$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: hp4woR8EUBhXgIqGbGhEaxJmSDac3K1+L52yX5JUWR8= Subject key identifier: FF:AE:A2:75:2A:1E:F8:FD:A1:43:CE:1E:1E:55:3C:F7:A0:FA:E2:07 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584B3D52050B357FF482EB743110 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 25 137.187.0.0/16 maxlen: 25 156.40.0.0/18 maxlen: 25 156.40.64.0/20 maxlen: 25 156.40.80.0/21 maxlen: 25 156.40.88.0/22 maxlen: 25 156.40.92.0/24 maxlen: 25 156.40.96.0/19 maxlen: 25 156.40.128.0/18 maxlen: 25 156.40.192.0/22 maxlen: 25 156.40.196.0/24 maxlen: 25 156.40.198.0/23 maxlen: 25 156.40.200.0/21 maxlen: 25 156.40.208.0/20 maxlen: 25 156.40.224.0/19 maxlen: 25 165.112.0.0/16 maxlen: 25 192.231.145.0/24 maxlen: 29 192.231.146.0/24 maxlen: 29 192.231.147.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:52:05:0b:35:7f:f4:82:eb:74:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=6b2be9b9-eaa6-42d3-9a09-6e58bf068ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:6a:e7:c5:5a:b2:0f:9f:28:a2:18:ee:e6: 64:25:fa:6f:00:e5:bb:ee:5b:65:a0:64:3f:5d:34: df:b8:00:4f:88:45:73:76:68:aa:b6:56:6d:5c:c6: c7:18:81:cf:e3:4c:4e:3a:f2:bf:d6:b9:22:9f:da: c8:ec:7f:a3:55:9e:8f:3e:33:36:ea:2c:51:a8:8e: 86:c9:f1:90:da:8b:be:0b:fe:02:da:4f:5c:8a:72: 40:90:b6:95:54:4e:c8:fe:de:e4:72:ea:47:be:43: fd:46:a4:44:5c:24:4e:18:81:21:43:35:a6:bb:68: 70:27:25:71:bb:ad:47:a6:1c:56:70:58:58:d6:f5: 86:ff:2c:33:ba:de:98:8a:31:25:56:09:d1:f0:c5: 14:a2:f1:3c:3f:59:9f:2c:fd:29:be:a3:31:f9:3c: 7c:ab:67:cb:4a:27:f2:e8:6e:20:46:c2:71:0d:fe: 0a:0b:e9:02:d7:00:19:e6:ca:33:e9:bc:f1:1d:d5: 8b:1f:b2:16:5f:d9:e9:d1:05:cf:ef:df:35:01:19: 95:c0:a0:c5:45:d0:f3:a3:19:6c:29:ff:88:c2:81: 93:d5:a5:ee:ef:7e:eb:87:f2:d9:ba:72:c1:43:81: 28:f6:1a:e6:b1:1e:5a:b4:29:1b:0e:b1:94:ce:01: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AE:A2:75:2A:1E:F8:FD:A1:43:CE:1E:1E:55:3C:F7:A0:FA:E2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:79:da:d7:d5:da:40:ab:93:6a:4e:ca:6f:47:ec:7e:12:6b: ce:94:a0:30:3f:7f:ec:75:1f:91:69:86:75:ba:19:04:48:45: 3d:15:5b:c9:d4:3a:38:2c:b4:8f:f2:8b:df:2b:d7:5c:f8:f3: 7a:42:e5:c7:bf:f7:af:4b:ce:6e:8d:61:1e:2e:7c:51:26:79: 65:c6:f5:44:32:f6:77:4d:19:56:18:ec:e2:77:12:15:f9:99: 18:10:88:74:8d:1c:e1:1f:de:a6:01:95:87:9d:a7:a9:4a:fa: 9e:47:94:56:20:9e:a1:9c:87:70:04:01:36:b5:f2:c9:8e:e0: eb:a0:75:d0:31:91:32:63:92:ec:56:90:eb:c8:33:bd:63:a7: 36:eb:45:19:92:ff:cc:ae:f0:e2:fb:58:27:a6:49:98:4e:77: ee:bf:7a:be:83:ff:5a:4b:83:ff:c1:af:e3:b0:fe:48:fa:0c: cf:9f:1c:d3:3f:06:91:72:b4:f5:9d:c5:d9:61:44:bc:62:4c: 7f:70:00:90:58:5c:57:10:85:00:9e:49:a3:0b:6e:b0:ad:38: 1d:23:ff:f4:6d:52:da:b7:94:e1:15:e1:de:4d:30:c5:9f:c7: ac:ba:d9:9b:20:7a:24:e7:ab:3d:08:fd:b9:e2:69:89:c3:62: 70:60:76:5a -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEs9UgULNX/0gut0MRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmIyYmU5YjktZWFhNi00MmQzLTlhMDktNmU1OGJmMDY4YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FFq58Vasg+fKKIY7uZkJfpvAOW77ltloGQ/ XTTfuABPiEVzdmiqtlZtXMbHGIHP40xOOvK/1rkin9rI7H+jVZ6PPjM26ixRqI6G yfGQ2ou+C/4C2k9cinJAkLaVVE7I/t7kcupHvkP9RqREXCROGIEhQzWmu2hwJyVx u61HphxWcFhY1vWG/ywzut6YijElVgnR8MUUovE8P1mfLP0pvqMx+Tx8q2fLSify 6G4gRsJxDf4KC+kC1wAZ5soz6bzxHdWLH7IWX9np0QXP7981ARmVwKDFRdDzoxls Kf+IwoGT1aXu737rh/LZunLBQ4Eo9hrmsR5atCkbDrGUzgEWKwIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFP+uonUqHvj9oUPOHh5VPPeg+uIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABJ52tfV2kCrk2pOym9H7H4Sa86UoDA/f+x1 H5FphnW6GQRIRT0VW8nUOjgstI/yi98r11z483pC5ce/969Lzm6NYR4ufFEmeWXG 9UQy9ndNGVYY7OJ3EhX5mRgQiHSNHOEf3qYBlYedp6lK+p5HlFYgnqGch3AEATa1 8smO4OugddAxkTJjkuxWkOvIM71jpzbrRRmS/8yu8OL7WCemSZhOd+6/er6D/1pL g//Br+Ow/kj6DM+fHNM/BpFytPWdxdlhRLxiTH9wAJBYXFcQhQCeSaMLbrCtOB0j //RtUtq3lOEV4d5NMMWfx6y62ZsgeiTnqz0I/bniaYnDYnBgdlo= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:19 2025 by rpki-client