$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa File: ff1f7987-0e9e-3a82-b872-b6f22206561b.roa (raw, json) Hash identifier: RFx9lRTZ9euHrrq/5TjUDpY5wyhUV7S04MQFkIIuYdk= Subject key identifier: DD:30:E1:FC:7E:BC:A9:DD:CD:0E:1F:7E:00:E4:E0:67:9F:48:3B:95 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B613595EACD6C70305FA2EA00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa Signing time: Wed 01 Oct 2025 18:09:05 +0000 ROA not before: Wed 01 Oct 2025 18:09:05 +0000 ROA not after: Tue 30 Dec 2025 19:09:05 +0000 asID: 47943 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:35:95:ea:cd:6c:70:30:5f:a2:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 18:09:05 2025 GMT Not After : Dec 30 19:09:05 2025 GMT Subject: CN=a8908880-56e3-4c82-ae67-b5ae062053fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b9:5b:2c:5b:0e:83:fe:3a:bf:bd:db:70:6b: 0c:13:89:bb:62:20:df:fd:6e:89:49:34:a8:69:63: aa:2f:c6:10:66:a9:1b:d9:7c:14:77:d4:c6:c2:46: 7c:29:9e:48:9b:67:59:83:80:87:38:b1:65:a2:9a: a5:e8:98:bb:14:af:df:6b:de:50:44:67:e5:0d:75: d3:6c:46:5e:fa:a5:02:c8:72:10:8f:2d:fb:4f:9d: 9a:31:ee:f5:de:90:2c:e5:95:83:56:77:bf:84:ef: c6:00:c0:55:df:c0:a7:f3:fd:2b:ee:1e:46:7a:66: 03:bd:c0:03:ff:57:53:44:bf:ee:bf:38:8a:26:b3: c0:ed:15:a2:38:e0:2d:e4:b9:21:e6:c8:9b:16:07: 23:13:81:7d:07:3a:62:fe:31:4c:e1:c4:87:07:32: 15:68:49:3a:8f:fc:ee:96:92:8c:af:63:e3:41:ce: fe:5e:75:0b:6b:6f:9c:22:45:75:34:bf:b5:cd:03: 7b:57:73:85:dc:c9:c2:a1:ae:2e:31:c8:a9:41:cc: 80:79:79:92:da:e2:1d:bc:ef:29:43:be:94:49:d9: 1c:ea:12:18:64:fe:96:27:19:6e:9f:2e:99:6b:c8: 5c:c7:27:2b:c5:ff:5e:45:27:b7:79:03:b3:63:73: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:E1:FC:7E:BC:A9:DD:CD:0E:1F:7E:00:E4:E0:67:9F:48:3B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ff1f7987-0e9e-3a82-b872-b6f22206561b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c0:fc:c7:36:50:59:48:d9:ad:1c:ce:3e:36:43:d7:bf:26: 40:f0:c8:c1:cd:c7:5a:5f:b9:ec:53:33:1d:e1:c0:66:f6:b3: 7f:a6:af:1f:e3:59:44:ff:e0:9b:be:a0:80:85:31:a6:7f:87: aa:c6:fd:b6:24:27:ff:37:6e:0a:67:dd:00:d3:85:56:76:3a: 6b:28:69:08:8d:2a:5d:f2:17:eb:5e:d1:eb:61:da:ed:03:11: 1d:d6:54:f7:b2:92:d0:e7:93:17:9d:1c:88:cf:ed:1d:77:d2: 40:64:73:8a:ac:5c:11:5a:58:1b:13:d9:8c:1a:85:53:20:0a: 9c:7a:8c:f1:2d:41:f5:38:8a:fb:32:6c:83:22:64:41:e9:e4: 9e:5c:d2:19:54:8f:ad:09:3a:13:fa:16:63:50:07:f7:e1:54: f2:3b:3e:6d:b5:ad:0b:d6:4d:40:52:55:76:11:f7:b9:3b:1b: 9e:63:dc:0a:2b:a9:81:b6:09:15:8b:62:60:d6:bd:c1:80:a7: 48:e3:16:63:26:dc:20:cf:2f:5e:f6:cc:ae:fc:d4:a2:ba:5c: 45:6c:cf:28:7d:02:c7:85:45:95:6d:4d:b8:db:76:99:3d:e0: 37:c8:62:7a:6f:9b:28:b8:1c:be:da:37:04:6c:fd:12:05:e8: 03:8b:d3:bd -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthNZXqzWxwMF+i6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE4MDkwNVoXDTI1MTIzMDE5MDkwNVowLzEtMCsGA1UEAxMk YTg5MDg4ODAtNTZlMy00YzgyLWFlNjctYjVhZTA2MjA1M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7lbLFsOg/46v73bcGsME4m7YiDf/W6JSTSo aWOqL8YQZqkb2XwUd9TGwkZ8KZ5Im2dZg4CHOLFlopql6Ji7FK/fa95QRGflDXXT bEZe+qUCyHIQjy37T52aMe713pAs5ZWDVne/hO/GAMBV38Cn8/0r7h5GemYDvcAD /1dTRL/uvziKJrPA7RWiOOAt5Lkh5sibFgcjE4F9Bzpi/jFM4cSHBzIVaEk6j/zu lpKMr2PjQc7+XnULa2+cIkV1NL+1zQN7V3OF3MnCoa4uMcipQcyAeXmS2uIdvO8p Q76USdkc6hIYZP6WJxluny6Za8hcxycrxf9eRSe3eQOzY3P+DQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFN0w4fx+vKndzQ4ffgDk4GefSDuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmYxZjc5ODctMGU5ZS0z YTgyLWI4NzItYjZmMjIyMDY1NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG3A/Mc2UFlI2a0czj42Q9e/JkDwyMHNx1pfuexT Mx3hwGb2s3+mrx/jWUT/4Ju+oICFMaZ/h6rG/bYkJ/83bgpn3QDThVZ2OmsoaQiN Kl3yF+te0eth2u0DER3WVPeyktDnkxedHIjP7R130kBkc4qsXBFaWBsT2YwahVMg Cpx6jPEtQfU4ivsybIMiZEHp5J5c0hlUj60JOhP6FmNQB/fhVPI7Pm21rQvWTUBS VXYR97k7G55j3AorqYG2CRWLYmDWvcGAp0jjFmMm3CDPL172zK781KK6XEVszyh9 AseFRZVtTbjbdpk94DfIYnpvmyi4HL7aNwRs/RIF6AOL070= -----END CERTIFICATE-----Generated at Mon Oct 27 01:46:04 2025 by rpki-client