$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa File: 9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa (raw, json) Hash identifier: vFlrMRh7rES2srSF2rhsTCV2Yh+20YuGGSEDidIDUa4= Subject key identifier: 11:AC:97:26:8E:45:76:81:98:DE:13:57:7B:0B:58:FD:88:FE:C8:6F Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584BA9325052A9A759BF9E58AEE0 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 397127 IP address blocks: 67.218.1.0/24 maxlen: 24 2620:13d:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:50:52:a9:a7:59:bf:9e:58:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ada84252-85a9-453d-92a1-5d2df58648b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:fa:c3:91:32:3b:3c:dc:0f:31:2f:25:61: 33:8f:63:63:d4:9a:53:7d:be:b3:4e:7d:46:e4:cf: 7c:e8:38:39:d6:06:bc:70:7c:4f:14:c1:5f:8f:f1: 46:7a:af:c8:3b:f3:26:1a:6e:3e:08:b2:00:e9:24: 38:a2:ed:45:e3:f9:26:8e:6e:75:f9:1a:f2:a3:21: f0:ed:55:7b:cf:be:27:ca:75:93:9a:2f:e6:04:39: 94:8a:4c:9a:0d:11:4c:27:45:78:d8:88:f6:f3:c0: 10:09:4d:dc:65:12:b0:58:39:41:36:e6:3c:6f:dc: 7a:e0:02:5e:76:0f:d6:d1:45:14:e7:63:a2:3f:4f: 51:20:b7:1e:6d:26:34:b5:7c:7e:ed:ba:8e:59:d3: 2b:2a:ea:88:41:e0:0a:bd:24:ed:5b:d0:3d:ae:5f: 14:71:d9:45:25:35:64:d1:14:7e:9d:55:e8:d0:b9: 38:fa:91:1a:60:52:f1:90:84:e3:b2:30:54:84:91: af:fa:09:36:c3:a8:6e:4e:aa:8a:0a:b4:79:e2:cb: bc:dc:b4:fb:71:b6:b2:80:bc:59:e9:39:6b:42:37: f5:21:04:aa:32:d5:d5:e2:c9:d8:19:6d:72:af:35: c0:e8:7a:f6:9d:5c:c1:30:ad:35:fa:04:1d:16:43: 48:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:97:26:8E:45:76:81:98:DE:13:57:7B:0B:58:FD:88:FE:C8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 67.218.1.0/24 IPv6: 2620:13d:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ab:c7:fd:0f:8f:d7:bd:2b:56:fa:77:93:b0:90:1a:b9:9d: 29:4d:92:63:9e:59:2b:ec:fe:81:1b:4c:99:9d:df:86:a0:e0: 8c:aa:9c:e6:22:8d:bf:95:0d:b0:c0:5f:35:d9:7e:c1:f0:57: b1:98:95:ae:38:7f:22:5d:2e:cb:39:39:e4:60:1d:f7:74:92: e9:c9:86:a5:66:df:57:9e:95:2c:1a:ea:ec:6b:0e:93:48:2b: 9d:d3:b7:b7:9d:07:c2:97:97:7f:50:90:f0:b6:b0:ba:6c:5a: bd:e0:64:41:16:56:69:ff:4c:a8:74:6e:f0:4d:9d:5a:9c:b5: 07:a8:82:95:40:60:d1:54:db:9a:a8:15:74:80:3c:a5:1e:a2: 05:14:c7:b4:27:13:8f:1e:20:92:01:62:09:9d:61:d8:57:c3: bc:d6:20:ff:42:c4:22:0a:c6:b3:fc:45:99:4b:3f:28:56:bb: 7e:26:e3:6e:e1:e8:9c:fb:a5:cc:7f:1c:94:24:e1:ca:b4:e3: 73:98:33:e8:06:b0:bd:7d:fd:60:21:ce:29:f2:0a:aa:aa:12: 15:00:4c:67:5d:b6:8c:91:95:16:03:53:a3:3e:73:0d:2b:f4: 0b:ea:9c:20:19:a0:5d:50:bb:35:b0:9b:17:b3:fc:a5:92:87: e1:f2:09:ff -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEupMlBSqadZv55YruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWRhODQyNTItODVhOS00NTNkLTkyYTEtNWQyZGY1ODY0OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq136w5EyOzzcDzEvJWEzj2Nj1JpTfb6zTn1G 5M986Dg51ga8cHxPFMFfj/FGeq/IO/MmGm4+CLIA6SQ4ou1F4/kmjm51+RryoyHw 7VV7z74nynWTmi/mBDmUikyaDRFMJ0V42Ij288AQCU3cZRKwWDlBNuY8b9x64AJe dg/W0UUU52OiP09RILcebSY0tXx+7bqOWdMrKuqIQeAKvSTtW9A9rl8UcdlFJTVk 0RR+nVXo0Lk4+pEaYFLxkITjsjBUhJGv+gk2w6huTqqKCrR54su83LT7cbaygLxZ 6TlrQjf1IQSqMtXV4snYGW1yrzXA6Hr2nVzBMK01+gQdFkNI4QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBGslyaORXaBmN4TV3sLWP2I/shvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvOWJkODkzZDctYWY2ZS0z NGM2LWIzMTEtOTRhNzdkMWU0MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQ9oBMA8E AgACMAkDBwQmIAE94AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV6vH/Q+P170rVvp3k7CQGrmdKU2SY55Z K+z+gRtMmZ3fhqDgjKqc5iKNv5UNsMBfNdl+wfBXsZiVrjh/Il0uyzk55GAd93SS 6cmGpWbfV56VLBrq7GsOk0grndO3t50HwpeXf1CQ8LawumxaveBkQRZWaf9MqHRu 8E2dWpy1B6iClUBg0VTbmqgVdIA8pR6iBRTHtCcTjx4gkgFiCZ1h2FfDvNYg/0LE IgrGs/xFmUs/KFa7fibjbuHonPulzH8clCThyrTjc5gz6AawvX39YCHOKfIKqqoS FQBMZ122jJGVFgNToz5zDSv0C+qcIBmgXVC7NbCbF7P8pZKH4fIJ/w== -----END CERTIFICATE-----Generated at Mon Nov 3 16:51:26 2025 by rpki-client