquQLFKKNCR7zq0oavOv 7Yn5iXc8IKpZjaHAMCjsQYL+12ZD+cqRq323Dn6wauKQl8f2xQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBVZ4Bpbi88zaNICOTDGWXVCfmzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvYWFjZGJhYTYtZWM2Zi0z YTljLWJkOWQtYjE3ODVmYmE4MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1 YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5 ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl YzBhOWVkZTMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQOrkAwQB iK9AAwQCx8rgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAQD6rxJRlR5DvRRDqMN2BSyyJfRBXSAXw42ZJCE 37r+Z4MiLbmogO6OsGiQ9KrZg0YdyQ3EjzbzEuS6D6300hKE6oal1WONof5LZ5v0 ohSSfrxJqEqMpEURvreTItc45lx1qXytnHgDINp+mZ6ijXsnmATaCJqmV/ufTlXr S6NOdE+D17pa5O48EIufohoTDmwNEcOP3mhB7lfikGrOSdsxmsjmpGQF/eUJZ1hp eXozi8LUmTdTNFkYEXBFSEZQO/aibiNB6s1dmEdvyrR096ljG6yzLLZksk5uXWq1 wgr25xWRGWXb9OKh0S5DGd0Vrsv5e+pcd2GUfvYTrzvRdk4= -----END CERTIFICATE-----Generated at Sat Oct 11 15:51:35 2025 by rpki-client