$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa File: cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json) Hash identifier: y9OxXJ/JiKsNWX0fUSHGrS1P2J9/9jskqnnW0nR6PhM= Subject key identifier: B4:9E:ED:EE:C9:22:14:6F:CE:A2:95:6D:12:10:51:41:39:8F:1C:4A Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584AE89130048D6533735F0E9900 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 21928 IP address blocks: 24.221.0.0/16 maxlen: 24 52.144.16.0/21 maxlen: 24 75.122.0.0/15 maxlen: 24 104.152.20.0/22 maxlen: 24 173.4.0.0/14 maxlen: 24 174.141.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:30:04:8d:65:33:73:5f:0e:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=cd78e19a-3ab6-4287-8665-cfd04f3932bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:1b:9f:e8:b9:6b:0a:c9:6f:a7:46:4e:b4: f9:38:c0:d4:49:2e:58:7c:d3:f4:d0:4d:b1:05:46: 9d:5c:d3:74:aa:17:95:8e:ab:e8:6f:82:ff:34:3e: 04:a4:f9:e5:45:2b:af:ae:70:9c:64:60:92:00:b5: dc:a2:6b:ec:8b:61:ea:08:e3:21:1f:6d:f4:f0:e0: 85:6b:7c:e5:7c:e0:36:c2:6b:53:41:64:06:f3:31: 24:59:1c:41:f8:dc:3c:dd:1e:8c:d5:42:92:fe:49: 47:20:c7:23:bf:9e:85:71:1e:90:19:82:60:e3:1f: 12:39:61:3c:b9:76:25:05:d0:10:cf:5f:25:a0:c5: 73:1c:d6:52:bb:b6:37:e1:b0:60:62:53:3f:d1:a5: 37:3c:ac:d8:c7:93:20:3f:20:d7:34:95:ba:5f:af: dd:06:16:fe:ad:a5:52:32:98:57:2f:d5:4a:31:fd: 36:ab:72:f5:15:9b:5f:f5:a7:7b:6a:50:5b:3c:d3: e4:eb:b0:ed:25:d1:43:9a:29:aa:6b:a6:42:1f:50: 39:9c:d5:23:a7:d6:ff:54:92:ba:13:1d:90:88:78: 06:37:74:81:9d:e8:a5:6c:f1:4f:ea:e0:ab:ae:ce: 83:f3:ed:5d:2a:55:b5:3b:e5:20:9f:46:af:c3:ec: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:ED:EE:C9:22:14:6F:CE:A2:95:6D:12:10:51:41:39:8F:1C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 24.221.0.0/16 52.144.16.0/21 75.122.0.0/15 104.152.20.0/22 173.4.0.0/14 174.141.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0d:f8:17:57:8c:0a:9f:d9:fa:80:58:be:b2:5e:26:04:eb: 71:43:fc:c7:70:32:1b:f3:bf:f4:4a:b2:e1:27:b9:8c:fd:16: 94:4e:a4:db:6a:b2:69:45:4d:59:f5:86:c5:16:eb:2a:fe:ec: 17:59:35:7e:47:8d:10:0e:32:39:3c:24:1d:98:dc:f2:35:22: f4:a9:88:20:c0:6d:d1:3f:42:e9:c0:4c:36:c9:fd:a5:36:70: 46:01:06:80:4e:bc:f1:aa:de:ee:3f:95:2c:0b:3b:1d:ea:dc: cb:ac:32:0e:04:cc:c2:84:c0:40:48:a7:df:2f:6f:52:dd:cb: a6:bf:d0:ff:37:f5:ad:cb:63:b5:7b:55:d1:50:de:4c:49:c3: 8e:42:be:6f:ab:4b:5d:04:42:0a:e4:4c:ea:6e:da:01:ab:4a: da:96:11:1b:5e:b6:4a:0f:3c:9e:28:a0:15:d7:4b:8d:f5:12: 5d:b3:69:0f:21:c4:14:e8:d3:35:f6:71:f6:11:44:4e:fe:9a: 14:b6:3d:fd:1f:62:4d:67:52:84:2a:0c:52:df:83:45:04:35: fb:09:1b:03:3d:a6:ff:73:e9:af:81:06:57:25:76:4c:a6:82: 68:00:14:74:35:59:df:b8:df:63:20:b1:9c:d9:6f:10:07:42: ab:7e:af:68 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWErokTAEjWUzc18OmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk Y2Q3OGUxOWEtM2FiNi00Mjg3LTg2NjUtY2ZkMDRmMzkzMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8gbn+i5awrJb6dGTrT5OMDUSS5YfNP00E2x BUadXNN0qheVjqvob4L/ND4EpPnlRSuvrnCcZGCSALXcomvsi2HqCOMhH2308OCF a3zlfOA2wmtTQWQG8zEkWRxB+Nw83R6M1UKS/klHIMcjv56FcR6QGYJg4x8SOWE8 uXYlBdAQz18loMVzHNZSu7Y34bBgYlM/0aU3PKzYx5MgPyDXNJW6X6/dBhb+raVS MphXL9VKMf02q3L1FZtf9ad7alBbPNPk67DtJdFDmimqa6ZCH1A5nNUjp9b/VJK6 Ex2QiHgGN3SBneilbPFP6uCrrs6D8+1dKlW1O+Ugn0avw+yHVwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLSe7e7JIhRvzqKVbRIQUUE5jxxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2M5NDBmN2QtMTEwYy0z NzRjLTlmYmQtNjE2ZDZmOGEwZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAGN0DBAM0 kBADAwFLegMEAmiYFAMDAq0EAwQEro3QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAYN+BdXjAqf2fqAWL6y XiYE63FD/MdwMhvzv/RKsuEnuYz9FpROpNtqsmlFTVn1hsUW6yr+7BdZNX5HjRAO Mjk8JB2Y3PI1IvSpiCDAbdE/QunATDbJ/aU2cEYBBoBOvPGq3u4/lSwLOx3q3Mus Mg4EzMKEwEBIp98vb1Ldy6a/0P839a3LY7V7VdFQ3kxJw45Cvm+rS10EQgrkTOpu 2gGrStqWERtetkoPPJ4ooBXXS431El2zaQ8hxBTo0zX2cfYRRE7+mhS2Pf0fYk1n UoQqDFLfg0UENfsJGwM9pv9z6a+BBlcldkymgmgAFHQ1Wd+432MgsZzZbxAHQqt+ r2g= -----END CERTIFICATE-----Generated at Mon Nov 3 21:57:45 2025 by rpki-client