$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/f4652961-ef47-38fa-9585-847146e26ade.roa File: f4652961-ef47-38fa-9585-847146e26ade.roa (raw, json) Hash identifier: Y7CXzyJzc36btjaj3SuENTcnkfIGFoI4hG2hMMV2AAY= Subject key identifier: 07:4F:C2:A9:5A:96:8F:90:DC:E1:9A:65:C8:A0:AA:CC:82:F3:E0:8C Certificate issuer: /CN=615aeb0c-c7e5-43ae-8f56-fe3565993a52 Certificate serial: 010D0C9F4328584B355709CBB3653EEF96653A00 Authority key identifier: 1E:94:4C:B1:FB:5C:B3:13:96:B1:24:90:BA:85:40:E2:1D:CD:15:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/f4652961-ef47-38fa-9585-847146e26ade.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 22006 IP address blocks: 199.21.224.0/21 maxlen: 24 208.91.8.0/21 maxlen: 24 2607:5c00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/615aeb0c-c7e5-43ae-8f56-fe3565993a52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/615aeb0c-c7e5-43ae-8f56-fe3565993a52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:09:cb:b3:65:3e:ef:96:65:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615aeb0c-c7e5-43ae-8f56-fe3565993a52 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=b4200e72-059a-4c82-9bdd-cb40b8bf7ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:3d:ca:47:3b:f5:4f:8b:19:46:c9:53:f6: c7:8f:73:73:0c:47:6f:8b:9d:dc:d9:b1:51:bd:23: fc:2a:dc:0e:d0:e8:81:25:40:15:6a:4a:30:56:b4: 9d:23:b7:51:3e:cd:20:97:5b:eb:e7:81:a3:8c:de: fe:91:99:68:04:f3:9d:3d:d2:d3:4e:70:d6:c1:5a: bc:c9:a3:b8:97:fd:e1:44:f3:ca:c2:92:a8:cf:9f: a5:ec:45:ae:e1:32:5f:e6:d3:17:e8:a1:43:75:a5: ca:29:b7:2a:45:ff:66:31:01:8e:81:20:49:11:37: 01:58:67:2d:1b:3d:fc:40:c0:9f:ef:aa:24:6a:55: 30:75:03:cd:91:d5:54:d4:6a:a0:71:69:23:bd:ff: bd:b9:1f:31:2a:88:7c:c3:df:7b:39:a9:3a:36:75: 9c:9f:7f:e6:2d:f9:d6:8c:7d:c1:71:21:42:f0:22: 19:7a:33:44:1b:35:c6:d0:8d:d2:4a:ce:65:88:4f: d2:99:06:6c:78:73:cc:c7:78:6e:c1:a4:ac:cc:7b: 77:20:d7:59:81:3a:7f:0d:9d:98:65:68:f4:b7:47: 13:11:f8:1e:30:9d:4e:50:ee:69:86:b9:db:f6:f4: 56:10:47:e4:2b:67:a6:57:23:d7:0c:30:10:98:50: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4F:C2:A9:5A:96:8F:90:DC:E1:9A:65:C8:A0:AA:CC:82:F3:E0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/f4652961-ef47-38fa-9585-847146e26ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52/615aeb0c-c7e5-43ae-8f56-fe3565993a52.crl X509v3 Authority Key Identifier: keyid:1E:94:4C:B1:FB:5C:B3:13:96:B1:24:90:BA:85:40:E2:1D:CD:15:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/615aeb0c-c7e5-43ae-8f56-fe3565993a52.cer sbgp-ipAddrBlock: critical IPv4: 199.21.224.0/21 208.91.8.0/21 IPv6: 