$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa File: 385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json) Hash identifier: WiobldHZPoksD+i074emjBCDW0bR37sA/8gGLjm5kxo= Subject key identifier: 5B:D0:22:E2:B7:07:8D:94:29:59:F8:A7:22:B3:31:DB:BA:1B:BB:84 Certificate issuer: /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e Certificate serial: 010D0C9F4328584B3556EC02817D41E6EBEC9600 Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 396226 IP address blocks: 66.146.226.0/23 maxlen: 24 148.59.145.0/24 maxlen: 24 173.231.64.0/23 maxlen: 24 173.231.68.0/22 maxlen: 24 199.193.59.0/24 maxlen: 24 200.50.128.0/21 maxlen: 24 209.142.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:ec:02:81:7d:41:e6:eb:ec:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=3a46e821-4ba5-45d0-bf36-b95becf6e500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:53:2b:41:22:e7:73:8c:66:99:4a:b8:c6: 8a:45:07:0d:b0:27:69:81:90:c4:18:0b:04:c5:86: ac:23:eb:48:f9:ec:4b:52:e2:56:3c:40:23:37:a7: 4a:07:d3:fd:58:73:69:b5:0b:80:0f:20:a7:27:9f: 6c:a1:c2:5d:b2:10:8e:0c:b1:0b:e5:a9:8f:f1:41: 70:b2:7e:71:23:83:1a:4f:46:20:9b:8f:96:69:d0: 62:d2:f7:d0:63:2e:0d:48:7e:51:f9:0c:fd:91:54: f0:08:4c:3a:b1:19:46:db:76:fc:c2:47:24:21:33: 6e:fa:c2:22:cb:20:09:99:95:68:6b:fe:70:d8:ea: 72:4d:d9:07:bf:ce:89:e0:40:9f:ed:d5:6a:24:8a: 3a:7b:e0:a8:3d:6a:ac:a5:e5:b7:d1:b9:11:77:2d: 8d:44:96:a3:08:7e:30:59:00:8e:56:d5:ac:4d:e7: 4a:7d:40:1d:d7:28:d1:96:7c:57:93:90:f2:76:59: f9:dd:29:0e:46:7b:23:53:ae:72:f9:3d:0a:3a:fa: 66:ca:17:1b:54:e7:de:27:a9:5a:46:03:9b:fd:cf: ce:11:04:54:0d:d7:25:f6:6f:ab:e3:75:21:8b:10: 52:15:06:e0:8a:ad:f8:5f:2e:1a:75:29:be:f6:25: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:22:E2:B7:07:8D:94:29:59:F8:A7:22:B3:31:DB:BA:1B:BB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl X509v3 Authority Key Identifier: keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer sbgp-ipAddrBlock: critical IPv4: 66.146.226.0/23 148.59.145.0/24 173.231.64.0/23 173.231.68.0/22 199.193.59.0/24 200.50.128.0/21 209.142.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6d:4c:63:e8:3f:86:de:2f:40:69:59:fb:ec:c3:ab:56:45: 3b:c3:6e:00:75:9e:8e:c0:c0:8b:8c:ab:cd:49:ef:07:94:37: da:98:1d:8d:7e:0a:32:6c:45:d1:90:40:e7:b1:31:e0:0b:7c: 4b:a1:80:bd:e3:e0:50:45:0d:bf:fe:dc:30:d2:29:64:bc:9c: 14:6d:62:46:ba:fe:99:9a:6c:08:01:60:26:17:f1:d3:4b:a4: 6d:1d:78:19:52:da:af:91:dd:6b:23:63:bf:3d:f5:85:d8:3d: 29:99:72:ca:cb:57:13:e4:83:d5:aa:fb:a6:a0:86:bc:d6:f0: 92:88:4d:4b:46:60:9a:08:2d:4e:fa:8a:11:93:bb:03:5d:ec: 32:ca:54:5f:c3:8e:c5:0e:43:7d:1f:34:1c:69:62:cc:cc:04: 64:84:53:8c:53:df:a6:90:f0:5b:18:be:ab:ec:4e:44:1c:4a: e5:ba:2f:e6:3e:67:3c:dc:88:4b:15:2b:8e:ef:b4:b7:0b:59: 02:06:a8:10:f2:e7:a5:30:83:47:18:6c:e2:d9:ed:c0:46:02: f0:09:43:7c:3c:ea:d3:05:bf:38:1e:98:18:ab:4f:7c:71:bf: a5:ab:c9:83:70:eb:6b:1f:72:01:54:53:78:63:21:fc:76:c6: 96:0c:07:09 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEs1VuwCgX1B5uvslgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI0YWIxOGYtN2JkNC00MzlkLWE2YWYtZjI2MDVjZjgx MzBlMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk M2E0NmU4MjEtNGJhNS00NWQwLWJmMzYtYjk1YmVjZjZlNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3ZTK0Ei53OMZplKuMaKRQcNsCdpgZDEGAsE xYasI+tI+exLUuJWPEAjN6dKB9P9WHNptQuADyCnJ59socJdshCODLEL5amP8UFw sn5xI4MaT0Ygm4+WadBi0vfQYy4NSH5R+Qz9kVTwCEw6sRlG23b8wkckITNu+sIi yyAJmZVoa/5w2OpyTdkHv86J4ECf7dVqJIo6e+CoPWqspeW30bkRdy2NRJajCH4w WQCOVtWsTedKfUAd1yjRlnxXk5Dydln53SkORnsjU65y+T0KOvpmyhcbVOfeJ6la RgOb/c/OEQRUDdcl9m+r43UhixBSFQbgiq34Xy4adSm+9iXohQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFFvQIuK3B42UKVn4pyKzMdu6G7uEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjRh YjE4Zi03YmQ0LTQzOWQtYTZhZi1mMjYwNWNmODEzMGUvMzg1ZDllM2UtZTVlMS0z NTJlLThkM2UtNzQ3YTRlMWE2ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTI0YWIxOGYtN2JkNC00MzlkLWE2 YWYtZjI2MDVjZjgxMzBlL2EyNGFiMThmLTdiZDQtNDM5ZC1hNmFmLWYyNjA1Y2Y4 MTMwZS5jcmwwHwYDVR0jBBgwFoAUORu/5wmp9cSw61/zj13cdPv2VbgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMjRhYjE4Zi03YmQ0LTQzOWQtYTZhZi1mMjYw NWNmODEzMGUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQpLiAwQA lDuRAwQBredAAwQCredEAwQAx8E7AwQDyDKAAwQC0Y5IMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABVtTGPo P4beL0BpWfvsw6tWRTvDbgB1no7AwIuMq81J7weUN9qYHY1+CjJsRdGQQOexMeAL fEuhgL3j4FBFDb/+3DDSKWS8nBRtYka6/pmabAgBYCYX8dNLpG0deBlS2q+R3Wsj Y7899YXYPSmZcsrLVxPkg9Wq+6aghrzW8JKITUtGYJoILU76ihGTuwNd7DLKVF/D jsUOQ30fNBxpYszMBGSEU4xT36aQ8FsYvqvsTkQcSuW6L+Y+ZzzciEsVK47vtLcL WQIGqBDy56Uwg0cYbOLZ7cBGAvAJQ3w86tMFvzgemBirT3xxv6WryYNw62sfcgFU U3hjIfx2xpYMBwk= -----END CERTIFICATE-----Generated at Fri Oct 10 22:34:38 2025 by rpki-client