$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa File: 0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa (raw, json) Hash identifier: GKxlj3wgyK/7V7TGNCZIeC0y6SKonAs8WjSi47lP4So= Subject key identifier: 11:32:6A:01:A3:02:42:25:99:84:4A:CF:9E:D3:F8:65:07:A0:74:0F Certificate issuer: /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Certificate serial: 010D0C9F4328584AF95146FB639F61820C909D80 Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 11904 IP address blocks: 209.25.240.0/20 maxlen: 20 209.25.240.0/21 maxlen: 21 209.25.240.0/22 maxlen: 22 209.25.244.0/22 maxlen: 22 209.25.248.0/21 maxlen: 21 209.25.248.0/22 maxlen: 22 209.25.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:46:fb:63:9f:61:82:0c:90:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=840d11e0-2688-493b-aca8-e57f308de002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:49:34:9a:aa:62:e6:e2:5c:9c:97:52:24: cb:ff:62:d7:19:75:f4:81:57:b3:99:aa:1d:94:e1: 8e:6d:45:07:9f:cc:66:4c:c4:16:a0:06:91:f4:ac: 10:03:97:df:3c:31:6f:88:d5:98:36:70:99:c7:bc: 45:d3:91:e9:2c:1b:4d:e9:8e:c6:5f:81:ac:38:aa: 90:73:7d:ba:05:b9:03:c6:98:2e:af:d2:fd:a4:6c: 02:5b:38:3e:80:f8:24:d0:8c:2d:55:d3:95:8c:af: 01:82:dc:70:a3:bb:cc:c5:0f:5d:a7:0e:93:d5:3a: e8:bb:1a:03:96:d9:d5:82:c7:df:eb:a3:a5:cb:f6: a5:68:a3:4c:8e:b0:5d:b6:fd:be:58:7e:ad:2d:16: dd:65:25:d7:57:e5:16:a1:f0:9e:ce:9f:95:1f:e7: 3c:c8:69:a1:7c:95:1c:b9:c1:aa:60:68:d3:b2:22: 78:83:5e:03:da:12:80:49:66:e1:1c:d7:61:c1:05: bf:22:58:f5:82:b4:dc:d4:43:c6:0c:c1:c9:5f:1c: b6:33:8b:8f:c6:6b:69:74:a7:6d:8c:b7:48:4f:24: 36:1c:ef:04:2d:b6:8b:c5:8e:5e:53:fc:9d:cd:33: 83:60:08:ab:2c:0b:e8:6b:27:6d:d8:97:17:6d:c4: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:6A:01:A3:02:42:25:99:84:4A:CF:9E:D3:F8:65:07:A0:74:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/0f657c66-f35f-30b9-a1fe-a8dd3371b340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl X509v3 Authority Key Identifier: keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer sbgp-ipAddrBlock: critical IPv4: 209.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bc:a5:d3:84:13:22:e6:bf:54:ec:1b:fa:b1:43:3d:99:f7: 6c:c3:5b:3c:d3:24:fd:b8:74:28:e9:bb:5c:52:d0:8c:38:68: d7:04:52:e0:23:ab:2e:2b:c5:41:56:aa:b7:55:46:b2:2c:e6: 8e:23:30:5b:5a:08:97:e1:db:63:b7:02:19:a0:52:46:28:dc: 08:b0:0f:ee:67:69:66:4a:58:60:e3:40:96:a7:8a:a0:b1:25: 37:df:b9:62:4f:a1:83:2a:7d:45:50:7f:59:1e:63:8d:1a:79: a3:2a:88:df:b8:f6:0b:64:20:c5:2d:6d:c7:62:e0:28:2b:94: 21:8c:17:d4:29:a2:21:26:68:5d:07:7f:f7:a4:33:f4:e1:e2: 5a:29:b7:f3:7f:d1:9d:90:2e:b9:f2:33:40:e6:8b:69:a7:6f: 95:d7:5f:a8:a4:2c:57:dd:c9:c1:71:36:25:6b:fc:b7:1d:52: 0d:ba:bf:37:79:28:21:c9:51:c5:7f:06:23:72:84:83:f3:4d: 9b:cd:2c:49:11:f7:50:9b:cf:5c:8a:89:b8:11:22:68:6f:69: a8:c8:17:af:d5:0c:08:ea:12:64:7e:c6:d3:25:29:60:93:ae: c8:f4:6c:33:1f:ce:f3:e2:b6:87:fd:2c:dd:2d:57:d4:5d:8e: b8:b3:c4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUb7Y59hggyQnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3 ZmQwMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODQwZDExZTAtMjY4OC00OTNiLWFjYTgtZTU3ZjMwOGRlMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FRJNJqqYubiXJyXUiTL/2LXGXX0gVezmaod lOGObUUHn8xmTMQWoAaR9KwQA5ffPDFviNWYNnCZx7xF05HpLBtN6Y7GX4GsOKqQ c326BbkDxpgur9L9pGwCWzg+gPgk0IwtVdOVjK8Bgtxwo7vMxQ9dpw6T1TrouxoD ltnVgsff66Oly/alaKNMjrBdtv2+WH6tLRbdZSXXV+UWofCezp+VH+c8yGmhfJUc ucGqYGjTsiJ4g14D2hKASWbhHNdhwQW/Ilj1grTc1EPGDMHJXxy2M4uPxmtpdKdt jLdITyQ2HO8ELbaLxY5eU/ydzTODYAirLAvoaydt2JcXbcRbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEyagGjAkIlmYRKz57T+GUHoHQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvMGY2NTdjNjYtZjM1Zi0z MGI5LWExZmUtYThkZDMzNzFiMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3 MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0RnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi8pdOEEyLmv1TsG/qxQz2Z92zDWzzTJP24dCjpu1xS0Iw4aNcEUuAj qy4rxUFWqrdVRrIs5o4jMFtaCJfh22O3AhmgUkYo3AiwD+5naWZKWGDjQJaniqCx JTffuWJPoYMqfUVQf1keY40aeaMqiN+49gtkIMUtbcdi4CgrlCGMF9QpoiEmaF0H f/ekM/Th4lopt/N/0Z2QLrnyM0Dmi2mnb5XXX6ikLFfdycFxNiVr/LcdUg26vzd5 KCHJUcV/BiNyhIPzTZvNLEkR91Cbz1yKibgRImhvaajIF6/VDAjqEmR+xtMlKWCT rsj0bDMfzvPitof9LN0tV9RdjrizxGc= -----END CERTIFICATE-----Generated at Sat Oct 25 22:05:21 2025 by rpki-client