$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa File: d7717f60-de75-372f-b4a7-3706f6fa274b.roa (raw, json) Hash identifier: 9VBu8moh1EiSIp6r3s8fVGGQGMj3oSe3JhuA6rEITVA= Subject key identifier: 8D:57:67:A6:F5:DB:86:4F:41:9E:F7:CC:64:16:F5:94:9C:82:05:D5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B61335A67B472FD7143ABE180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa Signing time: Wed 01 Oct 2025 18:04:35 +0000 ROA not before: Wed 01 Oct 2025 18:04:35 +0000 ROA not after: Tue 30 Dec 2025 19:04:35 +0000 asID: 34425 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:33:5a:67:b4:72:fd:71:43:ab:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 18:04:35 2025 GMT Not After : Dec 30 19:04:35 2025 GMT Subject: CN=b3bc5821-0496-4039-b8fd-960f4fdfe199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:61:c6:b3:e6:21:1b:8d:6a:d3:a4:e7:74: 71:74:dc:dc:58:b2:cb:56:4d:e0:0f:62:a2:4d:22: 77:9c:0c:50:02:f0:14:14:8d:0e:81:65:46:17:e6: 98:6d:d4:64:ca:67:0f:3e:8c:85:41:e3:c6:cf:bf: aa:a9:e3:c0:5d:6a:4b:d2:98:74:27:4b:70:c6:bb: 2e:7b:3e:18:e7:2a:a2:b4:b2:2b:0d:2f:85:a1:80: ec:24:c4:53:ff:db:03:00:3e:84:9c:74:09:10:fb: ce:77:00:4f:df:6f:30:69:f4:2b:2a:4c:51:70:6a: 3f:81:4d:01:55:f2:56:09:1b:18:c3:82:45:08:8a: ab:b2:67:f7:ed:5f:81:d5:fc:a5:ea:8d:54:33:d6: e1:d5:63:64:80:73:a6:bb:6e:f8:0e:2e:51:32:fc: c8:f0:8b:8f:19:a5:70:5d:b6:95:11:72:8d:d9:97: ac:26:6b:34:57:4e:90:76:fe:9f:42:90:d2:f4:04: e3:8e:e3:bd:08:7b:49:d9:5f:e1:6b:c5:bc:c6:89: 9b:a9:60:55:6e:a7:f5:58:a8:0f:fc:7d:f5:f2:75: 9e:b3:89:e4:c9:63:ed:c2:f8:bc:3c:ec:63:37:b2: 4b:25:63:e0:1a:42:aa:a0:80:8b:12:0b:2e:02:ce: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:57:67:A6:F5:DB:86:4F:41:9E:F7:CC:64:16:F5:94:9C:82:05:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7d:61:7e:57:59:e8:d7:ce:25:09:6e:08:cc:d5:87:16:f0: 86:1f:75:46:75:46:5b:9c:e4:e7:c7:e9:c1:81:15:e1:40:e6: cc:4e:dc:f0:5f:59:17:db:65:7b:1c:11:1d:3c:1f:dc:e7:84: c0:28:54:fb:c4:b3:2a:f4:46:bd:3c:f2:33:c3:ef:ad:7f:bd: 56:db:b7:60:07:cb:89:21:30:23:07:4c:aa:fa:4c:8a:70:28: 82:3f:ff:5b:61:0a:3f:3b:ae:22:8a:01:d9:10:18:9d:ce:ed: 5d:44:c9:53:dc:e6:d0:1d:7b:4b:45:67:36:3b:c1:f3:de:38: ca:f0:56:fd:3b:8b:1f:da:49:f2:b0:f1:57:de:19:d2:df:a2: 41:4d:14:80:ab:88:b8:00:de:78:77:73:fe:c0:44:eb:7f:b4: fb:da:74:7c:63:ec:1f:17:1b:38:4a:bc:78:ae:ac:f2:fe:30: 3c:22:3c:f4:09:12:c2:bd:97:fe:b6:73:50:5d:0d:92:79:79: 50:b7:a2:02:30:e6:0b:a1:a3:6d:f0:dd:44:5f:0e:d4:8e:12: df:e1:b0:cf:2d:1a:92:95:87:03:60:70:6e:27:1c:cf:35:88: 5c:75:e3:b2:d9:8b:0b:c2:44:6c:47:d0:24:02:9f:49:ef:21: 89:a5:af:d1 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthM1pntHL9cUOr4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE4MDQzNVoXDTI1MTIzMDE5MDQzNVowLzEtMCsGA1UEAxMk YjNiYzU4MjEtMDQ5Ni00MDM5LWI4ZmQtOTYwZjRmZGZlMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS1hxrPmIRuNatOk53RxdNzcWLLLVk3gD2Ki TSJ3nAxQAvAUFI0OgWVGF+aYbdRkymcPPoyFQePGz7+qqePAXWpL0ph0J0twxrsu ez4Y5yqitLIrDS+FoYDsJMRT/9sDAD6EnHQJEPvOdwBP328wafQrKkxRcGo/gU0B VfJWCRsYw4JFCIqrsmf37V+B1fyl6o1UM9bh1WNkgHOmu274Di5RMvzI8IuPGaVw XbaVEXKN2ZesJms0V06Qdv6fQpDS9ATjjuO9CHtJ2V/ha8W8xombqWBVbqf1WKgP /H318nWes4nkyWPtwvi8POxjN7JLJWPgGkKqoICLEgsuAs7vTQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFI1XZ6b124ZPQZ73zGQW9ZScggXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDc3MTdmNjAtZGU3NS0z NzJmLWI0YTctMzcwNmY2ZmEyNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABh9YX5XWejXziUJbgjM1YcW8IYfdUZ1Rluc5OfH 6cGBFeFA5sxO3PBfWRfbZXscER08H9znhMAoVPvEsyr0Rr088jPD761/vVbbt2AH y4khMCMHTKr6TIpwKII//1thCj87riKKAdkQGJ3O7V1EyVPc5tAde0tFZzY7wfPe OMrwVv07ix/aSfKw8VfeGdLfokFNFICriLgA3nh3c/7AROt/tPvadHxj7B8XGzhK vHiurPL+MDwiPPQJEsK9l/62c1BdDZJ5eVC3ogIw5guho23w3URfDtSOEt/hsM8t GpKVhwNgcG4nHM81iFx147LZiwvCRGxH0CQCn0nvIYmlr9E= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:47 2025 by rpki-client