$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/246c23ed-0305-3b8c-815e-969ed0b854b8.roa File: 246c23ed-0305-3b8c-815e-969ed0b854b8.roa (raw, json) Hash identifier: N6vPjcAWga5E4nhipLcR0S9a/SV8dSRyCAt6LwTvWHM= Subject key identifier: 10:7A:58:45:21:AD:54:22:35:7B:13:CB:33:01:E1:96:87:5C:77:CE Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D261F7D92AC1F312FA6EC0 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/246c23ed-0305-3b8c-815e-969ed0b854b8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.125.0/24 maxlen: 24 198.164.126.0/24 maxlen: 24 198.164.127.0/24 maxlen: 24 198.164.128.0/24 maxlen: 24 198.164.134.0/23 maxlen: 24 198.164.140.0/22 maxlen: 24 198.164.148.0/22 maxlen: 24 198.164.152.0/22 maxlen: 24 198.164.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:61:f7:d9:2a:c1:f3:12:fa:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=9278c015-cdf3-483c-9cfb-47d1d7c2e6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:19:ec:d3:19:57:e2:1a:6a:16:e4:a0:21: c2:87:a8:07:cc:b4:3e:1c:62:eb:f7:a5:8d:74:e9: 4f:2d:b1:3a:69:a9:98:67:5e:c7:3e:e6:7d:68:48: c7:13:ad:06:83:a5:03:27:1a:f3:65:f5:ab:b9:86: 99:6e:72:8f:de:0a:eb:6f:55:d2:3b:9d:a8:22:06: da:2d:da:81:39:33:50:fe:0b:0d:53:4b:f9:ec:65: af:5a:18:0f:a4:06:9a:1b:25:8f:bf:1b:b2:53:6f: cf:d3:8f:c5:61:1c:aa:74:95:e1:1b:6f:ce:76:d4: a2:3b:5d:6c:07:fc:28:ec:2f:00:1d:ad:e5:cd:65: 82:ce:e6:a9:28:d6:dd:08:30:c4:53:13:85:24:02: 1b:40:69:ca:e4:96:7c:13:48:d9:59:cc:16:51:e9: f8:85:ad:0a:3d:3c:22:7d:c5:9c:8d:6f:90:25:a9: c9:87:99:03:ab:28:b5:88:ad:5a:dd:e3:5c:7b:83: 77:64:02:8d:6c:f1:2d:7a:88:c5:e8:e8:9b:3b:09: 11:13:58:7f:b9:e9:88:2b:84:5b:cd:0a:82:cb:4a: cf:a8:0d:29:89:67:1b:98:23:5d:04:0f:10:43:68: 7d:1f:63:f0:13:98:4b:df:aa:55:bc:14:6c:2e:36: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:58:45:21:AD:54:22:35:7B:13:CB:33:01:E1:96:87:5C:77:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/246c23ed-0305-3b8c-815e-969ed0b854b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.125.0-198.164.128.255 198.164.134.0/23 198.164.140.0/22 198.164.148.0-198.164.155.255 198.164.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3c:b2:47:8d:80:82:01:06:ca:49:d5:3f:f2:37:b7:f8:aa: 5b:cb:ea:e3:1e:fe:5a:68:ba:a2:74:bd:11:13:f5:e8:69:ce: 44:f0:0a:f8:d5:66:dd:30:93:be:25:f2:ba:0c:d6:bd:4b:34: 74:e5:a9:ba:15:1e:41:26:8e:27:97:27:ae:ae:ed:2d:2d:24: da:56:0c:bc:c6:9f:53:71:45:7c:82:27:17:74:1d:5c:e1:a7: be:5f:07:de:c9:32:29:86:58:af:97:a4:b4:4b:e5:51:6e:4f: f9:2d:06:f5:fb:ed:01:31:57:e7:e1:37:a1:8f:f3:e7:97:ae: 83:91:d0:d2:66:1d:59:21:5a:fc:05:b8:46:5b:b0:59:06:6d: b9:31:e4:87:9b:d6:9e:d4:fa:b6:01:3c:06:5a:f8:35:83:f6: b1:d5:ff:58:98:26:dd:2e:73:b3:65:8a:96:13:74:71:28:c2: 5f:f6:62:6e:97:e9:16:37:ec:be:c0:6d:8b:a0:38:8b:2d:e2: be:bf:27:61:60:d0:89:0b:10:30:a3:43:47:da:6a:8a:70:46: 58:5b:b4:b6:27:d0:50:f1:a3:91:e1:90:b4:c5:2d:3d:5f:f7: f4:7b:91:1d:fb:10:75:ec:ba:b0:17:cd:cc:f6:5a:b7:65:1f: 1a:dc:9a:e2 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEug0mH32SrB8xL6bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OTI3OGMwMTUtY2RmMy00ODNjLTljZmItNDdkMWQ3YzJlNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlakZ7NMZV+IaahbkoCHCh6gHzLQ+HGLr96WN dOlPLbE6aamYZ17HPuZ9aEjHE60Gg6UDJxrzZfWruYaZbnKP3grrb1XSO52oIgba LdqBOTNQ/gsNU0v57GWvWhgPpAaaGyWPvxuyU2/P04/FYRyqdJXhG2/OdtSiO11s B/wo7C8AHa3lzWWCzuapKNbdCDDEUxOFJAIbQGnK5JZ8E0jZWcwWUen4ha0KPTwi fcWcjW+QJanJh5kDqyi1iK1a3eNce4N3ZAKNbPEteojF6OibOwkRE1h/uemIK4Rb zQqCy0rPqA0piWcbmCNdBA8QQ2h9H2PwE5hL36pVvBRsLjYmmwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFBB6WEUhrVQiNXsTyzMB4ZaHXHfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMjQ2YzIzZWQtMDMwNS0z YjhjLTgxNWUtOTY5ZWQwYjg1NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBADGpH0D BADGpIADBAHGpIYDBALGpIwwDAMEAsaklAMEAsakmAMEAMaknTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6 PLJHjYCCAQbKSdU/8je3+Kpby+rjHv5aaLqidL0RE/Xoac5E8Ar41WbdMJO+JfK6 DNa9SzR05am6FR5BJo4nlyeuru0tLSTaVgy8xp9TcUV8gicXdB1c4ae+XwfeyTIp hlivl6S0S+VRbk/5LQb1++0BMVfn4Tehj/Pnl66DkdDSZh1ZIVr8BbhGW7BZBm25 MeSHm9ae1Pq2ATwGWvg1g/ax1f9YmCbdLnOzZYqWE3RxKMJf9mJul+kWN+y+wG2L oDiLLeK+vydhYNCJCxAwo0NH2mqKcEZYW7S2J9BQ8aOR4ZC0xS09X/f0e5Ed+xB1 7LqwF83M9lq3ZR8a3Jri -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:10 2025 by rpki-client