$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1acb7ea1-d2f3-3484-8c84-f9632650ff32.roa File: 1acb7ea1-d2f3-3484-8c84-f9632650ff32.roa (raw, json) Hash identifier: L9PBM3bGSg7FuCGiUA/xIqdfGlTm4nlWSr5nZeAXTfY= Subject key identifier: 9E:86:DA:3D:4C:2F:5A:E6:99:B9:3C:2B:7E:AF:86:03:51:47:9C:3E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B46170804A0B93420A53BCE80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1acb7ea1-d2f3-3484-8c84-f9632650ff32.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 1299 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:08:04:a0:b9:34:20:a5:3b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=8f85aaa2-c9c0-46e2-93ac-ffd02d66c6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:4c:89:54:71:78:55:94:f9:b8:5f:9c:86: 7a:23:d8:85:bf:c1:fb:f3:3e:7f:92:6c:c6:60:9d: 17:c1:78:b4:15:f6:59:3a:06:c9:4e:09:70:2b:4e: a6:65:4a:eb:6a:b7:62:ac:24:bd:82:fd:f7:f0:ea: 62:d3:e8:77:f8:a2:3c:b5:33:9f:ed:c2:49:b7:b4: 01:41:77:d1:44:29:e4:77:ae:46:5f:3d:3e:cd:d5: 35:13:d0:26:59:00:13:f9:33:5e:3c:a2:19:e3:0b: 30:80:88:69:87:55:f1:19:a3:3e:1b:41:1b:28:8d: b1:05:7a:17:be:e7:07:a9:19:9d:a4:ed:29:37:db: 9c:59:02:1d:fa:a3:c1:6d:3a:b4:82:bb:67:9b:49: 44:ab:b7:1c:c7:65:e7:26:c3:74:6f:53:de:82:52: 26:a5:7c:0e:f8:ea:bf:27:63:35:b4:22:ba:e8:bd: 76:fb:0e:63:49:c4:88:b0:47:a5:7f:ba:66:db:cf: 6c:34:55:0d:a2:41:53:5e:91:47:97:dd:7f:3a:d0: cd:66:94:e1:93:37:5f:7f:31:e4:55:64:4c:e7:87: 41:ff:7c:10:4e:05:51:04:7f:f0:d4:39:be:89:f2: 2d:2e:cc:b9:d7:72:86:0c:58:54:23:c2:c7:8a:9c: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:DA:3D:4C:2F:5A:E6:99:B9:3C:2B:7E:AF:86:03:51:47:9C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1acb7ea1-d2f3-3484-8c84-f9632650ff32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:f5:1e:ac:15:55:6a:15:b8:6b:48:ac:69:1a:c2:45:3a:bc: 90:5f:33:ec:49:05:9c:4f:5a:6d:c3:f7:b3:80:ab:22:fc:7d: 08:9a:df:54:91:53:aa:1f:6b:36:c6:5a:7b:6b:9c:d0:02:b9: 72:3a:32:d0:48:d4:d6:9e:b2:61:38:71:a2:c4:c8:56:47:1f: 1a:d1:ab:d2:e0:80:2f:88:ba:7e:38:4e:7e:9f:bd:c1:d5:38: 7d:6a:e6:de:c7:c4:cc:72:6d:a9:9f:cd:e4:6d:c4:6a:0f:ba: 7a:fa:23:7e:3f:f4:05:eb:8d:3c:29:c3:79:1d:c0:49:df:c4: a9:94:35:08:6b:4e:24:87:2a:7a:9a:22:f6:97:61:78:b0:3d: 0b:86:3b:f3:39:34:9d:45:ed:8e:d2:ce:5f:98:52:f4:d3:b2: a0:1a:c6:f4:09:b3:78:40:32:69:96:c3:5f:a4:b3:04:76:07: 41:d4:a2:8d:18:13:e4:38:0e:fe:40:86:d5:9c:f7:b7:39:27: c4:de:3a:28:bb:c5:1a:33:27:5e:0d:e3:4e:09:25:b5:c0:3b: ac:8e:16:51:0d:ef:79:8b:97:70:fd:89:9c:3d:68:d8:a4:5d: ce:b8:d8:b8:b8:4f:31:36:1c:b2:4e:2a:2d:b7:d4:b5:47:02: 64:21:f5:8c -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEtGFwgEoLk0IKU7zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGY4NWFhYTItYzljMC00NmUyLTkzYWMtZmZkMDJkNjZjNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6JMiVRxeFWU+bhfnIZ6I9iFv8H78z5/kmzG YJ0XwXi0FfZZOgbJTglwK06mZUrrardirCS9gv338Opi0+h3+KI8tTOf7cJJt7QB QXfRRCnkd65GXz0+zdU1E9AmWQAT+TNePKIZ4wswgIhph1XxGaM+G0EbKI2xBXoX vucHqRmdpO0pN9ucWQId+qPBbTq0grtnm0lEq7ccx2XnJsN0b1PeglImpXwO+Oq/ J2M1tCK66L12+w5jScSIsEelf7pm289sNFUNokFTXpFHl91/OtDNZpThkzdffzHk VWRM54dB/3wQTgVRBH/w1Dm+ifItLsy513KGDFhUI8LHipz5YQIDAQABo4IDczCC A28wHQYDVR0OBBYEFJ6G2j1ML1rmmbk8K36vhgNRR5w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWFjYjdlYTEtZDJmMy0z NDg0LThjODQtZjk2MzI2NTBmZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMn1HqwVVWoVuGtI rGkawkU6vJBfM+xJBZxPWm3D97OAqyL8fQia31SRU6ofazbGWntrnNACuXI6MtBI 1NaesmE4caLEyFZHHxrRq9LggC+Iun44Tn6fvcHVOH1q5t7HxMxybamfzeRtxGoP unr6I34/9AXrjTwpw3kdwEnfxKmUNQhrTiSHKnqaIvaXYXiwPQuGO/M5NJ1F7Y7S zl+YUvTTsqAaxvQJs3hAMmmWw1+kswR2B0HUoo0YE+Q4Dv5AhtWc97c5J8TeOii7 xRozJ14N404JJbXAO6yOFlEN73mLl3D9iZw9aNikXc642Li4TzE2HLJOKi231LVH AmQh9Yw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:45 2025 by rpki-client