$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa File: 3af3f3e9-925f-3f08-8530-42b4b99328f5.roa (raw, json) Hash identifier: M1WAgEMXJLxqiYqZ4eaLN5x02tga/GRXQ9zIxZEsqiY= Subject key identifier: B7:8A:28:8E:78:CF:43:D5:3B:A6:F8:F3:82:49:FD:9A:17:31:83:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B613CC0935FEF72D0CC42B3E6 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa Signing time: Wed 01 Oct 2025 18:23:31 +0000 ROA not before: Wed 01 Oct 2025 18:23:31 +0000 ROA not after: Tue 30 Dec 2025 19:23:31 +0000 asID: 203020 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:3c:c0:93:5f:ef:72:d0:cc:42:b3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 18:23:31 2025 GMT Not After : Dec 30 19:23:31 2025 GMT Subject: CN=df049b82-8fe0-4505-bfce-5884aad1694a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:f7:fc:42:26:cb:b4:60:a2:82:f4:e6:41: 5d:84:28:ee:9a:34:25:68:58:d9:36:cd:8a:ac:ba: 8f:8d:d4:d8:b6:fe:22:f8:02:b8:b2:7c:e6:2f:3e: 31:24:1d:83:7f:d9:44:83:ac:9e:1b:b9:7a:e5:12: 15:65:0d:e8:74:06:24:d6:e4:96:4b:8d:9c:b7:36: b1:b0:3c:3a:d9:84:29:b0:55:e4:21:38:82:bb:ff: c9:24:fa:a7:c8:c2:2a:7e:a6:a7:4c:36:5f:88:17: 50:2f:b0:33:26:52:f8:2e:17:d9:0c:a4:73:a2:24: bf:db:65:7e:32:bc:99:b9:1b:d5:65:d8:82:ae:55: 5b:bf:c2:95:91:4e:32:33:fc:5e:b8:c3:98:eb:88: b5:bb:fa:d7:9b:e3:02:b4:1f:06:da:04:b7:2d:ac: eb:26:90:ae:25:20:3e:e1:47:7f:2e:93:9f:1b:3c: fe:ae:2a:0a:9a:2e:a0:5a:f5:4b:9e:70:de:cb:eb: db:e2:ba:79:f4:ad:9c:fe:af:6d:c0:d0:05:bc:59: 0e:2a:66:74:ee:45:90:4c:d8:b8:cb:bf:11:bb:49: e0:8e:89:88:d1:98:22:75:43:e6:83:99:ad:61:86: 85:14:a5:00:03:d2:76:67:85:3c:56:1d:cc:90:b4: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:28:8E:78:CF:43:D5:3B:A6:F8:F3:82:49:FD:9A:17:31:83:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d0:68:2f:04:cb:97:32:13:0b:db:e1:30:fc:65:27:9e:31: 1b:05:e9:cf:5e:4e:7c:58:9e:1b:97:ee:3e:01:45:2b:4c:36: 38:03:aa:02:54:b5:93:a5:d3:8b:55:bc:89:ca:f5:ad:ea:eb: a5:0b:8f:80:e3:89:9f:f5:14:32:c5:f7:0f:ab:2f:98:fa:f6: f4:49:e7:54:21:85:e7:da:c0:58:5d:e1:8e:9d:cf:58:1e:da: 70:20:d4:04:16:c9:c3:48:22:5e:c4:a3:3d:d7:2c:72:ed:5f: e7:c1:38:9e:29:2a:78:86:96:3f:02:8c:0c:37:09:d3:19:20: f7:05:ec:dc:94:2d:b1:c8:8c:cf:13:77:30:f1:90:d5:7a:a0: fc:da:99:f3:c2:f5:77:6e:f9:cd:5b:81:6b:9d:bf:90:65:74: b1:6c:92:3a:a7:64:8e:1a:7f:e5:1f:55:e5:42:26:85:93:76: cd:64:30:b5:6c:84:ed:93:0e:69:09:e2:8e:73:a8:bb:be:33: ff:ad:5c:6a:31:24:10:a2:29:4e:f4:25:ff:7e:31:3d:d7:9c: bc:5e:7d:6a:91:69:e9:b3:7c:e7:8a:93:58:c3:1c:f6:63:2f: 93:1a:b2:b6:83:f0:90:e6:a8:28:df:65:f9:8e:ad:66:1a:63: 83:59:cf:4a -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthPMCTX+9y0MxCs+YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE4MjMzMVoXDTI1MTIzMDE5MjMzMVowLzEtMCsGA1UEAxMk ZGYwNDliODItOGZlMC00NTA1LWJmY2UtNTg4NGFhZDE2OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuH3/EImy7RgooL05kFdhCjumjQlaFjZNs2K rLqPjdTYtv4i+AK4snzmLz4xJB2Df9lEg6yeG7l65RIVZQ3odAYk1uSWS42ctzax sDw62YQpsFXkITiCu//JJPqnyMIqfqanTDZfiBdQL7AzJlL4LhfZDKRzoiS/22V+ MryZuRvVZdiCrlVbv8KVkU4yM/xeuMOY64i1u/rXm+MCtB8G2gS3LazrJpCuJSA+ 4Ud/LpOfGzz+rioKmi6gWvVLnnDey+vb4rp59K2c/q9twNAFvFkOKmZ07kWQTNi4 y78Ru0ngjomI0ZgidUPmg5mtYYaFFKUAA9J2Z4U8Vh3MkLQ+ZwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFLeKKI54z0PVO6b484JJ/ZoXMYMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2FmM2YzZTktOTI1Zi0z ZjA4LTg1MzAtNDJiNGI5OTMyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB7QaC8Ey5cyEwvb4TD8ZSeeMRsF6c9eTnxYnhuX 7j4BRStMNjgDqgJUtZOl04tVvInK9a3q66ULj4DjiZ/1FDLF9w+rL5j69vRJ51Qh hefawFhd4Y6dz1ge2nAg1AQWycNIIl7Eoz3XLHLtX+fBOJ4pKniGlj8CjAw3CdMZ IPcF7NyULbHIjM8TdzDxkNV6oPzamfPC9Xdu+c1bgWudv5BldLFskjqnZI4af+Uf VeVCJoWTds1kMLVshO2TDmkJ4o5zqLu+M/+tXGoxJBCiKU70Jf9+MT3XnLxefWqR aemzfOeKk1jDHPZjL5MasraD8JDmqCjfZfmOrWYaY4NZz0o= -----END CERTIFICATE-----Generated at Sun Oct 19 16:05:04 2025 by rpki-client