$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa File: 66ba2098-88fc-32cf-97d4-feff4704a1a9.roa (raw, json) Hash identifier: hRiQ5G91bHEZpRie1+GmhEZd5GA5AQhJgow57lKClE8= Subject key identifier: E1:BB:E6:56:9D:D5:04:C3:70:C5:5F:5F:72:36:3A:A5:F8:27:AC:82 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B61389F8792386F02638F5700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa Signing time: Wed 01 Oct 2025 18:15:12 +0000 ROA not before: Wed 01 Oct 2025 18:15:12 +0000 ROA not after: Tue 30 Dec 2025 19:15:12 +0000 asID: 61290 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:38:9f:87:92:38:6f:02:63:8f:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 1 18:15:12 2025 GMT Not After : Dec 30 19:15:12 2025 GMT Subject: CN=4bd04e3d-2c6c-46e1-9428-673aad9f944f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:ec:71:ce:e2:a0:81:40:74:9e:3f:72:09: c4:9b:47:3a:ce:86:9f:61:8f:b1:6d:2b:0a:0f:be: e3:c0:13:81:7d:fa:52:5b:61:e8:d8:5f:a3:75:0c: 4d:54:04:ea:e2:f4:ef:64:1b:9e:60:9e:90:6e:05: 3b:cc:ee:ab:c1:28:c3:53:ce:ac:23:2e:34:6e:0c: 1d:9c:87:a5:04:c8:98:dd:67:bc:e8:43:55:eb:32: 90:82:1f:cf:40:44:02:7c:33:88:56:4d:1a:65:16: cc:95:25:c9:f3:55:83:3e:93:32:48:82:f4:8c:52: 71:0f:b6:fc:c7:5b:df:4d:31:b3:80:5a:72:9f:20: e0:3d:c2:69:b2:57:c8:88:54:af:09:51:83:bc:e4: 26:ee:86:d4:7c:00:5c:ea:8f:5d:d1:04:04:f4:7f: c5:fb:d7:b3:a6:e8:9a:ca:ed:cb:ef:7b:30:a2:2e: 97:d9:d0:9e:6b:df:92:da:6a:00:f7:3f:e5:e5:f3: a9:6c:21:98:79:c7:f6:56:f2:8d:52:c3:e9:de:ed: f1:ec:14:94:c2:85:18:4e:ca:a1:7d:6c:8c:fb:e4: 2d:6b:ac:5d:4b:e8:1a:00:0c:a1:fb:94:14:20:f8: d7:2f:f3:8f:00:f4:ad:0a:5d:9e:79:bf:66:00:00: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BB:E6:56:9D:D5:04:C3:70:C5:5F:5F:72:36:3A:A5:F8:27:AC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:68:70:f6:19:61:ea:9e:2b:06:f9:0e:59:37:79:60:75:c4: ff:4b:7f:ea:1f:e9:1c:39:c6:96:3c:e2:62:ea:8d:5a:d6:e0: d0:86:29:52:28:90:3e:03:ba:1e:28:19:df:09:8c:7c:1a:f0: 6b:d4:75:0c:5b:26:1c:f5:68:c7:cf:09:e8:82:49:67:1e:a5: 44:63:5a:5a:44:d0:b1:a9:65:2a:8a:eb:6b:82:1a:50:f4:f0: c2:c0:59:37:49:77:7e:4c:b7:20:6f:6a:8f:b4:05:2b:6f:63: c6:5a:ae:28:a7:f6:cc:a4:3f:35:c1:49:e4:72:56:ed:35:b1: 73:97:85:6a:81:c4:f4:6c:63:bb:92:4b:2d:b7:8d:3f:bb:b3: e5:21:b9:24:e0:04:83:d3:91:6d:eb:4a:08:ad:17:db:4c:0e: ba:8a:bc:de:73:a2:d6:bc:24:ef:10:94:03:82:6b:58:5c:9b: 8b:41:37:6c:13:e4:f3:d8:cf:6d:c5:36:06:34:f2:42:07:dd: a5:e2:70:d0:e5:f0:ae:b2:9c:3e:94:ba:e3:fd:c6:37:51:fd: f3:43:d1:50:0f:77:95:1a:0e:0b:f0:1c:66:fc:98:46:94:e6: 6d:52:7b:cf:cc:48:40:12:ca:c8:d2:be:6b:d5:e0:7e:c5:ba: 7c:34:38:c1 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEthOJ+HkjhvAmOPVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwMTE4MTUxMloXDTI1MTIzMDE5MTUxMlowLzEtMCsGA1UEAxMk NGJkMDRlM2QtMmM2Yy00NmUxLTk0MjgtNjczYWFkOWY5NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifDscc7ioIFAdJ4/cgnEm0c6zoafYY+xbSsK D77jwBOBffpSW2Ho2F+jdQxNVATq4vTvZBueYJ6QbgU7zO6rwSjDU86sIy40bgwd nIelBMiY3We86ENV6zKQgh/PQEQCfDOIVk0aZRbMlSXJ81WDPpMySIL0jFJxD7b8 x1vfTTGzgFpynyDgPcJpslfIiFSvCVGDvOQm7obUfABc6o9d0QQE9H/F+9ezpuia yu3L73swoi6X2dCea9+S2moA9z/l5fOpbCGYecf2VvKNUsPp3u3x7BSUwoUYTsqh fWyM++Qta6xdS+gaAAyh+5QUIPjXL/OPAPStCl2eeb9mAAAD2wIDAQABo4IDkTCC A40wHQYDVR0OBBYEFOG75lad1QTDcMVfX3I2OqX4J6yCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZiYTIwOTgtODhmYy0z MmNmLTk3ZDQtZmVmZjQ3MDRhMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALlocPYZYeqeKwb5Dlk3eWB1xP9Lf+of6Rw5xpY8 4mLqjVrW4NCGKVIokD4Duh4oGd8JjHwa8GvUdQxbJhz1aMfPCeiCSWcepURjWlpE 0LGpZSqK62uCGlD08MLAWTdJd35MtyBvao+0BStvY8Zariin9sykPzXBSeRyVu01 sXOXhWqBxPRsY7uSSy23jT+7s+UhuSTgBIPTkW3rSgitF9tMDrqKvN5zota8JO8Q lAOCa1hcm4tBN2wT5PPYz23FNgY08kIH3aXicNDl8K6ynD6UuuP9xjdR/fND0VAP d5UaDgvwHGb8mEaU5m1Se8/MSEASysjSvmvV4H7Funw0OME= -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:35 2025 by rpki-client