2607:5c00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d9:e3:17:8d:dc:de:9d:d9:f9:7d:c0:97:60:59:1b:cb:a5: e7:5f:cc:92:42:58:f2:88:7e:86:df:79:0a:67:86:a5:b7:68: 99:d5:fa:09:c5:b8:d9:1d:88:b0:ed:6a:0d:d5:0c:e7:50:a2: ab:9a:50:3b:79:39:57:db:dc:b2:91:34:12:a9:d9:8f:9e:4a: 2f:38:c4:b2:6c:a8:40:29:f9:cc:fd:12:ae:83:9e:dd:f2:33: 5a:ab:8f:85:9e:76:c2:8b:11:89:f1:fb:b4:5b:2a:87:78:e9: 65:34:8c:6b:b5:64:be:1c:f0:0a:d7:35:70:40:29:29:f0:a4: 80:9e:e7:f7:18:f3:c8:30:4a:69:2f:b7:3b:9f:a3:26:72:c0: 8f:71:2c:04:cd:00:58:e7:77:f7:18:fb:5a:26:45:b7:a5:0e: 60:ad:61:70:c9:ab:b3:91:e9:3b:0d:ae:48:c1:51:1a:44:86: 97:ad:7c:2f:d9:18:88:1c:5c:d3:91:d6:5b:31:4c:6e:c1:06: ad:30:a1:68:84:84:96:b9:c6:fd:a2:c7:52:f4:54:66:c6:fd: 1c:22:05:e0:28:f1:89:7a:67:99:62:d9:60:64:ee:2f:3b:c5: d5:75:c8:33:2d:37:ab:c1:f8:a4:9a:2f:3d:64:93:53:59:a9: 1d:d5:56:9e -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEs1VwnLs2U+75ZlOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1YWViMGMtYzdlNS00M2FlLThmNTYtZmUzNTY1OTkz YTUyMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YjQyMDBlNzItMDU5YS00YzgyLTliZGQtY2I0MGI4YmY3ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZk9ykc79U+LGUbJU/bHj3NzDEdvi53c2bFR vSP8KtwO0OiBJUAVakowVrSdI7dRPs0gl1vr54GjjN7+kZloBPOdPdLTTnDWwVq8 yaO4l/3hRPPKwpKoz5+l7EWu4TJf5tMX6KFDdaXKKbcqRf9mMQGOgSBJETcBWGct Gz38QMCf76okalUwdQPNkdVU1GqgcWkjvf+9uR8xKoh8w997Oak6NnWcn3/mLfnW jH3BcSFC8CIZejNEGzXG0I3SSs5liE/SmQZseHPMx3huwaSszHt3INdZgTp/DZ2Y ZWj0t0cTEfgeMJ1OUO5phrnb9vRWEEfkK2emVyPXDDAQmFBlawIDAQABo4IDajCC A2YwHQYDVR0OBBYEFAdPwqlalo+Q3OGaZcigqsyC8+CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MTVh ZWIwYy1jN2U1LTQzYWUtOGY1Ni1mZTM1NjU5OTNhNTIvZjQ2NTI5NjEtZWY0Ny0z OGZhLTk1ODUtODQ3MTQ2ZTI2YWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjE1YWViMGMtYzdlNS00M2FlLThm NTYtZmUzNTY1OTkzYTUyLzYxNWFlYjBjLWM3ZTUtNDNhZS04ZjU2LWZlMzU2NTk5 M2E1Mi5jcmwwHwYDVR0jBBgwFoAUHpRMsftcsxOWsSSQuoVA4h3NFTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MTVhZWIwYy1jN2U1LTQzYWUtOGY1Ni1mZTM1 NjU5OTNhNTIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDxxXgAwQD 0FsIMA0EAgACMAcDBQAmB1wAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAADZ4xeN3N6d2fl9wJdgWRvLpedf zJJCWPKIfobfeQpnhqW3aJnV+gnFuNkdiLDtag3VDOdQoquaUDt5OVfb3LKRNBKp 2Y+eSi84xLJsqEAp+cz9Eq6Dnt3yM1qrj4WedsKLEYnx+7RbKod46WU0jGu1ZL4c 8ArXNXBAKSnwpICe5/cY88gwSmkvtzufoyZywI9xLATNAFjnd/cY+1omRbelDmCt YXDJq7OR6TsNrkjBURpEhpetfC/ZGIgcXNOR1lsxTG7BBq0woWiEhJa5xv2ix1L0 VGbG/RwiBeAo8Yl6Z5li2WBk7i87xdV1yDMtN6vB+KSaLz1kk1NZqR3VVp4= -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:58 2025 by rpki-client