$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa File: aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa (raw, json) Hash identifier: /LNjxKbqvQrUi9TtL9CdEKoEJ5w9Xn8xXIZ8M2Rzs4Q= Subject key identifier: F5:B3:F6:9A:92:79:44:03:10:C6:92:68:60:44:43:2F:85:9A:74:31 Certificate issuer: /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Certificate serial: 010D0C9F4328584B715CA1DF480B640E80D1F720 Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 17185 IP address blocks: 74.115.168.0/21 maxlen: 24 173.195.144.0/20 maxlen: 24 199.16.48.0/21 maxlen: 24 208.72.236.0/22 maxlen: 24 208.82.128.0/22 maxlen: 24 208.88.48.0/21 maxlen: 24 2604:bf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a1:df:48:0b:64:0e:80:d1:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2f2d21bf-43bf-474c-851a-d156a7b5fb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:02:d2:f1:06:76:ec:12:88:6c:73:fe:43: 14:84:c6:b3:f7:fe:c2:c5:49:f2:4b:ac:c5:f1:14: 7e:55:78:f9:46:ba:ff:2a:7e:9a:71:21:b7:b9:cb: ad:58:57:1c:08:f3:c1:d9:d7:55:8a:9d:e9:95:2b: 7d:2c:87:db:f2:18:20:9b:f0:9e:83:dc:e3:98:7d: e1:dd:68:f1:0d:5c:c4:19:71:e2:6a:12:f2:7b:ad: a7:1d:00:06:56:00:a2:c7:a1:5d:85:b1:91:60:88: 23:5e:06:c5:64:6e:c8:8d:b8:a9:fd:c4:92:df:ac: 9d:b9:a5:f8:77:70:c3:89:bd:9d:07:4e:01:15:7d: 02:0c:ae:f4:b3:ad:ff:54:ba:d4:c1:12:23:f6:21: a4:e5:93:e0:9a:bf:83:53:86:0c:75:53:75:7f:87: d9:9f:49:03:b4:3b:30:04:8e:59:b1:e5:64:fc:6d: 50:e9:4b:c0:5b:89:d3:0d:e1:57:96:db:58:6a:1b: 38:5a:d1:1b:ea:b7:5e:01:83:fb:03:54:51:8b:57: 20:73:b7:5a:6b:e5:f7:56:90:19:b8:80:7d:42:6e: 9a:fe:7f:77:34:f1:fd:ce:16:02:01:80:25:2e:8e: 9e:bd:8e:d1:42:54:33:68:38:6b:fe:aa:20:1b:90: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B3:F6:9A:92:79:44:03:10:C6:92:68:60:44:43:2F:85:9A:74:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/aacfb0a5-efcd-3c8f-b9c3-b137882e9b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl X509v3 Authority Key Identifier: keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer sbgp-ipAddrBlock: critical IPv4: 74.115.168.0/21 173.195.144.0/20 199.16.48.0/21 208.72.236.0/22 208.82.128.0/22 208.88.48.0/21 IPv6: 2604:bf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a3:a7:3b:4d:b0:ab:9d:0a:aa:7a:6b:9b:b2:b6:c3:7c:5a: ad:08:10:db:00:80:b0:ae:32:37:9a:35:7d:26:46:0d:76:96: 6e:1f:ef:3d:81:55:5c:cb:0d:11:12:e5:6d:10:83:81:02:fd: 28:0c:bc:f2:d2:07:d1:2d:16:fb:12:f8:b2:6e:68:7b:3c:a0: a5:37:b5:c4:18:ae:2a:89:ec:fe:c1:b0:9b:41:af:a7:33:b8: f5:c0:4c:31:08:f9:cc:60:25:f7:39:e4:c6:e6:eb:54:8d:6b: 9a:24:be:39:cb:3b:26:02:3b:d3:c8:df:f4:2f:d0:6e:ec:5e: 03:89:aa:90:4f:45:ce:ca:c4:68:b1:4e:32:96:c2:8d:d8:cc: 6f:ab:7f:a2:4e:04:a3:c7:c2:35:dc:7a:61:c5:1a:ab:62:66: 82:0c:92:36:39:4f:25:1f:88:31:4c:f0:41:9c:bb:df:8e:eb: ab:a8:8b:ca:ec:1b:00:b1:9d:45:da:f6:cb:2f:5e:8d:e4:82: a0:db:95:3b:6a:13:77:82:4b:29:9c:78:ba:a2:2e:99:f8:5e: 21:db:11:42:c7:c4:25:93:30:06:ef:6d:13:a6:79:f4:c7:9c: 7c:e3:b9:f4:0f:5a:a2:18:54:88:d8:2b:de:7d:9f:bd:91:71: 4e:4e:8c:97 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEtxXKHfSAtkDoDR9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhl ZDFjMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmYyZDIxYmYtNDNiZi00NzRjLTg1MWEtZDE1NmE3YjVmYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLkC0vEGduwSiGxz/kMUhMaz9/7CxUnyS6zF 8RR+VXj5Rrr/Kn6acSG3ucutWFccCPPB2ddVip3plSt9LIfb8hggm/Ceg9zjmH3h 3WjxDVzEGXHiahLye62nHQAGVgCix6FdhbGRYIgjXgbFZG7Ijbip/cSS36yduaX4 d3DDib2dB04BFX0CDK70s63/VLrUwRIj9iGk5ZPgmr+DU4YMdVN1f4fZn0kDtDsw BI5ZseVk/G1Q6UvAW4nTDeFXlttYahs4WtEb6rdeAYP7A1RRi1cgc7daa+X3VpAZ uIB9Qm6a/n93NPH9zhYCAYAlLo6evY7RQlQzaDhr/qogG5AkAwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFPWz9pqSeUQDEMaSaGBEQy+FmnQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4 Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvYWFjZmIwYTUtZWZjZC0z YzhmLWI5YzMtYjEzNzg4MmU5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTZlOGNhMGItMGY1ZS00MDY3LWFj ZDctMmJiYjQwMDhlZDFjLzE2ZThjYTBiLTBmNWUtNDA2Ny1hY2Q3LTJiYmI0MDA4 ZWQxYy5jcmwwHwYDVR0jBBgwFoAUT6kz7dxBnGP6bwm5Ex/lf45BiBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJi NDAwOGVkMWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDSnOoAwQE rcOQAwQDxxAwAwQC0EjsAwQC0FKAAwQD0FgwMA0EAgACMAcDBQAmBL8AMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAI2jpztNsKudCqp6a5uytsN8Wq0IENsAgLCuMjeaNX0mRg12lm4f7z2BVVzL DRES5W0Qg4EC/SgMvPLSB9EtFvsS+LJuaHs8oKU3tcQYriqJ7P7BsJtBr6czuPXA TDEI+cxgJfc55Mbm61SNa5okvjnLOyYCO9PI3/Qv0G7sXgOJqpBPRc7KxGixTjKW wo3YzG+rf6JOBKPHwjXcemHFGqtiZoIMkjY5TyUfiDFM8EGcu9+O66uoi8rsGwCx nUXa9ssvXo3kgqDblTtqE3eCSymceLqiLpn4XiHbEULHxCWTMAbvbROmefTHnHzj ufQPWqIYVIjYK959n72RcU5OjJc= -----END CERTIFICATE-----Generated at Sun Oct 26 00:04:01 2025 by rpki-client