$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa File: da29dd16-44c5-3bb1-af0e-adfb48371078.roa (raw, json) Hash identifier: lxVtodlLf7koFB6IMLPIoZcC4KdcRQNR4VxPciaZZcw= Subject key identifier: 44:07:19:A7:8F:AA:87:14:24:63:69:B0:AC:09:82:0E:BA:D4:96:41 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584B21CC2D80E319DEC8FF686B00 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 7150 IP address blocks: 148.137.0.0/16 maxlen: 20 151.161.0.0/16 maxlen: 20 157.62.0.0/16 maxlen: 20 192.149.243.0/24 maxlen: 24 204.108.180.0/23 maxlen: 24 204.108.184.0/23 maxlen: 24 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2d:80:e3:19:de:c8:ff:68:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=947cd3bc-868b-4eba-8357-3c34f91fc4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:41:5e:06:9d:19:04:4e:53:a5:e6:c7:59: 4a:ee:cd:81:5e:7e:b0:39:b5:90:69:bf:99:36:6f: f0:3d:36:2e:10:6d:1b:5d:51:36:20:f8:34:73:ac: 8c:c4:34:c7:10:aa:8c:1f:9e:ac:12:42:10:aa:56: d5:a3:8a:35:18:f8:7b:ea:55:ed:fd:06:07:e2:2f: 45:78:c5:65:1e:91:c5:5a:00:e8:1f:cc:5d:77:10: c8:95:0c:fb:7e:e0:7c:ed:be:5f:22:9b:36:8a:80: d6:47:17:64:c0:28:97:ec:f8:ac:1c:25:f7:60:78: ac:7f:95:b8:cc:7f:00:be:cc:02:da:7f:89:ed:a8: 01:26:1d:ca:c6:dc:44:8e:64:be:0b:ea:2e:97:9a: a9:00:39:a4:c2:5e:ef:8a:a1:f0:a0:aa:d9:e4:67: 1f:3d:59:64:98:72:13:cc:5c:95:78:28:26:e9:0e: cc:26:f3:7e:8a:a3:01:6e:35:ea:af:c4:de:97:87: c8:31:2b:df:80:fd:1b:d2:9c:93:ce:a2:28:5b:fb: 93:1c:d9:d1:25:77:f9:c7:f2:a2:c6:d2:7f:e9:32: d8:fd:ba:74:4a:eb:01:64:82:8b:81:ff:41:f6:8d: 21:04:74:0e:87:86:72:3d:57:31:40:aa:1e:35:ca: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:19:A7:8F:AA:87:14:24:63:69:B0:AC:09:82:0E:BA:D4:96:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 148.137.0.0/16 151.161.0.0/16 157.62.0.0/16 192.149.243.0/24 204.108.180.0/23 204.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bc:d1:2d:ed:4d:a7:bd:ea:e3:05:7a:d0:ca:a3:9e:a7:6f: a7:3c:92:bc:46:4c:13:08:71:9e:00:8b:87:5f:be:f8:f2:12: 60:88:bc:f2:0d:5a:b7:82:c6:b3:9b:70:b8:df:32:68:49:77: 8c:1c:39:3d:1b:ad:66:24:0c:4c:ec:ec:a0:15:68:3c:9f:06: 3b:a2:4a:10:08:36:91:8d:e5:bc:95:97:e1:75:c6:a5:bc:1d: 98:df:04:40:a5:9c:05:47:79:66:0e:1d:8a:ab:be:aa:57:38: 08:7f:71:cc:ff:f5:33:0a:74:ea:2e:11:28:66:08:ef:fa:b9: f0:2a:d5:62:4e:eb:8b:14:a8:3c:d1:29:c4:f3:f0:dc:5e:02: b8:9a:b7:12:51:46:f0:ad:91:84:6e:53:3c:43:5f:e0:0a:78: 44:21:18:57:bf:63:5e:3d:1f:11:98:fe:49:2a:44:8d:bf:66: 26:fc:86:7d:ef:c7:dd:e3:e3:ba:63:27:90:e3:8c:23:1a:cd: 27:b4:ac:18:14:a8:18:f0:7c:a3:b7:92:23:56:8c:e4:95:90: 17:96:02:85:8c:24:e7:24:77:9f:d5:d0:96:c5:69:b5:42:dc: 39:82:74:ec:59:2b:94:07:af:84:73:37:f3:8e:11:90:69:a5: b7:c9:88:c1 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEshzC2A4xneyP9oawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OTQ3Y2QzYmMtODY4Yi00ZWJhLTgzNTctM2MzNGY5MWZjNGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbBBXgadGQROU6Xmx1lK7s2BXn6wObWQab+Z Nm/wPTYuEG0bXVE2IPg0c6yMxDTHEKqMH56sEkIQqlbVo4o1GPh76lXt/QYH4i9F eMVlHpHFWgDoH8xddxDIlQz7fuB87b5fIps2ioDWRxdkwCiX7PisHCX3YHisf5W4 zH8AvswC2n+J7agBJh3KxtxEjmS+C+oul5qpADmkwl7viqHwoKrZ5GcfPVlkmHIT zFyVeCgm6Q7MJvN+iqMBbjXqr8Tel4fIMSvfgP0b0pyTzqIoW/uTHNnRJXf5x/Ki xtJ/6TLY/bp0SusBZIKLgf9B9o0hBHQOh4ZyPVcxQKoeNcqV5QIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFEQHGaePqocUJGNpsKwJgg661JZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZGEyOWRkMTYtNDRjNS0z YmIxLWFmMGUtYWRmYjQ4MzcxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAlIkDAwCX oQMDAJ0+AwQAwJXzAwQBzGy0AwQCzGy4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADS80S3tTae96uMFetDK o56nb6c8krxGTBMIcZ4Ai4dfvvjyEmCIvPINWreCxrObcLjfMmhJd4wcOT0brWYk DEzs7KAVaDyfBjuiShAINpGN5byVl+F1xqW8HZjfBEClnAVHeWYOHYqrvqpXOAh/ ccz/9TMKdOouEShmCO/6ufAq1WJO64sUqDzRKcTz8NxeAriatxJRRvCtkYRuUzxD X+AKeEQhGFe/Y149HxGY/kkqRI2/Zib8hn3vx93j47pjJ5DjjCMazSe0rBgUqBjw fKO3kiNWjOSVkBeWAoWMJOckd5/V0JbFabVC3DmCdOxZK5QHr4RzN/OOEZBppbfJ iME= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:22 2025 by rpki-client