$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa File: d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa (raw, json) Hash identifier: CpkV7kU7SzFY+j3Dq6ll+wRECCUNyJWioi5XxSTXLto= Subject key identifier: 1E:DC:37:FE:88:E0:09:ED:8B:3A:6A:EB:12:CC:31:AD:06:7E:80:14 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B461707BF34310A6E29D20BE0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:07:bf:34:31:0a:6e:29:d2:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=35bee6f5-76ca-47b7-8582-bc44ae6d3885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:5a:0d:2f:8b:95:aa:83:92:a1:94:20:c4: ed:e2:1a:8f:ac:29:1f:e5:81:fc:a4:ca:ca:f5:ed: 34:66:fc:91:96:60:2a:92:24:1f:ff:44:80:c8:81: 1f:f0:f5:1e:67:60:6a:2a:1f:29:24:d3:dd:dd:1d: 6c:62:8c:48:f3:22:e3:40:c1:d8:9c:ff:64:a4:69: 26:73:f3:e1:44:2b:ff:44:04:71:b5:67:39:17:0c: 3d:35:ff:36:66:2a:15:52:0c:83:d1:49:aa:43:82: 5d:bb:c2:48:53:0c:d1:1a:41:f5:be:59:80:e5:33: 5a:c7:86:8c:91:07:71:b1:c8:86:94:79:c6:57:17: df:76:d9:ca:8b:43:4a:80:54:8b:a3:42:e2:fe:1c: 16:10:a8:07:32:46:18:da:7e:74:22:aa:ac:3f:53: 30:5a:6e:f2:44:d0:da:ee:18:31:2b:a9:6f:5a:de: 7a:8c:25:a2:f9:fe:a6:ce:19:13:db:52:19:24:05: d7:9c:64:ad:e4:64:a5:64:a1:9a:18:3a:4d:07:8c: 56:00:16:bd:3d:83:9e:8b:cd:19:ac:9b:3e:65:38: e8:d8:3f:b4:45:cb:a0:13:d2:c9:41:fd:eb:4d:e1: e0:8e:7d:7e:5d:aa:6d:f8:d6:56:8b:1a:76:09:9b: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:37:FE:88:E0:09:ED:8B:3A:6A:EB:12:CC:31:AD:06:7E:80:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1a:65:07:86:86:a8:0b:a4:13:89:66:83:1b:06:9a:60:85: 06:23:03:5b:4e:95:6e:f2:dc:d0:19:09:8b:41:e3:89:99:31: e4:5f:4b:84:a3:d6:0d:41:0f:01:ba:1f:f7:9a:98:c5:e5:36: 38:a3:90:36:60:d1:fd:36:0f:a8:f4:10:a8:b5:8a:23:94:57: 1f:98:73:da:f9:49:dd:ae:98:81:70:c2:95:e2:ac:b3:92:43: f9:4e:42:b6:40:ec:67:40:01:1f:32:83:d8:e2:14:2c:e2:ab: 84:97:f3:10:77:c0:d6:8f:82:3f:0c:a0:24:03:65:be:49:40: e9:fc:d3:4c:bb:c1:d6:97:98:13:02:6d:2f:d5:b6:a6:02:b2: f7:50:9a:f5:91:c6:57:3e:74:68:4a:61:01:52:6f:59:24:92: 5b:fd:c3:c3:f4:82:a9:3b:5d:1b:21:53:ff:6e:30:20:a1:92: c7:c8:64:a4:15:93:c4:a1:22:0d:fa:14:bf:07:0f:dd:5a:aa: d9:8d:d2:e1:a6:09:f0:ca:52:bf:39:ba:3e:f9:21:b1:ec:42: d2:20:d1:41:5d:15:ac:5c:fb:ee:42:6c:93:86:83:83:2b:20: a4:c1:df:74:c5:b3:e3:2e:6a:6c:8c:3f:4b:f4:9c:dd:cc:9f: e0:98:29:93 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEtGFwe/NDEKbinSC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzViZWU2ZjUtNzZjYS00N2I3LTg1ODItYmM0NGFlNmQzODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE1aDS+LlaqDkqGUIMTt4hqPrCkf5YH8pMrK 9e00ZvyRlmAqkiQf/0SAyIEf8PUeZ2BqKh8pJNPd3R1sYoxI8yLjQMHYnP9kpGkm c/PhRCv/RARxtWc5Fww9Nf82ZioVUgyD0UmqQ4Jdu8JIUwzRGkH1vlmA5TNax4aM kQdxsciGlHnGVxffdtnKi0NKgFSLo0Li/hwWEKgHMkYY2n50IqqsP1MwWm7yRNDa 7hgxK6lvWt56jCWi+f6mzhkT21IZJAXXnGSt5GSlZKGaGDpNB4xWABa9PYOei80Z rJs+ZTjo2D+0RcugE9LJQf3rTeHgjn1+Xapt+NZWixp2CZuhgQIDAQABo4IDczCC A28wHQYDVR0OBBYEFB7cN/6I4Antizpq6xLMMa0GfoAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDIyMzEzNmEtOWM2ZS0z Y2E0LTg5ZjgtNWZkOTM4NGJhNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC0aZQeGhqgLpBOJ ZoMbBppghQYjA1tOlW7y3NAZCYtB44mZMeRfS4Sj1g1BDwG6H/eamMXlNjijkDZg 0f02D6j0EKi1iiOUVx+Yc9r5Sd2umIFwwpXirLOSQ/lOQrZA7GdAAR8yg9jiFCzi q4SX8xB3wNaPgj8MoCQDZb5JQOn800y7wdaXmBMCbS/VtqYCsvdQmvWRxlc+dGhK YQFSb1kkklv9w8P0gqk7XRshU/9uMCChksfIZKQVk8ShIg36FL8HD91aqtmN0uGm CfDKUr85uj75IbHsQtIg0UFdFaxc++5CbJOGg4MrIKTB33TFs+MuamyMP0v0nN3M n+CYKZM= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:47 2025 by rpki-client