$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa File: f63a78b0-0176-358a-8dd9-ad11798127ad.roa (raw, json) Hash identifier: WGpDO3ZcvVL68JW7BnmtTSK0/ajCJ8A6WMkxK7/3P18= Subject key identifier: 70:80:7C:D9:24:53:08:25:68:B9:F1:9D:9C:79:FA:0B:01:4E:7E:DF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4617081C751DE1D9E27E6A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 7843 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:08:1c:75:1d:e1:d9:e2:7e:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=afb195a8-b5db-4c29-93bc-ac0ad2a1b92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:21:8a:04:12:8c:55:45:bd:02:d8:25:26: 7a:a5:ee:a4:54:a6:ad:36:2c:29:f1:b3:26:f6:df: 4e:49:de:90:bb:2e:c1:7e:86:71:a9:a3:bd:3e:43: 2a:61:7b:77:c3:4d:c4:0e:03:76:18:17:e5:d6:eb: ff:57:f5:e8:c2:f4:d4:46:b4:70:42:a1:29:2d:3e: 79:a3:e0:f5:fb:32:98:da:a5:fe:16:bf:d3:7b:0b: 0e:4d:05:2e:6c:c6:b7:8e:ee:7f:16:ff:8f:34:dd: 76:17:e1:0c:8c:39:30:39:f1:11:d3:f0:35:51:d9: c9:f9:ce:49:a3:25:68:3e:96:7c:5d:4f:da:01:66: da:d0:f5:b1:49:b1:80:33:23:08:f5:ad:33:2d:2b: 7f:98:bb:cf:ab:dc:94:d2:43:b7:ab:ba:9a:35:76: e2:28:36:d7:f4:20:8e:9b:a7:0c:8a:54:ec:21:c6: f4:1d:df:d2:96:77:be:37:e7:a7:da:a2:8b:9d:55: fd:d9:92:b7:9c:83:46:ba:51:8b:38:dd:c6:c6:e1: 44:8b:84:51:c6:76:8a:bf:98:c7:27:85:58:a2:2f: fc:6f:d0:e0:83:32:06:27:1d:a7:ef:3b:bd:31:e2: 8d:0a:fd:a0:d5:3e:a2:a8:7b:ef:a4:65:36:cf:6c: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:80:7C:D9:24:53:08:25:68:B9:F1:9D:9C:79:FA:0B:01:4E:7E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f63a78b0-0176-358a-8dd9-ad11798127ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:fa:33:bd:42:32:f0:5a:d0:33:e5:c2:6d:22:9a:ca:4f:24: 1a:b9:0a:f6:45:92:04:f0:ee:ae:cd:1d:c6:0b:e9:67:96:e0: 97:a3:a7:d9:c2:b5:70:b1:3f:db:bf:c1:96:50:3f:e1:d1:e7: d0:d7:9d:f0:f6:2e:98:38:f2:9f:8b:16:3e:ae:0d:a3:05:0d: f2:2c:80:0d:b9:09:c4:a9:7b:62:df:cd:12:e1:56:10:33:47: c6:1a:1c:57:a9:65:2d:ef:fa:7d:f8:e6:ee:d0:12:79:a7:ea: 23:1b:8a:96:83:6e:af:ce:91:69:c8:ef:17:84:d6:56:a4:cd: 97:2f:03:20:39:8f:67:11:cb:cb:1d:57:4d:28:b7:63:90:fd: 74:07:d1:21:c3:24:55:37:54:34:ae:fd:a6:4a:88:1f:35:09: 30:3b:51:7e:15:32:4d:ff:2e:7f:59:41:62:0a:53:17:3d:4b: 42:d0:2a:bf:62:03:78:28:d7:f1:2a:c9:2c:15:90:75:f8:ed: 76:89:3b:72:5e:3f:ff:43:b2:dd:65:6e:ea:06:39:13:ea:4b: 4b:cb:2f:ec:5c:56:93:74:44:67:86:0a:38:d8:19:b9:02:16: b2:9b:4c:97:55:7c:88:9a:f7:b0:2c:74:57:0a:69:62:e6:eb: 2e:23:98:b5 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEtGFwgcdR3h2eJ+aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWZiMTk1YTgtYjVkYi00YzI5LTkzYmMtYWMwYWQyYTFiOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvkhigQSjFVFvQLYJSZ6pe6kVKatNiwp8bMm 9t9OSd6Quy7BfoZxqaO9PkMqYXt3w03EDgN2GBfl1uv/V/XowvTURrRwQqEpLT55 o+D1+zKY2qX+Fr/TewsOTQUubMa3ju5/Fv+PNN12F+EMjDkwOfER0/A1UdnJ+c5J oyVoPpZ8XU/aAWba0PWxSbGAMyMI9a0zLSt/mLvPq9yU0kO3q7qaNXbiKDbX9CCO m6cMilTsIcb0Hd/Slne+N+en2qKLnVX92ZK3nINGulGLON3GxuFEi4RRxnaKv5jH J4VYoi/8b9DggzIGJx2n7zu9MeKNCv2g1T6iqHvvpGU2z2zyKwIDAQABo4IDczCC A28wHQYDVR0OBBYEFHCAfNkkUwglaLnxnZx5+gsBTn7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjYzYTc4YjAtMDE3Ni0z NThhLThkZDktYWQxMTc5ODEyN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMv6M71CMvBa0DPl wm0imspPJBq5CvZFkgTw7q7NHcYL6WeW4Jejp9nCtXCxP9u/wZZQP+HR59DXnfD2 Lpg48p+LFj6uDaMFDfIsgA25CcSpe2LfzRLhVhAzR8YaHFepZS3v+n345u7QEnmn 6iMbipaDbq/OkWnI7xeE1lakzZcvAyA5j2cRy8sdV00ot2OQ/XQH0SHDJFU3VDSu /aZKiB81CTA7UX4VMk3/Ln9ZQWIKUxc9S0LQKr9iA3go1/EqySwVkHX47XaJO3Je P/9Dst1lbuoGORPqS0vLL+xcVpN0RGeGCjjYGbkCFrKbTJdVfIia97AsdFcKaWLm 6y4jmLU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:16 2025 by rpki-client