$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa File: cd9eef01-ff5f-3461-982d-ae650cfc798a.roa (raw, json) Hash identifier: SP1Cw2qRne4EnbT1cVL3i7HKDsz5tO7rWnJHFqsBj3I= Subject key identifier: F9:8C:16:DD:69:03:8E:D9:2A:7B:27:68:5F:D5:39:EA:0F:2B:9C:63 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584BA0D25E49AAB141DB51F8F680 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 46455 IP address blocks: 74.214.0.0/20 maxlen: 24 143.223.224.0/20 maxlen: 24 146.12.128.0/19 maxlen: 24 146.12.192.0/20 maxlen: 24 158.247.32.0/20 maxlen: 24 167.150.64.0/21 maxlen: 24 195.85.64.0/23 maxlen: 24 195.85.118.0/23 maxlen: 24 206.82.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5e:49:aa:b1:41:db:51:f8:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=c52e7156-3f3d-4773-b5be-3e5ec08e125c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:06:b2:79:fa:12:99:f9:b4:17:4b:39:cc:4d: 54:78:bf:b7:aa:4d:b1:90:c4:0f:73:24:1d:a2:3e: 21:ab:81:14:d7:9c:e7:56:7a:49:89:79:7c:08:c5: f3:6f:c7:d2:88:07:cb:83:3c:02:f4:db:94:34:ce: 04:11:1a:4d:46:1e:93:ec:c0:e0:e3:39:0d:72:34: b0:7b:9f:ae:e8:29:0a:88:66:8d:5a:03:b0:f6:b8: e7:24:60:ef:85:21:ff:91:4b:4c:e3:84:9b:b1:28: 02:40:dc:0a:6c:96:d8:bf:ec:58:2b:f4:1a:c4:da: f2:ed:15:14:4b:29:8a:b9:65:36:62:0a:5e:c5:cb: 1c:ff:d1:98:07:b2:2b:94:ba:47:6d:5f:0b:6e:c8: e8:21:7a:8c:a9:2e:80:a5:90:66:8d:ae:8d:82:14: 9e:40:d5:50:c4:aa:04:08:b7:10:41:4d:94:1e:f1: e5:9c:a6:27:d1:7f:1d:c4:35:c6:ab:79:5d:f3:74: 07:54:00:bd:e3:56:17:80:9b:b3:e0:c2:70:52:d2: 3f:4f:94:fd:84:6f:5b:2f:d1:89:e5:f5:b3:50:84: b6:6d:71:a8:35:15:94:13:2f:74:60:5c:c8:2d:99: 92:be:91:8d:6f:e5:ee:e6:0a:8e:fa:cc:24:bb:5d: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:16:DD:69:03:8E:D9:2A:7B:27:68:5F:D5:39:EA:0F:2B:9C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/cd9eef01-ff5f-3461-982d-ae650cfc798a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 74.214.0.0/20 143.223.224.0/20 146.12.128.0/19 146.12.192.0/20 158.247.32.0/20 167.150.64.0/21 195.85.64.0/23 195.85.118.0/23 206.82.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:11:fb:d5:a8:c0:af:af:b2:bf:bc:67:27:bd:2a:5b:43:15: 33:b2:a3:29:b3:7d:f2:fd:1b:f6:b0:36:66:6e:88:a6:db:0c: be:1d:1f:6c:53:94:41:24:ac:72:de:46:22:50:57:ed:0b:7e: 9d:4e:e5:a5:36:8d:0c:43:7a:81:ff:ba:fe:1b:e0:f3:02:c4: 44:1f:22:25:91:9a:c3:b3:4a:fa:a9:be:bf:3c:58:ec:ea:d9: 12:9b:a5:50:05:9d:89:80:db:cb:7b:b1:86:d9:09:5e:52:36: 8e:8d:13:44:69:7c:22:d2:6d:ed:45:40:33:ac:55:b3:54:e9: 75:30:ab:c9:3b:e8:8a:08:ec:84:c7:12:88:94:ad:83:22:bb: ae:47:17:f3:d6:8b:97:ae:61:5c:42:61:a4:88:a4:6f:39:2b: 91:85:4a:e3:ac:4f:fd:01:e0:53:6b:99:76:e2:06:e6:dd:36: f1:1e:e6:e6:6b:7d:57:c4:b2:92:c9:39:e6:0b:dd:6c:20:ed: 22:f4:5d:d7:98:54:86:d2:94:c6:68:69:96:2e:ac:2f:1c:12: 07:96:d0:df:0d:e2:98:fc:eb:8b:22:18:9e:bc:ee:b4:ca:cf: 47:de:1c:1a:a5:7c:3c:e2:ab:24:0a:9c:fb:d4:6c:9d:65:fc: dc:9a:00:f5 -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEug0l5JqrFB21H49oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YzUyZTcxNTYtM2YzZC00NzczLWI1YmUtM2U1ZWMwOGUxMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigayefoSmfm0F0s5zE1UeL+3qk2xkMQPcyQd oj4hq4EU15znVnpJiXl8CMXzb8fSiAfLgzwC9NuUNM4EERpNRh6T7MDg4zkNcjSw e5+u6CkKiGaNWgOw9rjnJGDvhSH/kUtM44SbsSgCQNwKbJbYv+xYK/QaxNry7RUU SymKuWU2Ygpexcsc/9GYB7IrlLpHbV8LbsjoIXqMqS6ApZBmja6NghSeQNVQxKoE CLcQQU2UHvHlnKYn0X8dxDXGq3ld83QHVAC941YXgJuz4MJwUtI/T5T9hG9bL9GJ 5fWzUIS2bXGoNRWUEy90YFzILZmSvpGNb+Xu5gqO+swku13aywIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFPmMFt1pA47ZKnsnaF/VOeoPK5xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvY2Q5ZWVmMDEtZmY1Zi0z NDYxLTk4MmQtYWU2NTBjZmM3OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQEStYAAwQE j9/gAwQFkgyAAwQEkgzAAwQEnvcgAwQDp5ZAAwQBw1VAAwQBw1V2AwQDzlJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFER+9WowK+vsr+8Zye9KltDFTOyoymzffL9G/awNmZuiKbbDL4dH2xT lEEkrHLeRiJQV+0Lfp1O5aU2jQxDeoH/uv4b4PMCxEQfIiWRmsOzSvqpvr88WOzq 2RKbpVAFnYmA28t7sYbZCV5SNo6NE0RpfCLSbe1FQDOsVbNU6XUwq8k76IoI7ITH EoiUrYMiu65HF/PWi5euYVxCYaSIpG85K5GFSuOsT/0B4FNrmXbiBubdNvEe5uZr fVfEspLJOeYL3Wwg7SL0XdeYVIbSlMZoaZYurC8cEgeW0N8N4pj864siGJ687rTK z0feHBqlfDziqyQKnPvUbJ1l/NyaAPU= -----END CERTIFICATE-----Generated at Tue Nov 4 04:04:25 2025 by rpki-client