$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa File: 094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa (raw, json) Hash identifier: mEHV/zQpRWWi6MBZk2U3wC802OywX6GlXmKUrqKIzX8= Subject key identifier: AF:C8:A9:5C:40:A0:66:B8:46:9C:90:31:22:20:1E:36:5E:9F:78:78 Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Certificate serial: 010D0C9F4328584AE196750E9F2193B90D604A40 Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 20283 IP address blocks: 64.90.64.0/19 maxlen: 24 68.170.112.0/20 maxlen: 20 69.168.240.0/20 maxlen: 24 161.199.130.0/24 maxlen: 24 167.94.42.0/23 maxlen: 23 167.94.52.0/23 maxlen: 23 167.94.62.0/23 maxlen: 23 167.94.76.0/23 maxlen: 23 172.87.0.0/20 maxlen: 21 199.59.116.0/22 maxlen: 22 205.214.160.0/20 maxlen: 20 209.212.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:75:0e:9f:21:93:b9:0d:60:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=75690b0d-e291-4566-ab65-b83a4b99e2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:c5:99:fe:ad:c5:a3:ad:e9:7e:de:0a:3e: d8:64:d2:fc:3b:f9:07:20:f5:9d:b3:82:7c:f8:fb: 0d:72:83:fb:9c:ed:fd:26:fb:0a:7d:a7:ad:ca:d0: b4:c0:6f:67:52:16:f1:0b:f1:10:67:46:ed:6e:89: 47:45:b1:f4:ed:06:ec:76:bf:ce:30:85:eb:88:93: f6:b4:48:6d:27:88:32:7a:1a:88:a3:a5:c9:42:eb: a3:31:3a:e8:a2:83:d9:ab:db:07:29:bc:33:62:9c: f3:22:26:6c:b2:08:ec:c7:63:3d:2a:e7:dc:ee:c0: 93:f2:17:9f:c8:f4:e9:3b:17:4a:1f:94:c6:ab:47: 50:ea:a0:c5:82:a9:14:9e:05:d4:57:50:5b:8b:16: 4e:ca:9f:58:91:f3:68:ce:dd:e9:cf:44:54:45:25: ab:b4:13:c9:66:2f:e7:64:50:09:3e:09:97:aa:e4: 9b:fe:bd:93:6a:e8:a1:4d:2e:ee:12:f8:d0:12:09: d4:e7:46:75:28:31:4c:27:c0:ee:85:20:66:3f:d3: 78:5b:60:6b:96:21:cc:1d:e5:ec:e0:33:8c:a8:b4: ad:c5:8a:2c:cc:41:09:05:27:11:0f:06:b7:9e:ac: a7:1b:1a:f6:99:fc:8a:ef:2d:4a:8d:84:fd:54:95: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C8:A9:5C:40:A0:66:B8:46:9C:90:31:22:20:1E:36:5E:9F:78:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/094db3f4-fa7d-36d6-a7cf-6ee8f7ac0cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl X509v3 Authority Key Identifier: keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.212.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:98:8e:51:f7:8c:c0:fe:3e:23:88:c4:3d:b6:60:20:b4:1d: db:a4:6f:4a:cf:6b:07:18:ac:f9:92:2e:12:29:d9:c0:34:d4: 24:a5:2d:10:dd:ca:9c:19:cd:cf:16:14:2a:de:7a:34:02:6b: eb:44:d2:05:89:07:26:38:18:92:37:b9:44:19:87:db:0e:8a: 58:7a:a0:44:65:e9:ab:bc:16:4d:5e:6c:34:9d:16:e4:3f:88: a5:b3:82:e9:22:96:0b:ca:e9:ab:68:91:e6:90:01:3f:00:01: 4c:c2:e6:bb:72:5a:ab:04:58:a3:e6:30:e9:59:98:7c:de:a2: 7c:af:f0:87:e5:8f:4f:81:ab:7b:03:ca:6a:f3:12:44:de:01: eb:14:88:65:8c:ba:bb:a5:4a:90:10:f3:7f:8b:83:be:22:1e: ef:2a:28:1d:84:c4:6a:01:dc:be:0d:de:14:d9:8e:ae:92:aa: 4d:d8:93:3d:ad:cc:07:f9:a0:7b:22:21:6b:71:11:10:74:28: cd:7f:6e:54:32:21:f2:ba:69:dd:04:20:fb:54:07:91:6a:b0: 87:46:bb:38:5d:2b:d6:97:e7:cb:50:e5:cb:e5:c6:df:e2:5a: 01:da:e9:48:24:23:79:1c:4a:7e:a6:05:a4:fb:d3:a9:16:e1: 9f:1d:ca:c4 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWErhlnUOnyGTuQ1gSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlk NDgzMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NzU2OTBiMGQtZTI5MS00NTY2LWFiNjUtYjgzYTRiOTllMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgTFmf6txaOt6X7eCj7YZNL8O/kHIPWds4J8 +PsNcoP7nO39JvsKfaetytC0wG9nUhbxC/EQZ0btbolHRbH07Qbsdr/OMIXriJP2 tEhtJ4gyehqIo6XJQuujMTroooPZq9sHKbwzYpzzIiZssgjsx2M9Kufc7sCT8hef yPTpOxdKH5TGq0dQ6qDFgqkUngXUV1BbixZOyp9YkfNozt3pz0RURSWrtBPJZi/n ZFAJPgmXquSb/r2TauihTS7uEvjQEgnU50Z1KDFMJ8DuhSBmP9N4W2BrliHMHeXs 4DOMqLStxYoszEEJBScRDwa3nqynGxr2mfyK7y1KjYT9VJWAQQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFK/IqVxAoGa4RpyQMSIgHjZen3h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Jm MjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMDk0ZGIzZjQtZmE3ZC0z NmQ2LWE3Y2YtNmVlOGY3YWMwY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNiZjIzNTItODI5Ni00MWZkLWJm ZDUtNTc2YzAyYjlkNDgzL2ZjYmYyMzUyLTgyOTYtNDFmZC1iZmQ1LTU3NmMwMmI5 ZDQ4My5jcmwwHwYDVR0jBBgwFoAUkPsuPGKbkYBkeb/u3LL9c2psWWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZj MDJiOWQ0ODMuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQFQFpAAwQE RKpwAwQERajwAwQAoceCAwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQC xzt0AwQEzdagAwQE0dQgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6YjlH3jMD+PiOIxD22YCC0Hdukb0rP awcYrPmSLhIp2cA01CSlLRDdypwZzc8WFCreejQCa+tE0gWJByY4GJI3uUQZh9sO ilh6oERl6au8Fk1ebDSdFuQ/iKWzgukilgvK6atokeaQAT8AAUzC5rtyWqsEWKPm MOlZmHzeonyv8Iflj0+Bq3sDymrzEkTeAesUiGWMurulSpAQ83+Lg74iHu8qKB2E xGoB3L4N3hTZjq6Sqk3Ykz2tzAf5oHsiIWtxERB0KM1/blQyIfK6ad0EIPtUB5Fq sIdGuzhdK9aX58tQ5cvlxt/iWgHa6UgkI3kcSn6mBaT706kW4Z8dysQ= -----END CERTIFICATE-----Generated at Wed Aug 20 21:22:25 2025 by rpki-client