$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa File: e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa (raw, json) Hash identifier: wFAXm+htFtjTXo3Us8pQMUh45xl9uVatqbR/DMjnDE4= Subject key identifier: E3:3E:E2:D2:F0:6E:96:F3:8F:A1:D6:76:BF:51:AD:05:E2:63:7C:E6 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584B536C72F0C8F21902AA243680 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa Signing time: Fri 26 Sep 2025 14:38:51 +0000 ROA not before: Fri 26 Sep 2025 14:38:51 +0000 ROA not after: Thu 25 Dec 2025 15:38:51 +0000 asID: 53830 IP address blocks: 74.123.84.0/22 maxlen: 24 162.251.88.0/22 maxlen: 24 192.81.64.0/23 maxlen: 24 192.135.200.0/22 maxlen: 24 192.199.178.0/23 maxlen: 24 192.234.255.0/24 maxlen: 24 199.66.132.0/22 maxlen: 24 199.119.104.0/21 maxlen: 24 199.188.152.0/22 maxlen: 24 204.13.180.0/22 maxlen: 24 208.68.132.0/22 maxlen: 24 216.71.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:6c:72:f0:c8:f2:19:02:aa:24:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Sep 26 14:38:51 2025 GMT Not After : Dec 25 15:38:51 2025 GMT Subject: CN=702617b6-1bc3-4f46-a802-caf854ffc3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:30:2c:3f:49:6b:5b:51:84:76:21:54:ed: 40:b7:03:b3:e1:14:5f:7f:d7:85:1f:00:b8:4f:77: c1:66:d1:43:8e:c5:fc:3f:b6:d0:b0:87:88:cd:86: 8d:83:46:e7:5e:c5:94:46:f4:7f:27:4c:7e:4a:c6: d6:73:97:41:e3:e3:04:af:24:2f:6f:78:03:6b:01: 29:8b:09:3f:2d:ff:cd:7f:f5:a8:6a:3b:f7:38:da: a0:14:d9:60:6a:28:7f:60:f6:2d:11:3b:a4:30:9e: 98:ad:21:99:07:24:c2:a5:df:16:75:7a:38:0d:3b: 99:f3:da:3e:ff:dc:53:7c:8e:a0:e6:6b:2e:0c:f2: 97:6c:97:70:b2:5d:29:e1:dc:9f:aa:2b:75:11:04: 40:78:6d:00:a0:27:bd:cb:e7:38:f7:38:ed:55:8a: a1:03:46:22:e0:2b:3f:dc:0e:83:b1:90:4e:18:7d: 00:02:d9:a8:aa:1d:00:d2:f0:1a:e1:db:69:85:31: 61:77:16:36:d2:b7:e9:ab:52:41:8e:fd:f2:32:a3: da:8a:c7:ce:0f:89:a4:c4:87:f9:a4:fa:e4:d6:0f: 84:c9:7a:a6:77:db:20:40:bd:ac:76:7a:a3:3d:4d: 3d:d6:ff:4e:aa:1d:27:92:f8:7e:8e:92:f1:b1:6a: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:E2:D2:F0:6E:96:F3:8F:A1:D6:76:BF:51:AD:05:E2:63:7C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/e5ba450e-22a7-3fa3-9c36-a634b08a7158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 74.123.84.0/22 162.251.88.0/22 192.81.64.0/23 192.135.200.0/22 192.199.178.0/23 192.234.255.0/24 199.66.132.0/22 199.119.104.0/21 199.188.152.0/22 204.13.180.0/22 208.68.132.0/22 216.71.