$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa File: 3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa (raw, json) Hash identifier: PkPQ9TYqv5ZzJHUUSFZMU9czHSEYQhfxdgVCFJw4Djc= Subject key identifier: D1:79:F5:60:54:19:D4:C6:37:46:D3:E5:26:DB:27:CA:E9:C8:F3:2A Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584BA0D2620B5EA5FFD8C3FBF880 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 611 IP address blocks: 198.164.129.0/24 maxlen: 24 198.164.130.0/24 maxlen: 24 198.164.131.0/24 maxlen: 24 198.164.132.0/23 maxlen: 24 198.164.136.0/22 maxlen: 24 198.164.144.0/22 maxlen: 24 198.164.156.0/24 maxlen: 24 198.164.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:62:0b:5e:a5:ff:d8:c3:fb:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5873759d-f3a5-45a6-b521-22b71f82778b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:e7:e0:e8:10:2a:51:c4:50:ef:96:a3:1f: ec:0d:f9:4f:83:dd:9d:59:46:4f:2f:71:9f:75:76: 32:37:39:f6:d1:df:b1:75:cc:e2:10:8e:d0:24:7e: 95:6e:1c:a8:ee:48:4a:86:52:92:7a:b2:7f:6b:59: ee:f6:ea:18:31:16:8f:cf:2c:10:ae:3c:da:06:ea: 60:f5:70:54:f0:05:a9:00:97:f5:ad:40:b4:7b:c3: b0:a6:a7:3c:63:47:b6:99:0e:39:d6:4b:88:33:ae: 20:8a:a6:83:61:cd:48:3f:4e:f1:c8:37:af:a6:89: d0:f0:4e:96:09:90:a0:95:25:6a:c6:9e:86:5d:53: 86:48:cf:f5:a0:16:40:02:4c:71:29:d5:51:db:32: 98:d0:c4:03:4c:a7:bb:87:ff:4e:20:47:83:35:1c: 6e:0a:38:43:fe:55:37:32:f5:fa:cd:f8:12:6e:c3: e9:a6:7a:db:a6:32:15:79:18:0d:8a:c0:be:43:eb: 7f:2a:0c:cb:d4:53:ad:41:bd:13:55:80:ff:ea:70: f6:68:68:2d:97:ef:17:5f:9d:11:7e:b9:4e:30:36: 6e:06:d1:78:a1:16:00:3c:50:a8:4d:b1:96:78:02: ad:ad:4d:66:97:5e:8b:22:fe:1b:7e:18:97:53:d7: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:79:F5:60:54:19:D4:C6:37:46:D3:E5:26:DB:27:CA:E9:C8:F3:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/3aebc5a7-7696-3ab7-a9df-c73aefaeab87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 198.164.129.0-198.164.133.255 198.164.136.0/22 198.164.144.0/22 198.164.156.0/24 198.164.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:d9:33:e9:f5:1f:c5:92:75:cd:7b:94:f8:b6:08:91:ee:ae: 91:28:91:da:fd:81:27:48:8c:e0:21:a9:d2:75:1b:02:a1:e3: cd:f4:90:01:6a:23:4a:a8:ff:88:20:92:0e:4c:6b:05:8d:cc: 9f:31:a6:84:d2:dc:c4:99:ae:bf:32:32:1a:55:1e:b0:95:3f: b1:51:16:e0:b2:e3:73:6a:2c:77:84:3a:bb:b7:0c:32:9a:7e: d0:d9:31:ac:36:89:55:63:b8:b6:15:17:8d:a7:58:0e:ae:b4: 07:dc:a6:28:4b:ee:07:51:49:09:60:2b:8b:66:6a:77:70:22: e3:98:07:16:26:81:4f:15:6a:5b:51:36:db:65:12:22:a4:f6: b7:89:a9:74:07:18:9f:f5:d7:22:bd:74:96:e4:99:4e:e4:ad: 69:5d:a1:73:43:6b:a9:79:b3:94:37:56:72:20:e7:86:3f:55: 5b:5a:85:95:3f:8e:b8:77:30:04:5d:5a:26:8b:0c:70:df:68: 67:5f:c2:04:be:90:ca:a2:af:4d:20:67:9e:52:35:d0:07:e0: 42:42:81:4d:8e:ab:32:b3:d0:02:df:52:e5:87:09:dc:17:39: 42:95:e4:26:71:19:ce:c3:13:54:6f:4d:b6:6e:0d:fd:48:8e: e3:aa:04:8f -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEug0mILXqX/2MP7+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTg3Mzc1OWQtZjNhNS00NWE2LWI1MjEtMjJiNzFmODI3NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Xn4OgQKlHEUO+Wox/sDflPg92dWUZPL3Gf dXYyNzn20d+xdcziEI7QJH6Vbhyo7khKhlKSerJ/a1nu9uoYMRaPzywQrjzaBupg 9XBU8AWpAJf1rUC0e8Owpqc8Y0e2mQ451kuIM64giqaDYc1IP07xyDevponQ8E6W CZCglSVqxp6GXVOGSM/1oBZAAkxxKdVR2zKY0MQDTKe7h/9OIEeDNRxuCjhD/lU3 MvX6zfgSbsPppnrbpjIVeRgNisC+Q+t/KgzL1FOtQb0TVYD/6nD2aGgtl+8XX50R frlOMDZuBtF4oRYAPFCoTbGWeAKtrU1ml16LIv4bfhiXU9dOdQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFNF59WBUGdTGN0bT5SbbJ8rpyPMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvM2FlYmM1YTctNzY5Ni0z YWI3LWE5ZGYtYzczYWVmYWVhYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBADGpIED BAHGpIQDBALGpIgDBALGpJADBADGpJwDBADGpJ4wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAx9kz6fUfxZJ1 zXuU+LYIke6ukSiR2v2BJ0iM4CGp0nUbAqHjzfSQAWojSqj/iCCSDkxrBY3MnzGm hNLcxJmuvzIyGlUesJU/sVEW4LLjc2osd4Q6u7cMMpp+0NkxrDaJVWO4thUXjadY Dq60B9ymKEvuB1FJCWAri2Zqd3Ai45gHFiaBTxVqW1E222USIqT2t4mpdAcYn/XX Ir10luSZTuStaV2hc0NrqXmzlDdWciDnhj9VW1qFlT+OuHcwBF1aJosMcN9oZ1/C BL6QyqKvTSBnnlI10AfgQkKBTY6rMrPQAt9S5YcJ3Bc5QpXkJnEZzsMTVG9Ntm4N /UiO46oEjw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:20 2025 by rpki-client