$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa File: 407b2f59-2919-39db-9262-b2b76809657a.roa (raw, json) Hash identifier: HAJwxygWjw0oPcCkP8VOctOHWpS6FtC3fxatdXoI1E0= Subject key identifier: 89:9D:4E:ED:EC:DA:83:42:BC:47:A3:32:4B:16:7D:07:8B:24:2F:C0 Certificate issuer: /CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6 Certificate serial: 010D0C9F4328584BA0D2710FF2A3A93B78CCE2C0 Authority key identifier: 19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 1426 IP address blocks: 66.163.223.0/24 maxlen: 24 103.246.186.0/24 maxlen: 24 104.204.252.0/23 maxlen: 24 123.100.246.0/24 maxlen: 24 203.11.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:71:0f:f2:a3:a9:3b:78:cc:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b4f9222b-b7f9-4b5e-bf71-2b26fd56d6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:2a:1c:f9:15:a5:74:2a:67:fe:a5:b2:6a: 03:4b:16:1f:2c:86:46:b1:55:47:74:b0:f7:f4:c1: 33:49:d5:63:ca:51:99:22:a2:17:50:93:dc:29:cc: a1:04:3f:fe:2c:5c:ed:8d:5c:24:b0:e8:3d:6a:67: c5:19:9e:3e:b0:38:4a:bf:6f:68:fc:75:e6:a9:cf: fb:82:a4:8f:27:9a:79:c8:7d:dc:6e:04:d0:5b:51: 83:ce:b9:0f:f7:a2:db:23:9c:c3:d5:62:f2:86:c3: e5:49:a8:02:20:fb:40:91:45:5f:4c:5e:58:28:06: 34:ef:1a:67:e2:8d:e0:2c:84:2e:fb:ae:40:7e:1f: 13:6e:49:8b:2e:69:91:83:ac:88:b4:40:5e:7c:e6: 16:06:cb:40:d9:6b:33:ac:6c:f6:0c:04:57:f3:cc: 90:92:ff:0a:b8:89:c7:aa:af:09:d3:dc:12:c0:53: 51:f1:1b:8b:8c:e9:07:cc:74:3c:e9:9f:6b:12:9f: 83:c0:5e:8a:64:89:fa:14:fe:ec:be:8e:86:21:96: 46:0f:e4:f0:af:64:cc:c0:0f:9d:82:0f:df:2c:4b: f3:bf:61:1a:0b:25:40:cd:56:2a:ab:af:44:08:d9: d3:9c:6c:18:53:9b:08:44:68:2e:07:7b:5f:99:a3: 7b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:4E:ED:EC:DA:83:42:BC:47:A3:32:4B:16:7D:07:8B:24:2F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/407b2f59-2919-39db-9262-b2b76809657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.crl X509v3 Authority Key Identifier: keyid:19:A3:5D:69:4B:8A:3E:5B:CA:BC:74:49:7C:7E:96:84:84:CE:35:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d39e6a1d-b7dc-4b6f-a95a-b5e432cfeae6.cer sbgp-ipAddrBlock: critical IPv4: 66.163.223.0/24 103.246.186.0/24 104.204.252.0/23 123.100.246.0/24 203.11.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0f:ba:3e:ee:64:21:cf:c2:7e:41:57:dc:c5:cd:6e:68:2e: 45:98:96:a7:2e:cf:a6:0e:f7:c0:39:40:cd:42:66:6b:ed:36: d8:15:92:9f:90:a1:5c:52:e3:90:cb:1a:f6:0d:bd:82:7c:14: 71:37:45:28:6f:5e:4b:25:33:f2:8b:08:a9:fe:ec:69:15:19: fd:4f:b1:a7:2b:4f:5b:f2:91:dd:60:50:69:65:c9:f4:54:38: bf:c6:47:9a:30:25:fb:98:d6:cd:ef:8b:d8:2b:1b:b0:94:3c: b5:22:ab:b4:fa:71:7a:93:7d:cc:30:25:e6:88:3d:c2:79:33: 42:89:4e:30:4d:a3:cb:ea:98:fe:13:6f:bd:46:e3:b9:b7:a6: e3:1d:ae:ed:f3:3c:5e:6c:e2:0b:5e:3b:05:fa:32:26:64:2a: 8e:c1:e7:b7:03:bf:fe:0d:86:f9:c4:9a:92:44:9a:1d:8a:16: 81:6b:fd:77:b8:c4:a7:5b:66:c9:96:20:9d:c8:56:5b:85:5b: 67:a4:6a:1b:4e:4e:97:f0:42:66:70:a1:9d:14:8c:46:20:12: 40:88:bf:bf:b4:6d:2e:97:f8:37:3b:a2:09:da:37:4c:a2:dd: 0f:ac:de:e1:e1:9c:43:b5:80:08:b8:7f:be:92:4d:11:a8:23: 12:5a:72:26 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEug0nEP8qOpO3jM4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM5ZTZhMWQtYjdkYy00YjZmLWE5NWEtYjVlNDMyY2Zl YWU2MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjRmOTIyMmItYjdmOS00YjVlLWJmNzEtMmIyNmZkNTZkNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T4qHPkVpXQqZ/6lsmoDSxYfLIZGsVVHdLD3 9MEzSdVjylGZIqIXUJPcKcyhBD/+LFztjVwksOg9amfFGZ4+sDhKv29o/HXmqc/7 gqSPJ5p5yH3cbgTQW1GDzrkP96LbI5zD1WLyhsPlSagCIPtAkUVfTF5YKAY07xpn 4o3gLIQu+65Afh8TbkmLLmmRg6yItEBefOYWBstA2WszrGz2DARX88yQkv8KuInH qq8J09wSwFNR8RuLjOkHzHQ86Z9rEp+DwF6KZIn6FP7svo6GIZZGD+Twr2TMwA+d gg/fLEvzv2EaCyVAzVYqq69ECNnTnGwYU5sIRGguB3tfmaN7FwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFImdTu3s2oNCvEejMksWfQeLJC/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMzll NmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0MzJjZmVhZTYvNDA3YjJmNTktMjkxOS0z OWRiLTkyNjItYjJiNzY4MDk2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDM5ZTZhMWQtYjdkYy00YjZmLWE5 NWEtYjVlNDMyY2ZlYWU2L2QzOWU2YTFkLWI3ZGMtNGI2Zi1hOTVhLWI1ZTQzMmNm ZWFlNi5jcmwwHwYDVR0jBBgwFoAUGaNdaUuKPlvKvHRJfH6WhITONSMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kMzllNmExZC1iN2RjLTRiNmYtYTk1YS1iNWU0 MzJjZmVhZTYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQqPfAwQA Z/a6AwQBaMz8AwQAe2T2AwQAywtIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD0Puj7uZCHPwn5BV9zFzW5o LkWYlqcuz6YO98A5QM1CZmvtNtgVkp+QoVxS45DLGvYNvYJ8FHE3RShvXkslM/KL CKn+7GkVGf1PsacrT1vykd1gUGllyfRUOL/GR5owJfuY1s3vi9grG7CUPLUiq7T6 cXqTfcwwJeaIPcJ5M0KJTjBNo8vqmP4Tb71G47m3puMdru3zPF5s4gteOwX6MiZk Ko7B57cDv/4NhvnEmpJEmh2KFoFr/Xe4xKdbZsmWIJ3IVluFW2ekahtOTpfwQmZw oZ0UjEYgEkCIv7+0bS6X+Dc7ognaN0yi3Q+s3uHhnEO1gAi4f76STRGoIxJaciY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:07 2025 by rpki-client