$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json) Hash identifier: cQjzgOzgo+1KFPCYuuyJTXHWV598DDvH04F39fTy9hw= Subject key identifier: 9C:5D:5B:1F:CA:1E:06:77:57:47:7C:64:9D:2C:DA:A3:CB:B4:2C:DF Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584B48E1BF6A9E35BEC6A161E2C0 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 398777 IP address blocks: 24.233.144.0/20 maxlen: 20 149.137.160.0/19 maxlen: 19 192.173.152.0/21 maxlen: 21 2605:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bf:6a:9e:35:be:c6:a1:61:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f0573a4c-77e2-4dc5-ad71-1e35a8248e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:c9:c7:0e:24:6e:40:28:11:8f:f9:39:e7: 60:07:8f:37:af:1b:36:d3:2d:b7:42:61:a1:10:4c: 5c:d2:93:1d:c2:57:8b:98:47:5e:5f:16:b2:80:5d: 56:d8:e7:09:be:12:bd:4b:70:77:2e:21:7d:cb:65: c2:f8:a2:7b:16:a3:31:c6:4d:44:fa:60:08:cb:92: 7a:e5:79:51:d7:fd:89:47:b6:52:22:c4:06:e1:a1: 77:85:0d:d3:8b:ad:a6:bf:bf:6e:72:14:0a:9d:7d: 4d:6a:ad:d8:98:7c:b0:8b:f4:06:64:01:0e:5c:35: b6:55:51:5b:d4:b7:d3:f9:76:e3:9f:90:44:7c:93: 4c:d1:f1:de:ce:7a:8c:b8:dd:f7:44:af:b3:49:6a: 9c:69:9b:28:3b:13:dd:6b:74:f2:0b:53:57:fc:fb: 8e:72:40:4c:75:2c:bd:1b:d0:2f:b0:75:39:c3:12: c5:e1:58:53:15:61:62:8e:d7:2e:50:26:4c:9e:27: 74:02:c2:09:5b:8f:be:d5:08:2f:12:ad:ab:4d:19: 66:5a:14:b1:c1:46:21:3b:28:d8:9e:46:56:af:31: 43:03:9f:22:9a:09:57:df:e6:7e:2e:fc:c9:fc:28: 9a:e9:70:90:e3:84:a1:42:ff:0d:14:8a:e1:d0:20: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5D:5B:1F:CA:1E:06:77:57:47:7C:64:9D:2C:DA:A3:CB:B4:2C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: 24.233.144.0/20 149.137.160.0/19 192.173.152.0/21 IPv6: 2605:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6f:08:39:a1:b5:0c:29:a6:e8:5e:3c:a3:d6:fe:72:4d:11: 7e:d9:ae:74:fa:83:5e:c6:14:42:d6:8b:f9:b2:fa:1f:94:af: 50:99:cd:09:1d:7d:57:30:ab:5a:99:02:5b:cc:c8:e5:72:fe: a0:ce:97:be:08:c0:ea:49:7c:53:c9:a6:93:b5:10:02:db:df: 3a:23:da:00:dd:47:e0:21:84:43:ee:28:93:36:3d:53:58:17: 47:ec:07:31:71:a2:9f:bb:40:07:5e:62:7f:a1:80:98:ee:d7: fc:88:cd:10:78:78:58:ea:e8:be:69:05:f6:00:b1:47:99:2b: 11:41:df:26:ac:9d:6b:78:a8:b5:a7:48:ad:88:7a:da:e3:4f: e4:1e:52:4b:a4:f1:57:03:b7:5a:1c:9d:55:da:a3:da:da:d0: 09:78:4f:d8:8c:38:70:01:81:bb:a7:2e:37:c0:3b:1d:5d:58: 23:27:fe:1c:60:66:1c:14:f2:57:58:8d:2f:b2:1a:9f:b4:f1: b4:41:64:2c:c7:4e:04:ba:a2:e3:f3:82:f0:22:06:a5:1e:6a: 85:b0:30:9e:63:1f:af:45:86:30:70:c3:ba:8b:2e:78:a2:c6: 24:48:ed:21:d6:53:bb:28:4c:2f:cc:2f:12:d1:44:76:30:8f: 5c:32:46:00 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEtI4b9qnjW+xqFh4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA1NzNhNGMtNzdlMi00ZGM1LWFkNzEtMWUzNWE4MjQ4ZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMLJxw4kbkAoEY/5OedgB483rxs20y23QmGh EExc0pMdwleLmEdeXxaygF1W2OcJvhK9S3B3LiF9y2XC+KJ7FqMxxk1E+mAIy5J6 5XlR1/2JR7ZSIsQG4aF3hQ3Ti62mv79uchQKnX1Naq3YmHywi/QGZAEOXDW2VVFb 1LfT+Xbjn5BEfJNM0fHeznqMuN33RK+zSWqcaZsoOxPda3TyC1NX/PuOckBMdSy9 G9AvsHU5wxLF4VhTFWFijtcuUCZMnid0AsIJW4++1QgvEq2rTRlmWhSxwUYhOyjY nkZWrzFDA58imglX3+Z+LvzJ/Cia6XCQ44ShQv8NFIrh0CD/dwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJxdWx/KHgZ3V0d8ZJ0s2qPLtCzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvNzU0NWZhOTYtOGY3My0z NGY5LTk3YjAtM2QwZmEyYjM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEGOmQAwQF lYmgAwQDwK2YMA0EAgACMAcDBQAmBexAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALhvCDmhtQwppuhePKPW /nJNEX7ZrnT6g17GFELWi/my+h+Ur1CZzQkdfVcwq1qZAlvMyOVy/qDOl74IwOpJ fFPJppO1EALb3zoj2gDdR+AhhEPuKJM2PVNYF0fsBzFxop+7QAdeYn+hgJju1/yI zRB4eFjq6L5pBfYAsUeZKxFB3yasnWt4qLWnSK2IetrjT+QeUkuk8VcDt1ocnVXa o9ra0Al4T9iMOHABgbunLjfAOx1dWCMn/hxgZhwU8ldYjS+yGp+08bRBZCzHTgS6 ouPzgvAiBqUeaoWwMJ5jH69FhjBww7qLLniixiRI7SHWU7soTC/MLxLRRHYwj1wy RgA= -----END CERTIFICATE-----Generated at Fri Oct 10 14:09:20 2025 by rpki-client