$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa File: c975af3b-1769-381f-b596-ba7b61e7fce8.roa (raw, json) Hash identifier: xg16Wnku30YWabbn5cwqvKpgaYppgP1X2mPCdYD0594= Subject key identifier: C9:F4:2D:5C:AC:A5:DA:2F:A7:2A:05:B1:14:7B:36:00:E0:8F:03:6E Certificate issuer: /CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Certificate serial: 010D0C9F4328584B5571D5C87D75220C7E3FC690 Authority key identifier: 92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 20257 IP address blocks: 69.80.80.0/20 maxlen: 24 74.222.96.0/20 maxlen: 24 74.222.112.0/20 maxlen: 24 158.115.160.0/19 maxlen: 24 173.233.112.0/20 maxlen: 24 216.218.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d5:c8:7d:75:22:0c:7e:3f:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cd4f52f-4053-45db-b8e0-a7e0e3b85fba Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=c11f9314-b773-4514-ab5a-cdaaeaf55a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:c0:b0:df:a6:77:52:6a:5c:37:08:fc:2f: b0:c6:7b:8e:5e:19:da:5a:02:75:d5:38:44:42:8c: 19:85:54:5e:fe:5c:2d:3d:40:79:76:ba:0b:ca:00: f9:3b:93:7f:6a:a9:99:ee:93:92:93:ad:4a:61:13: 0b:12:1c:0e:3b:da:38:89:a1:09:db:68:8d:2b:e4: 39:cf:a9:c1:2a:96:29:c1:60:f5:eb:46:f1:ee:50: 76:bd:e9:91:86:bf:f3:35:93:61:f2:b0:27:79:fb: 33:4e:53:ad:61:43:63:a4:75:8e:62:c9:68:dd:fd: a6:26:ec:6b:f0:11:2d:f0:80:89:6b:27:ae:97:38: ae:4f:f0:f1:88:6b:4c:55:d5:da:ff:d9:9c:33:e1: 94:9a:04:e2:f5:d7:55:f6:e5:5b:fe:fd:b4:ed:c2: ed:1c:3b:ff:d9:ea:9f:82:8d:45:c3:08:0c:23:07: 0b:e2:2c:71:fa:1e:12:23:07:65:75:e5:74:a8:38: 38:db:d0:90:bf:09:e8:2e:1c:99:cc:29:17:74:10: f5:6d:78:e8:1e:fe:5e:0f:00:5f:0c:f3:70:bc:0b: 05:98:55:75:52:a3:04:93:9a:3a:6b:b9:f1:3c:72: 23:8e:69:d1:bf:72:3a:95:bf:7a:1c:ed:b2:77:68: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F4:2D:5C:AC:A5:DA:2F:A7:2A:05:B1:14:7B:36:00:E0:8F:03:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/c975af3b-1769-381f-b596-ba7b61e7fce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.crl X509v3 Authority Key Identifier: keyid:92:7E:C7:37:59:2A:7C:4B:35:5D:FB:0F:F7:B8:D6:4E:7F:9D:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2cd4f52f-4053-45db-b8e0-a7e0e3b85fba.cer sbgp-ipAddrBlock: critical IPv4: 69.80.80.0/20 74.222.96.0/19 158.115.160.0/19 173.233.112.0/20 216.218.