$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa File: 90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa (raw, json) Hash identifier: thP8+d6hYhTjOkV9VJH+GgN0OQB4oHFzDBS8jtRq7HE= Subject key identifier: 36:48:FC:AD:63:A3:C0:9B:06:12:BA:18:E7:57:59:83:9C:0B:B8:0C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B61301BC06C4A5EB783683180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa Signing time: Wed 01 Oct 2025 17:58:03 +0000 ROA not before: Wed 01 Oct 2025 17:58:03 +0000 ROA not after: Tue 30 Dec 2025 18:58:03 +0000 asID: 6424 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:30:1b:c0:6c:4a:5e:b7:83:68:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 17:58:03 2025 GMT Not After : Dec 30 18:58:03 2025 GMT Subject: CN=8a511a78-10a4-4926-aecd-07012f7a5aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:6d:8a:8c:7b:56:44:82:32:95:a7:b1:e3: 96:b4:0e:2b:39:18:57:d0:e1:c0:99:1e:8a:26:34: 72:b6:dd:a0:e5:b4:21:0c:a6:5a:da:cf:fe:32:6a: 81:5f:01:00:50:d3:af:25:f2:2c:3f:90:05:47:42: 72:5d:50:c5:78:f5:df:56:32:23:a8:47:ee:e0:69: 37:d6:55:d2:19:2d:e3:aa:77:24:23:8e:02:35:67: 10:c2:57:40:31:ab:f8:cd:ce:b6:d2:50:87:cb:66: 28:66:f2:d8:d4:6c:67:6a:19:d0:08:cf:19:f4:ee: 0d:b6:04:f8:4c:a9:dc:cf:bb:96:98:0d:92:ea:ec: 15:42:6a:cc:b8:ee:05:21:fb:86:88:7c:f5:28:c7: 5c:9f:10:a6:9f:a6:a4:2f:bf:e5:4e:06:eb:0a:19: 5b:c4:bc:37:c0:20:7c:ce:2c:ee:97:93:99:ff:f5: 9b:9e:16:dc:4b:45:77:f3:f1:44:2a:28:f2:92:38: 64:99:8f:3b:ae:3f:f5:68:71:41:7e:9c:56:46:bd: 72:ad:ff:60:4f:1c:d0:f7:ba:39:d6:ce:b7:c9:21: e3:6c:72:46:17:1e:2c:6e:78:d7:25:71:de:00:dc: b3:1c:3a:a3:e9:6c:de:48:c3:b3:3c:58:fa:6b:67: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:48:FC:AD:63:A3:C0:9B:06:12:BA:18:E7:57:59:83:9C:0B:B8:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:2f:e6:ba:9e:17:f5:37:d5:fc:65:c5:09:ca:93:98:bb:23: 23:35:81:ae:c9:56:2f:5a:af:95:88:21:3f:cf:9a:44:db:e6: 96:ac:41:ce:bf:8c:1f:64:80:dd:41:41:91:18:cd:3b:68:42: c7:33:2e:44:fb:39:4a:11:28:da:31:59:49:92:19:4a:19:7f: 6a:a7:a0:49:75:1d:cc:3b:04:c6:57:9c:08:5e:27:18:58:35: 6f:66:56:ba:ae:c8:df:62:29:94:93:5f:16:38:a2:9d:67:2e: 44:5b:e4:2f:d9:b4:96:80:99:dd:40:f0:35:54:78:ad:f8:c0: e2:71:48:5c:fc:72:0d:6d:ed:a8:4a:f0:e2:2d:00:8b:3a:f6: e6:d4:f0:24:31:9f:57:04:7d:4d:dc:11:d9:ba:4d:20:95:c8: 43:21:26:26:33:85:71:4e:38:2d:00:06:bc:88:b7:01:18:d3: 13:64:f7:d2:b8:36:56:b0:88:05:1c:f6:a3:ef:e5:9b:f8:a6: 33:c6:83:57:75:ef:dd:a6:74:ef:20:66:35:ce:5b:28:e5:cb: 19:19:31:f1:77:72:ea:e9:96:7f:46:b9:5d:13:ab:59:58:60: 47:02:16:b0:34:f4:43:3e:26:f1:fc:77:92:6e:c4:d0:10:a0: 9b:b8:fa:b6 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthMBvAbEpet4NoMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE3NTgwM1oXDTI1MTIzMDE4NTgwM1owLzEtMCsGA1UEAxMk OGE1MTFhNzgtMTBhNC00OTI2LWFlY2QtMDcwMTJmN2E1YWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZRtiox7VkSCMpWnseOWtA4rORhX0OHAmR6K JjRytt2g5bQhDKZa2s/+MmqBXwEAUNOvJfIsP5AFR0JyXVDFePXfVjIjqEfu4Gk3 1lXSGS3jqnckI44CNWcQwldAMav4zc620lCHy2YoZvLY1GxnahnQCM8Z9O4NtgT4 TKncz7uWmA2S6uwVQmrMuO4FIfuGiHz1KMdcnxCmn6akL7/lTgbrChlbxLw3wCB8 zizul5OZ//WbnhbcS0V38/FEKijykjhkmY87rj/1aHFBfpxWRr1yrf9gTxzQ97o5 1s63ySHjbHJGFx4sbnjXJXHeANyzHDqj6WzeSMOzPFj6a2dW2wIDAQABo4IDkTCC A40wHQYDVR0OBBYEFDZI/K1jo8CbBhK6GOdXWYOcC7gMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTBjODJiOWQtOGFlMS0z ZjBmLTkzNjgtZTY1NzcyZTdlMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAL0v5rqeF/U31fxlxQnKk5i7IyM1ga7JVi9ar5WI IT/PmkTb5pasQc6/jB9kgN1BQZEYzTtoQsczLkT7OUoRKNoxWUmSGUoZf2qnoEl1 Hcw7BMZXnAheJxhYNW9mVrquyN9iKZSTXxY4op1nLkRb5C/ZtJaAmd1A8DVUeK34 wOJxSFz8cg1t7ahK8OItAIs69ubU8CQxn1cEfU3cEdm6TSCVyEMhJiYzhXFOOC0A BryItwEY0xNk99K4NlawiAUc9qPv5Zv4pjPGg1d1792mdO8gZjXOWyjlyxkZMfF3 curpln9GuV0Tq1lYYEcCFrA09EM+JvH8d5JuxNAQoJu4+rY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:03 2025 by rpki-client