$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json) Hash identifier: V+Okv/TzJnNUNRmpkwDuX/d0KHE/vYCh3Z7h+pWQ7zA= Subject key identifier: C1:08:EE:D3:7A:B7:7A:9B:ED:CB:DB:98:EB:F5:1D:26:52:89:5A:06 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F4328584B821CCE313AF26D1F84F98380 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46844 IP address blocks: 45.58.128.0/18 maxlen: 24 64.32.0.0/19 maxlen: 24 67.21.64.0/19 maxlen: 24 70.39.64.0/18 maxlen: 24 104.37.244.0/22 maxlen: 24 104.160.160.0/19 maxlen: 24 107.167.0.0/19 maxlen: 24 170.178.160.0/19 maxlen: 24 174.128.224.0/19 maxlen: 24 198.148.80.0/20 maxlen: 24 199.115.100.0/22 maxlen: 24 204.188.192.0/18 maxlen: 24 208.98.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ce:31:3a:f2:6d:1f:84:f9:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f5087b75-9cd2-41af-811a-3c7aed30271d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:73:89:c2:e3:43:e9:b7:c8:20:af:2e:3e: 1b:eb:e9:4a:8d:2c:cb:ca:70:c5:4b:2b:37:eb:48: 1e:63:8b:83:a5:16:2f:9d:fe:0f:e0:e1:a0:76:89: 4c:bb:5b:9f:20:7b:53:1c:22:67:96:34:f3:55:8b: 33:06:ae:df:bb:71:b1:b9:37:a6:b0:0e:66:d1:0e: 8d:34:56:e8:74:8e:a0:39:f1:58:a7:8b:2b:00:87: 03:74:8d:4a:05:3d:00:9f:00:de:d6:4a:ec:cb:66: 24:f3:6a:60:7f:de:9d:9b:03:0a:4c:c5:f0:3d:df: 8c:5c:ec:18:25:87:db:17:9d:8e:76:ea:72:0e:a5: 89:24:b9:c6:9c:83:a9:7b:ca:7b:ab:89:d9:4d:8b: 61:11:b1:a3:e4:a1:41:4d:28:4e:3b:d7:11:41:5e: 1c:ec:51:dd:4c:cb:19:1c:c9:79:8d:46:66:16:da: 3e:c0:23:df:86:8c:58:1c:05:d2:1d:e7:db:46:6f: 1a:3a:12:54:c3:e9:d6:5c:82:60:2c:6e:b5:62:08: 19:ab:8a:a4:2e:f2:99:03:20:e3:ee:63:92:ef:a5: 26:42:ea:ba:8c:3d:df:4a:eb:4e:be:4b:73:82:cd: 28:2f:0b:69:93:a6:bc:b9:54:4e:1c:62:29:6e:1b: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:08:EE:D3:7A:B7:7A:9B:ED:CB:DB:98:EB:F5:1D:26:52:89:5A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 45.58.128.0/18 64.32.0.0/19 67.21.64.0/19 70.39.64.0/18 104.37.244.0/22 104.160.160.0/19 107.167.0.0/19 170.178.160.0/19 174.128.224.0/19 198.148.80.0/20 199.115.100.0/22 204.188.192.0/18 208.98.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cd:2f:cc:05:0b:4b:bd:a5:30:a1:2c:cf:fa:88:ec:4c:64: a4:74:22:b4:d3:2e:6d:a7:d3:2a:67:49:75:0c:71:12:67:c6: 0a:41:a5:cd:2f:01:18:f8:8c:5a:b4:12:c4:02:eb:38:80:82: 11:17:ec:4b:70:5a:a1:cb:21:6f:fd:8c:fe:f3:52:fe:97:19: 18:1a:86:a1:37:44:4d:f5:73:0c:5b:32:db:f6:4f:60:0c:f7: ca:f8:3c:03:1a:4e:8e:5a:7e:a8:03:8e:77:ac:75:85:5d:b2: 44:d5:31:c1:6e:94:f7:a3:c1:68:e8:7a:66:05:1a:74:37:90: b2:ab:2d:a9:0f:6a:55:91:a4:39:29:e9:da:24:32:23:c6:79: 5c:06:29:9c:b2:cc:58:26:32:e4:41:f8:9a:e1:28:82:b1:9f: 86:d0:08:cf:ae:57:a9:8a:b2:01:1d:57:77:8c:b0:95:dc:7e: 68:e1:ee:93:07:81:90:e6:52:f9:86:17:bf:2f:ba:17:6a:9f: b3:d5:9c:07:de:0e:51:83:0f:97:b8:a2:05:c7:3e:c3:0f:22: 2b:ad:f9:67:2a:d5:55:40:04:d1:b9:b5:61:b8:72:cb:7f:63: c2:e9:24:d7:09:e2:ea:8e:b7:30:20:0c:d7:34:62:a3:12:13: ae:e9:9d:8a -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEuCHM4xOvJtH4T5g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjUwODdiNzUtOWNkMi00MWFmLTgxMWEtM2M3YWVkMzAyNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qVzicLjQ+m3yCCvLj4b6+lKjSzLynDFSys3 60geY4uDpRYvnf4P4OGgdolMu1ufIHtTHCJnljTzVYszBq7fu3GxuTemsA5m0Q6N NFbodI6gOfFYp4srAIcDdI1KBT0AnwDe1krsy2Yk82pgf96dmwMKTMXwPd+MXOwY JYfbF52OdupyDqWJJLnGnIOpe8p7q4nZTYthEbGj5KFBTShOO9cRQV4c7FHdTMsZ HMl5jUZmFto+wCPfhoxYHAXSHefbRm8aOhJUw+nWXIJgLG61YggZq4qkLvKZAyDj 7mOS76UmQuq6jD3fSutOvktzgs0oLwtpk6a8uVROHGIpbhuAGQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFMEI7tN6t3qb7cvbmOv1HSZSiVoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnNL8wFC0u9pTChLM/6iOxM ZKR0IrTTLm2n0ypnSXUMcRJnxgpBpc0vARj4jFq0EsQC6ziAghEX7EtwWqHLIW/9 jP7zUv6XGRgahqE3RE31cwxbMtv2T2AM98r4PAMaTo5afqgDjnesdYVdskTVMcFu lPejwWjoemYFGnQ3kLKrLakPalWRpDkp6dokMiPGeVwGKZyyzFgmMuRB+JrhKIKx n4bQCM+uV6mKsgEdV3eMsJXcfmjh7pMHgZDmUvmGF78vuhdqn7PVnAfeDlGDD5e4 ogXHPsMPIiut+Wcq1VVABNG5tWG4cst/Y8LpJNcJ4uqOtzAgDNc0YqMSE67pnYo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:31 2025 by rpki-client