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ca:40:fd:ff:5d:2b:11:c5:ba:55:f6:88:69:bf:e5:22:ea: 5b:d0:74:99:66:af:f1:53:5a:a0:db:cc:ba:b4:71:dd:fd:d8: 92:5f:9f:92:2d:71:7b:6c:76:8d:05:9b:43:8d:06:a7:32:04: 86:de:88:1d:a3:61:66:33:20:70:77:56:51:d1:fb:79:45:02: cf:58:82:22:0c:34:3c:00:5f:6e:f0:3d:45:6e:92:0d:2f:0c: ce:f1:a9:04:a7:c3:f9:3c:5c:c8:b0:46:95:c2:7f:d8:31:04: 1b:42:f6:80:5c:cc:f9:63:f4:78:ba:89:63:b5:14:a1:af:a2: 87:e2:27:45:50:df:c2:fc:bd:44:49:be:22:42:65:c0:90:69: 1b:2a:1c:03:16:58:f6:97:ee:fb:b9:0d:89:5e:9b:02:d4:b8: 5f:35:76:da:22:5b:3f:b7:15:41:82:81:4f:68:2d:f3:a4:04: c1:25:dd:d9:38:6b:70:d3:21:1f:32:34:9e:fb:d2:99:b2:5f: e3:d7:9d:d5:0f:15:4e:67:90:21:66:fa:00:c7:39:2b:fc:b4: 3f:cb:e1:43:7c:7b:f3:e7:45:70:85:d5:28:ca:3c:14:9b:75: 39:38:89:75:17:75:90:2b:a9:0f:7a:24:a5:21:e1:77:f7:7d: 93:65:7b:98 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEtVcdXIfXUiDH4/xpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkNGY1MmYtNDA1My00NWRiLWI4ZTAtYTdlMGUzYjg1 ZmJhMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk YzExZjkzMTQtYjc3My00NTE0LWFiNWEtY2RhYWVhZjU1YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXHAsN+md1JqXDcI/C+wxnuOXhnaWgJ11ThE QowZhVRe/lwtPUB5droLygD5O5N/aqmZ7pOSk61KYRMLEhwOO9o4iaEJ22iNK+Q5 z6nBKpYpwWD160bx7lB2vemRhr/zNZNh8rAnefszTlOtYUNjpHWOYslo3f2mJuxr 8BEt8ICJayeulziuT/DxiGtMVdXa/9mcM+GUmgTi9ddV9uVb/v207cLtHDv/2eqf go1FwwgMIwcL4ixx+h4SIwdldeV0qDg429CQvwnoLhyZzCkXdBD1bXjoHv5eDwBf DPNwvAsFmFV1UqMEk5o6a7nxPHIjjmnRv3I6lb96HO2yd2iIvQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFMn0LVyspdovpyoFsRR7NgDgjwNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0 ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2UwZTNiODVmYmEvYzk3NWFmM2ItMTc2OS0z ODFmLWI1OTYtYmE3YjYxZTdmY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmNkNGY1MmYtNDA1My00NWRiLWI4 ZTAtYTdlMGUzYjg1ZmJhLzJjZDRmNTJmLTQwNTMtNDVkYi1iOGUwLWE3ZTBlM2I4 NWZiYS5jcmwwHwYDVR0jBBgwFoAUkn7HN1kqfEs1XfsP97jWTn+dzfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yY2Q0ZjUyZi00MDUzLTQ1ZGItYjhlMC1hN2Uw ZTNiODVmYmEuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQERVBQAwQF St5gAwQFnnOgAwQErelwAwQG2NpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHzKQP3/XSsRxbpV9ohpv+Ui 6lvQdJlmr/FTWqDbzLq0cd392JJfn5ItcXtsdo0Fm0ONBqcyBIbeiB2jYWYzIHB3 VlHR+3lFAs9YgiIMNDwAX27wPUVukg0vDM7xqQSnw/k8XMiwRpXCf9gxBBtC9oBc zPlj9Hi6iWO1FKGvoofiJ0VQ38L8vURJviJCZcCQaRsqHAMWWPaX7vu5DYlemwLU uF81dtoiWz+3FUGCgU9oLfOkBMEl3dk4a3DTIR8yNJ770pmyX+PXndUPFU5nkCFm +gDHOSv8tD/L4UN8e/PnRXCF1SjKPBSbdTk4iXUXdZArqQ96JKUh4Xf3fZNle5g= -----END CERTIFICATE-----Generated at Mon Oct 13 10:48:58 2025 by rpki-client