$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa File: 0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa (raw, json) Hash identifier: ln+xVjLY7MyaArCwND/Jr7Ovm/kaUu51srdSRTDX1EE= Subject key identifier: 78:AE:E0:4F:E1:CD:96:B1:4A:5E:2E:96:FF:87:47:D6:5D:70:79:BB Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584B8983F566DF984C0485AD3700 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa Signing time: Thu 16 Oct 2025 04:39:19 +0000 ROA not before: Thu 16 Oct 2025 04:39:19 +0000 ROA not after: Wed 14 Jan 2026 05:39:19 +0000 asID: 46261 IP address blocks: 172.102.192.0/24 maxlen: 24 172.102.193.0/24 maxlen: 24 172.102.195.0/24 maxlen: 24 172.102.197.0/24 maxlen: 24 172.102.198.0/24 maxlen: 24 172.102.199.0/24 maxlen: 24 172.102.202.0/24 maxlen: 24 172.102.204.0/24 maxlen: 24 172.102.208.0/24 maxlen: 24 172.102.214.0/24 maxlen: 24 172.102.217.0/24 maxlen: 24 172.102.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:83:f5:66:df:98:4c:04:85:ad:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 16 04:39:19 2025 GMT Not After : Jan 14 05:39:19 2026 GMT Subject: CN=70e7fd4e-a92c-4946-9a2b-9dbccddc9a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:6a:12:9f:2f:16:8d:f1:ed:45:b0:05:89: 77:57:df:60:87:67:c9:6b:cf:5c:30:17:28:07:55: 72:6f:2f:07:40:2a:73:d9:1f:75:09:62:25:41:82: a3:17:33:10:3c:34:b2:0a:d9:28:df:70:af:6b:35: f2:42:45:2f:5b:7e:44:ba:83:2a:a3:1c:10:08:ab: 41:71:f8:37:b6:5e:1b:ee:e1:1e:34:f0:ae:eb:23: c1:a3:e1:05:3d:9c:00:83:22:4f:68:1f:ed:ee:44: 82:35:88:cb:c4:b8:99:37:9b:5c:0b:cd:5a:ed:7e: 99:b0:71:9a:21:d4:25:de:64:d1:a6:29:e7:3e:80: 99:44:76:ff:98:8d:97:ab:d5:8e:75:a8:49:fb:37: 67:fd:ef:2a:08:c8:c4:6c:fe:2b:dd:87:ce:90:8c: 1a:c8:37:3d:44:ce:85:80:33:20:84:e9:e1:e0:11: f4:c8:32:1d:14:b9:ee:82:fa:88:fa:eb:25:6b:7b: 0e:48:eb:9d:a3:1a:75:9d:de:c5:5d:1a:ae:31:fc: 82:12:e0:a2:f7:c0:53:fb:35:0f:ad:60:5c:6a:8a: 6e:20:ec:42:cc:df:da:40:3d:f2:23:d3:8c:26:a9: 9b:bb:10:73:2b:39:e3:e2:17:f6:da:a7:26:64:d6: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AE:E0:4F:E1:CD:96:B1:4A:5E:2E:96:FF:87:47:D6:5D:70:79:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0a40b2d2-fd24-3cac-a580-3ef2300515e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.192.0/23 172.102.195.0/24 172.102.197.0-172.102.199.255 172.102.202.0/24 172.102.204.0/24 172.102.208.0/24 172.102.214.0/24 172.102.217.0/24 172.102.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:05:a7:ba:0e:49:0d:6f:c0:bb:37:12:12:c1:79:c0:fa:4d: 88:8e:09:87:2d:ed:a2:da:43:0b:bb:b5:b0:7a:aa:c4:69:08: 48:d5:a7:46:26:6b:fc:f4:71:e7:93:54:af:5c:37:75:02:5d: c8:29:3b:d0:3c:3c:81:a1:85:e7:8e:1c:e1:dc:79:98:ec:6a: 85:e4:84:fa:eb:a4:4d:05:74:6a:68:f8:4c:5c:fe:64:df:ff: 86:93:8c:b0:02:65:50:d5:0d:8b:d2:8b:8a:d1:ef:72:9b:ec: 90:cc:c8:64:1a:1a:49:6c:56:bc:15:df:63:ae:57:9a:bf:cf: cc:5f:5e:39:c2:81:27:c8:29:13:a4:e1:d9:20:31:31:51:a9: bd:36:54:af:bd:91:77:30:ac:78:38:fb:a9:3e:db:4a:82:ea: 26:82:6d:86:30:38:f9:ed:b2:f2:f1:ad:6b:ba:3b:5b:f7:77: 31:c2:3f:ae:12:1b:3e:b1:92:cd:f0:df:59:1f:39:cc:45:83: 15:33:17:c7:b4:88:fe:b0:9a:27:67:41:70:ce:3f:2e:da:63: 34:9e:39:2c:d3:1a:72:3d:29:08:cb:5e:b0:17:ba:f5:32:de: ba:b1:9b:53:17:b6:a1:b1:29:d6:ee:02:06:44:07:a3:da:81: 69:3a:a0:d8 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEuJg/Vm35hMBIWtNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MTAxNjA0MzkxOVoXDTI2MDExNDA1MzkxOVowLzEtMCsGA1UEAxMk NzBlN2ZkNGUtYTkyYy00OTQ2LTlhMmItOWRiY2NkZGM5YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJlqEp8vFo3x7UWwBYl3V99gh2fJa89cMBco B1Vyby8HQCpz2R91CWIlQYKjFzMQPDSyCtko33CvazXyQkUvW35EuoMqoxwQCKtB cfg3tl4b7uEeNPCu6yPBo+EFPZwAgyJPaB/t7kSCNYjLxLiZN5tcC81a7X6ZsHGa IdQl3mTRpinnPoCZRHb/mI2Xq9WOdahJ+zdn/e8qCMjEbP4r3YfOkIwayDc9RM6F gDMghOnh4BH0yDIdFLnugvqI+usla3sOSOudoxp1nd7FXRquMfyCEuCi98BT+zUP rWBcaopuIOxCzN/aQD3yI9OMJqmbuxBzKznj4hf22qcmZNYL7wIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFHiu4E/hzZaxSl4ulv+HR9ZdcHm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMGE0MGIyZDItZmQyNC0z Y2FjLWE1ODAtM2VmMjMwMDUxNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBrGbAAwQA rGbDMAwDBACsZsUDBAOsZsADBACsZsoDBACsZswDBACsZtADBACsZtYDBACsZtkD BACsZtwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcAWnug5JDW/AuzcSEsF5wPpNiI4Jhy3totpDC7u1sHqq xGkISNWnRiZr/PRx55NUr1w3dQJdyCk70Dw8gaGF544c4dx5mOxqheSE+uukTQV0 amj4TFz+ZN//hpOMsAJlUNUNi9KLitHvcpvskMzIZBoaSWxWvBXfY65Xmr/PzF9e OcKBJ8gpE6Th2SAxMVGpvTZUr72RdzCseDj7qT7bSoLqJoJthjA4+e2y8vGta7o7 W/d3McI/rhIbPrGSzfDfWR85zEWDFTMXx7SI/rCaJ2dBcM4/LtpjNJ45LNMacj0p CMtesBe69TLeurGbUxe2obEp1u4CBkQHo9qBaTqg2A== -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:46 2025 by rpki-client