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:db:77:1e:16:28:e9:73:5a:c3:8e:51:15:17:ae:3c:85:ba: bf:a8:1a:ac:39:aa:9b:61:d1:48:26:36:29:fa:b3:51:95:aa: 4e:7e:7d:b5:eb:70:f3:49:2c:cf:bb:2c:8d:69:57:6f:63:02: 4a:a6:2a:ac:33:e6:ef:0c:91:d0:1c:d2:cb:f0:36:cb:53:32: 11:f9:22:6f:f3:30:32:e5:ef:78:6f:ff:92:18:f0:f1:7a:4e: 09:9d:60:61:ad:70:60:10:d4:82:1f:f2:6a:af:54:0e:a0:8e: 7f:ba:da:b3:52:71:0b:18:4e:5f:7a:62:8f:61:ab:94:a5:06: 36:80:ba:7e:23:d8:c2:17:eb:f1:fa:15:ad:87:d3:cf:87:42: cc:8e:9a:46:45:c8:f7:b8:a3:bd:01:48:40:f9:16:3b:e5:c6: 4e:8b:6d:9b:85:34:6f:a2:e4:db:85:a6:19:2a:b6:92:e0:7b: 55:55:be:27:a8:3d:ac:33:4b:bc:78:47:0a:6d:cf:bf:83:0f: 4a:97:d3:64:28:e8:26:ad:2d:18:93:a9:dd:8b:bd:d4:02:e1: 38:0f:17:8a:7a:d4:84:5c:f3:4f:fd:b0:d8:e4:4e:6e:f1:49: 3f:52:3c:3b:3c:e2:d3:d5:52:fc:51:fb:16:0d:66:2d:6b:fa: f5:7c:ae:21 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEtTbHLwyPIZAqokNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI1MDkyNjE0Mzg1MVoXDTI1MTIyNTE1Mzg1MVowLzEtMCsGA1UEAxMk NzAyNjE3YjYtMWJjMy00ZjQ2LWE4MDItY2FmODU0ZmZjM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWYwLD9Ja1tRhHYhVO1AtwOz4RRff9eFHwC4 T3fBZtFDjsX8P7bQsIeIzYaNg0bnXsWURvR/J0x+SsbWc5dB4+MEryQvb3gDawEp iwk/Lf/Nf/Woajv3ONqgFNlgaih/YPYtETukMJ6YrSGZByTCpd8WdXo4DTuZ89o+ /9xTfI6g5msuDPKXbJdwsl0p4dyfqit1EQRAeG0AoCe9y+c49zjtVYqhA0Yi4Cs/ 3A6DsZBOGH0AAtmoqh0A0vAa4dtphTFhdxY20rfpq1JBjv3yMqPaisfOD4mkxIf5 pPrk1g+EyXqmd9sgQL2sdnqjPU091v9Oqh0nkvh+jpLxsWqoZwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFOM+4tLwbpbzj6HWdr9RrQXiY3zmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvZTViYTQ1MGUtMjJhNy0z ZmEzLTljMzYtYTYzNGIwOGE3MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCSntUAwQC ovtYAwQBwFFAAwQCwIfIAwQBwMeyAwQAwOr/AwQCx0KEAwQDx3doAwQCx7yYAwQC zA20AwQC0ESEAwQB2Ee+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJbbdx4WKOlzWsOOURUXrjyFur+oGqw5 qpth0UgmNin6s1GVqk5+fbXrcPNJLM+7LI1pV29jAkqmKqwz5u8MkdAc0svwNstT MhH5Im/zMDLl73hv/5IY8PF6TgmdYGGtcGAQ1IIf8mqvVA6gjn+62rNScQsYTl96 Yo9hq5SlBjaAun4j2MIX6/H6Fa2H08+HQsyOmkZFyPe4o70BSED5Fjvlxk6LbZuF NG+i5NuFphkqtpLge1VVvieoPawzS7x4Rwptz7+DD0qX02Qo6CatLRiTqd2LvdQC 4TgPF4p61IRc80/9sNjkTm7xST9SPDs84tPVUvxR+xYNZi1r+vV8riE= -----END CERTIFICATE-----Generated at Wed Oct 8 19:40:01 2025 by rpki-client