$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa File: 4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa (raw, json) Hash identifier: QWfZ3XYAk2/DPqkGU0qeT8nARNEzP/SgN/Q8CAi71/4= Subject key identifier: AD:D1:8F:C5:B9:8A:D3:23:DC:F9:3A:2B:6C:C0:B7:31:9E:17:2E:7E Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584B821CBCE21494CDB16FE719A0 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 87 IP address blocks: 129.79.0.0/16 maxlen: 24 140.182.0.0/16 maxlen: 16 140.182.0.0/19 maxlen: 19 149.159.0.0/19 maxlen: 19 149.161.0.0/16 maxlen: 16 149.161.128.0/17 maxlen: 17 149.162.0.0/16 maxlen: 16 149.163.0.0/16 maxlen: 16 156.56.0.0/16 maxlen: 16 198.49.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:bc:e2:14:94:cd:b1:6f:e7:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=836d329c-6d1f-4518-b785-3c2a94c9e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:77:67:80:49:87:ec:a5:11:78:24:9a:1b: 24:cd:76:38:03:3f:0c:db:c9:c2:b7:27:d7:5d:55: 1f:40:90:6a:fa:86:c5:81:d9:8b:d9:db:95:9b:3b: be:0a:d6:c9:e8:08:00:ca:b0:cb:72:34:17:bd:b6: 5a:d1:af:ca:29:19:6d:fa:b3:88:c8:3f:07:a0:d8: a0:2f:b2:56:c6:e3:e6:3a:7f:ec:18:bc:97:21:63: b8:cc:21:34:fd:1b:cb:c8:fd:00:9e:95:09:4b:47: 5e:d2:a4:5a:3a:52:c0:87:2a:87:5f:41:c5:f7:f3: 1e:cd:b5:f2:3c:d8:70:85:c2:e4:56:78:62:7e:66: cb:1e:26:dc:b3:6a:2c:9e:08:cf:36:0d:ac:55:4b: 2d:82:1c:10:d6:87:aa:c1:25:ba:53:cf:60:24:2e: a0:dc:4a:70:fc:df:04:64:4c:7c:5f:d4:a8:94:3a: 3e:9f:cc:74:a4:f7:6e:57:94:e0:82:45:07:3b:fc: 33:6d:94:5f:20:de:42:2c:9a:cc:02:ad:ca:53:2a: a9:75:ee:17:2d:82:08:e8:26:0a:fb:e2:e3:4c:56: cd:85:36:27:f6:c3:62:a3:53:0e:49:f8:3a:17:81: 3d:2e:8d:d1:54:3a:4b:f7:9c:bc:f3:b4:1d:f6:8c: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D1:8F:C5:B9:8A:D3:23:DC:F9:3A:2B:6C:C0:B7:31:9E:17:2E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 129.79.0.0/16 140.182.0.0/16 149.159.0.0/19 149.161.0.0-149.163.255.255 156.56.0.0/16 198.49.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:56:01:6b:41:f1:6a:1d:81:d4:09:43:19:2d:f6:cf:be:6b: 39:52:7f:14:d1:0c:2a:9a:bd:bf:a5:3b:fb:b0:68:da:5a:c9: cf:f6:ce:ba:02:c7:12:59:4c:2a:32:12:a7:ae:88:a4:cd:ab: 90:c8:6b:a1:9f:9d:7a:63:17:27:0a:16:10:c9:f3:36:4f:d8: a2:b6:d5:f0:3b:19:c7:5a:cf:9f:18:6e:29:24:59:ac:60:c7: 6a:fe:32:36:c0:bb:f3:a0:ab:82:47:b6:ab:95:27:93:e5:d5: 81:84:19:e0:df:86:a9:02:46:8d:9f:bf:ed:ab:8d:c3:4e:7c: 8f:52:00:ba:d5:85:b5:d0:fb:e6:fe:94:33:52:4c:5f:b3:0d: 1a:9c:21:d0:4c:ab:32:6a:25:b1:51:88:fc:0d:69:b7:09:97: dd:b2:b8:b9:a8:b2:f7:a7:b1:5e:59:77:c4:47:70:42:f0:e2: 6b:26:bf:7e:c1:15:92:de:cf:97:60:0a:e4:1f:6b:ac:3a:b2: 5a:e4:26:0d:cc:e6:24:bb:1b:c4:07:ae:00:05:16:b1:fc:fe: 01:01:c0:a9:c6:3f:0a:6b:bb:13:13:40:e3:a3:2f:a6:6a:09: b6:2f:a3:c3:a2:66:28:48:de:ff:69:cb:39:50:03:f2:ff:1a: e2:04:53:d7 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEuCHLziFJTNsW/nGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODM2ZDMyOWMtNmQxZi00NTE4LWI3ODUtM2MyYTk0YzllODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYt3Z4BJh+ylEXgkmhskzXY4Az8M28nCtyfX XVUfQJBq+obFgdmL2duVmzu+CtbJ6AgAyrDLcjQXvbZa0a/KKRlt+rOIyD8HoNig L7JWxuPmOn/sGLyXIWO4zCE0/RvLyP0AnpUJS0de0qRaOlLAhyqHX0HF9/MezbXy PNhwhcLkVnhifmbLHibcs2osngjPNg2sVUstghwQ1oeqwSW6U89gJC6g3Epw/N8E ZEx8X9SolDo+n8x0pPduV5TggkUHO/wzbZRfIN5CLJrMAq3KUyqpde4XLYII6CYK ++LjTFbNhTYn9sNio1MOSfg6F4E9Lo3RVDpL95y887Qd9oxrKwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFK3Rj8W5itMj3Pk6K2zAtzGeFy5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvNGZjOTc2YzItNTkzMi0z MWFkLWI3ODctZWVkMmQxMWY1ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAATAnAwMAgU8DAwCM tgMEBZWfADAKAwMAlaEDAwKVoAMDAJw4AwQAxjGxMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAChWAWtB8Wod gdQJQxkt9s++azlSfxTRDCqavb+lO/uwaNpayc/2zroCxxJZTCoyEqeuiKTNq5DI a6GfnXpjFycKFhDJ8zZP2KK21fA7Gcdaz58YbikkWaxgx2r+MjbAu/Ogq4JHtquV J5Pl1YGEGeDfhqkCRo2fv+2rjcNOfI9SALrVhbXQ++b+lDNSTF+zDRqcIdBMqzJq JbFRiPwNabcJl92yuLmosvensV5Zd8RHcELw4msmv37BFZLez5dgCuQfa6w6slrk Jg3M5iS7G8QHrgAFFrH8/gEBwKnGPwpruxMTQOOjL6ZqCbYvo8OiZihI3v9pyzlQ A/L/GuIEU9c= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:59 2025 by rpki-client