$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa File: 8da6384b-e652-36de-b69d-ac9de12cdc66.roa (raw, json) Hash identifier: /TU+eObsLCTPvzC8AlX7KuqAeWm2e4Wwgm39EuV0Bfw= Subject key identifier: 58:B8:FA:EF:4A:45:82:83:3C:4A:2B:45:27:AC:2F:F0:F6:86:73:37 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B613B0248DE81FA6C19CC3160 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa Signing time: Wed 01 Oct 2025 18:20:00 +0000 ROA not before: Wed 01 Oct 2025 18:20:00 +0000 ROA not after: Tue 30 Dec 2025 19:20:00 +0000 asID: 141193 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:3b:02:48:de:81:fa:6c:19:cc:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 18:20:00 2025 GMT Not After : Dec 30 19:20:00 2025 GMT Subject: CN=09ca8b73-805b-4f2f-95a7-425883364890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:46:4d:a0:2b:ad:75:6e:c7:7b:5c:1d:86: 1f:a1:bc:5c:c2:89:f8:af:e4:65:58:ef:1b:92:dd: 82:b5:c7:c8:cd:5b:6d:d4:b0:7b:6b:30:f4:73:f9: 72:a4:d3:48:ca:63:3a:59:fc:33:ad:57:82:78:60: 24:f5:5a:91:65:94:a7:b9:57:5c:12:f3:45:d0:da: 98:5c:4f:e9:b5:3d:36:08:74:45:8b:8c:11:a5:e7: be:00:39:5f:e7:e8:7b:76:bf:6e:d7:9e:73:e6:ef: 64:e3:33:f1:81:85:c2:68:e1:f1:e0:75:cb:d5:0d: b2:34:05:61:68:34:e1:a9:50:ce:ec:50:4e:e4:7f: b5:52:1a:d6:f7:5d:7e:a0:a5:7a:bf:89:f4:66:ff: d1:0f:05:2c:4c:1e:f7:5a:17:54:44:4e:5b:3d:79: 96:94:f5:3f:e7:9f:f9:6b:c0:ea:a1:2e:0f:66:2b: 13:20:22:7b:21:de:3b:03:6b:4d:fd:fe:ad:c7:8a: 86:39:5a:bf:65:c4:ab:67:bd:fd:a6:71:e5:61:5d: fa:78:dd:d0:80:d5:ee:66:66:55:ae:3f:2b:37:56: 81:09:09:f8:33:91:80:00:b0:3f:9d:ba:ed:cb:25: bf:cf:92:2b:63:32:81:61:e1:ef:ee:e4:9f:74:da: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:FA:EF:4A:45:82:83:3C:4A:2B:45:27:AC:2F:F0:F6:86:73:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:03:7e:0f:4d:a5:68:a1:26:f7:3d:63:39:24:3d:c5:cd: 5f:b5:32:4b:74:d0:44:be:03:d8:31:f0:8d:71:37:17:26:fc: 0e:73:4f:42:c8:ac:a0:63:05:85:2d:9b:33:c9:66:bd:1c:2a: a6:09:ba:17:e2:c7:18:42:bc:89:85:b5:52:38:c3:71:d3:db: e1:30:10:86:4b:31:79:60:5b:e0:58:74:bc:c3:51:be:3d:cf: 46:60:4e:0e:99:7c:ae:89:fe:18:21:8a:c7:12:54:3b:81:3c: a6:a8:23:12:32:dd:e1:4d:73:cf:7e:18:ec:ab:e7:fc:05:7e: 54:bb:3e:c7:9c:bd:dd:05:41:df:2e:9f:cf:d2:6d:bc:92:e1: 3d:e1:cf:85:5e:53:3e:69:04:81:35:d4:d9:25:c3:e3:b7:f7: 40:e8:46:cf:0d:4e:85:cc:a9:05:5d:18:b0:ab:60:cb:be:2c: f7:ce:63:95:fd:0e:15:d2:80:6f:e0:20:db:52:2d:5f:83:9a: f8:93:51:3e:a7:1d:70:47:3d:6d:be:c4:83:cd:cd:a3:18:3b: cc:c6:6f:82:e0:1a:a6:57:66:39:39:05:41:4b:ef:e8:fe:61: 02:e3:34:77:3d:d6:10:1f:fe:46:b4:00:0b:45:07:10:70:2b: c5:07:f5:85 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthOwJI3oH6bBnMMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE4MjAwMFoXDTI1MTIzMDE5MjAwMFowLzEtMCsGA1UEAxMk MDljYThiNzMtODA1Yi00ZjJmLTk1YTctNDI1ODgzMzY0ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNxGTaArrXVux3tcHYYfobxcwon4r+RlWO8b kt2CtcfIzVtt1LB7azD0c/lypNNIymM6WfwzrVeCeGAk9VqRZZSnuVdcEvNF0NqY XE/ptT02CHRFi4wRpee+ADlf5+h7dr9u155z5u9k4zPxgYXCaOHx4HXL1Q2yNAVh aDThqVDO7FBO5H+1UhrW911+oKV6v4n0Zv/RDwUsTB73WhdURE5bPXmWlPU/55/5 a8DqoS4PZisTICJ7Id47A2tN/f6tx4qGOVq/ZcSrZ739pnHlYV36eN3QgNXuZmZV rj8rN1aBCQn4M5GAALA/nbrtyyW/z5IrYzKBYeHv7uSfdNo65wIDAQABo4IDkTCC A40wHQYDVR0OBBYEFFi4+u9KRYKDPEorRSesL/D2hnM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhNjM4NGItZTY1Mi0z NmRlLWI2OWQtYWM5ZGUxMmNkYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACD8A34PTaVooSb3PWM5JD3FzV+1Mkt00ES+A9gx 8I1xNxcm/A5zT0LIrKBjBYUtmzPJZr0cKqYJuhfixxhCvImFtVI4w3HT2+EwEIZL MXlgW+BYdLzDUb49z0ZgTg6ZfK6J/hghiscSVDuBPKaoIxIy3eFNc89+GOyr5/wF flS7Psecvd0FQd8un8/SbbyS4T3hz4VeUz5pBIE11Nklw+O390DoRs8NToXMqQVd GLCrYMu+LPfOY5X9DhXSgG/gINtSLV+DmviTUT6nHXBHPW2+xIPNzaMYO8zGb4Lg GqZXZjk5BUFL7+j+YQLjNHc91hAf/ka0AAtFBxBwK8UH9YU= -----END CERTIFICATE-----Generated at Mon Oct 27 01:27:45 2025 by rpki-client