$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa File: b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa (raw, json) Hash identifier: 3QZuWtyMKAwSP8F0l5MTb0OS05tUW20m0b0l5Oco7Eo= Subject key identifier: DD:92:A0:56:DE:B7:EA:F8:BB:E1:1A:41:24:64:74:E5:0F:9D:79:FA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4617082F69AB694362E7B470 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 20115 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:08:2f:69:ab:69:43:62:e7:b4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=b790e436-6055-40a6-b2b3-073cfb113335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:2e:8e:61:8d:49:1f:39:a6:88:fe:46:4a: cc:a9:fd:cd:13:ab:76:c0:cd:e6:ea:78:f8:5c:08: db:e5:af:eb:30:78:aa:17:99:8e:78:fe:6c:65:4f: 4d:af:e0:46:c0:51:d3:0e:89:9a:f2:0d:78:49:b6: 9d:c9:7b:62:ee:f3:d9:2f:61:c0:db:0b:2e:21:ee: 0e:99:3c:da:7d:62:8b:81:08:7b:36:66:2d:17:b4: cb:49:af:20:d5:20:2c:73:b4:94:a9:75:ae:53:76: fc:e4:fa:a0:88:4e:ab:73:c1:5e:59:3e:3d:15:ce: 33:d0:b0:35:3e:9f:30:e3:e6:c1:74:b1:be:c7:b8: 7f:f4:87:6f:bc:b0:9c:27:6f:af:1d:29:35:c9:98: 34:ab:bf:73:2d:1e:e2:83:c5:c2:cb:8a:0d:0c:7a: 50:9c:45:d5:67:d1:f9:f8:07:ed:32:ae:c0:d9:61: 6e:30:10:0c:71:c1:6a:42:46:18:d8:89:4f:f9:4e: 19:02:70:4e:1d:f3:08:41:0a:bb:c0:88:b1:34:83: b2:af:26:70:e9:e4:65:fe:5d:d8:3f:cb:b0:38:61: 2e:3e:f1:61:d8:93:48:36:7e:66:97:6a:af:ca:77: 78:06:8d:4f:2a:88:c2:b2:0e:fd:2b:88:e6:90:50: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:92:A0:56:DE:B7:EA:F8:BB:E1:1A:41:24:64:74:E5:0F:9D:79:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5a94626-e2f2-3b04-8d6b-072ec3927c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:af:8b:f6:3a:55:b2:2d:ef:aa:77:a9:fb:9e:0d:9f:a6:1b: 4c:4d:be:d7:e6:68:31:3d:74:d7:4c:07:ca:34:b6:77:0b:25: 1d:6b:4c:b5:3f:58:50:d2:f3:dc:d0:12:67:bb:b4:63:63:d9: bc:47:45:1e:6d:fd:13:61:31:91:88:16:74:3c:e7:51:5a:27: d8:2a:16:55:c3:3d:03:a7:fc:a5:cb:b9:4d:87:fc:fb:1b:4e: 07:40:37:39:b5:c2:e9:03:c6:7c:c9:23:fd:08:c9:ec:5a:17: 47:83:d8:c0:fa:f5:cc:3f:e7:3f:68:e4:d5:a6:31:e4:15:8d: 48:c0:ac:33:a0:b4:44:b6:aa:30:68:72:03:80:2d:06:d8:4c: 07:70:8d:5f:15:6c:9d:75:f7:9f:61:62:a9:e3:a8:e3:6e:23: f8:cf:6b:7d:fe:fc:aa:db:61:cd:5d:54:89:95:89:6a:64:f5: ed:2a:39:8e:28:c9:d8:db:4d:c4:e2:99:6e:6c:6f:d8:ed:b7: fe:b3:40:eb:90:79:de:69:08:d4:76:16:dc:cf:06:b2:c0:9f: 45:f6:19:c2:cf:f4:91:81:a8:61:ba:e3:0a:e9:be:5e:bf:b9: e8:58:be:0c:f8:29:af:cc:d3:a9:57:e6:03:08:c5:a7:23:09: 4b:98:95:4f -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEtGFwgvaatpQ2LntHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk Yjc5MGU0MzYtNjA1NS00MGE2LWIyYjMtMDczY2ZiMTEzMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzkujmGNSR85poj+RkrMqf3NE6t2wM3m6nj4 XAjb5a/rMHiqF5mOeP5sZU9Nr+BGwFHTDoma8g14SbadyXti7vPZL2HA2wsuIe4O mTzafWKLgQh7NmYtF7TLSa8g1SAsc7SUqXWuU3b85PqgiE6rc8FeWT49Fc4z0LA1 Pp8w4+bBdLG+x7h/9IdvvLCcJ2+vHSk1yZg0q79zLR7ig8XCy4oNDHpQnEXVZ9H5 +AftMq7A2WFuMBAMccFqQkYY2IlP+U4ZAnBOHfMIQQq7wIixNIOyryZw6eRl/l3Y P8uwOGEuPvFh2JNINn5ml2qvynd4Bo1PKojCsg79K4jmkFCPhQIDAQABo4IDczCC A28wHQYDVR0OBBYEFN2SoFbet+r4u+EaQSRkdOUPnXn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjVhOTQ2MjYtZTJmMi0z YjA0LThkNmItMDcyZWMzOTI3Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEuvi/Y6VbIt76p3 qfueDZ+mG0xNvtfmaDE9dNdMB8o0tncLJR1rTLU/WFDS89zQEme7tGNj2bxHRR5t /RNhMZGIFnQ851FaJ9gqFlXDPQOn/KXLuU2H/PsbTgdANzm1wukDxnzJI/0Iyexa F0eD2MD69cw/5z9o5NWmMeQVjUjArDOgtES2qjBocgOALQbYTAdwjV8VbJ11959h YqnjqONuI/jPa33+/KrbYc1dVImViWpk9e0qOY4oydjbTcTimW5sb9jtt/6zQOuQ ed5pCNR2FtzPBrLAn0X2GcLP9JGBqGG64wrpvl6/uehYvgz4Ka/M06lX5gMIxacj CUuYlU8= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:34 2025 by rpki-client