$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa File: 0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa (raw, json) Hash identifier: FVrIuOnFxvvolyJeRVFdQi+1i8ejQPu1MjdL3sayRs0= Subject key identifier: A6:BC:3D:14:E7:33:FE:FA:23:7F:EC:60:CE:EA:85:A1:3A:88:A1:56 Certificate issuer: /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Certificate serial: 010D0C9F4328584BAA979DC6AF117430D48B8BC0 Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 29757 IP address blocks: 23.168.193.0/24 maxlen: 24 104.153.44.0/24 maxlen: 24 104.153.45.0/24 maxlen: 24 104.153.46.0/24 maxlen: 24 104.153.47.0/24 maxlen: 24 162.217.144.0/24 maxlen: 24 162.217.145.0/24 maxlen: 24 162.217.146.0/24 maxlen: 24 162.217.147.0/24 maxlen: 24 192.231.255.0/24 maxlen: 24 199.231.92.0/24 maxlen: 24 199.231.93.0/24 maxlen: 24 199.231.94.0/24 maxlen: 24 199.231.95.0/24 maxlen: 24 208.72.20.0/22 maxlen: 22 208.93.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9d:c6:af:11:74:30:d4:8b:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=daca3681-a77b-4bff-b5ab-837154a5b5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:4a:75:d9:8d:4b:7b:9d:4b:ce:6e:97:50: b4:17:61:81:ee:6f:d3:8a:2e:91:e2:0f:9c:9f:15: 48:d6:5d:4b:b1:d9:2d:42:f7:a9:4b:b4:d0:0d:e5: d2:23:c6:90:d2:75:ca:be:1c:f9:a2:d2:bd:1e:e6: 32:b8:81:f2:db:7a:3b:45:80:06:8d:74:19:6a:c6: a5:3a:0a:b6:50:f3:df:d7:35:92:da:c0:27:26:cf: d9:b3:4a:06:0f:3a:b8:16:83:6b:ee:30:f7:ac:cd: b4:38:68:ad:cf:3d:3b:f0:25:c3:87:7f:db:a7:39: d6:62:a3:b1:8f:0d:37:f2:c1:51:22:04:f4:51:26: 8e:9e:0a:1d:bd:c5:fe:8f:4d:bf:b7:63:3d:59:16: a5:e5:b7:0b:80:c7:06:00:2b:f2:b9:9f:47:82:32: f3:14:88:a2:65:e3:3a:b8:a3:3b:8e:65:1c:3d:85: 65:2c:3a:93:4e:ab:c8:26:2c:db:61:bf:98:6b:e0: c6:56:d7:14:50:f8:2a:36:56:85:e9:75:47:bd:5e: d5:e0:16:b5:61:71:50:fc:3a:86:76:0f:e7:e9:fa: ad:08:c2:40:36:07:a3:7e:58:30:25:78:3e:8d:12: 00:51:a1:45:a5:4e:29:c2:56:9d:a3:28:36:56:32: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:3D:14:E7:33:FE:FA:23:7F:EC:60:CE:EA:85:A1:3A:88:A1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0be9c008-0b81-3981-bdaa-c2c0d0ec1e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl X509v3 Authority Key Identifier: keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer sbgp-ipAddrBlock: critical IPv4: 23.168.193.0/24 104.153.44.0/22 162.217.144.0/22 192.231.255.0/24 199.231.92.0/22 208.72.20.0/22 208.93.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:87:b0:1b:68:c6:26:40:01:57:25:8c:83:c2:26:4a:32:22: 66:43:5b:a4:23:1a:2d:36:44:1f:23:4c:07:db:5d:57:f2:00: 06:0d:61:1c:6d:8b:6e:71:8d:70:62:11:59:f5:d7:73:48:20: ad:59:ef:99:17:14:e7:d9:47:f5:b2:ae:19:69:72:53:c0:8f: ab:b4:0e:15:31:0a:72:1f:a2:f9:fb:63:ae:b7:d4:98:e9:52: 53:12:fb:86:aa:d6:d2:42:8a:98:b9:0f:c9:99:f1:92:a4:db: d9:8b:e7:a2:16:1f:04:34:39:f7:80:04:75:cc:c0:04:7d:27: e7:ed:33:20:8a:e5:22:4c:1f:e4:52:ef:66:5e:41:09:c9:7c: fd:0c:33:e4:9a:f5:19:80:2c:bb:61:d2:8e:1e:80:d3:65:6b: e9:fc:db:3f:2b:e7:ca:78:25:ac:92:39:cb:ea:91:f9:69:92: f4:0f:cc:b5:40:e1:1f:bf:59:94:6f:1e:3d:c9:ea:07:bb:cf: d5:d5:66:37:60:22:1b:c5:fb:2d:bc:19:ba:4f:ad:ce:97:0f: a7:1d:1a:8e:39:63:83:04:54:b5:6a:74:c4:b4:9b:08:99:69: 6f:ab:7e:16:45:29:96:85:9c:ca:81:7e:3d:4e:7c:3a:2e:36: fa:a3:fa:02 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEuql53GrxF0MNSLi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBkZWZjOTktNzNmMS00Y2NmLTkzZmYtYWMwOGI3MzAx YTE4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGFjYTM2ODEtYTc3Yi00YmZmLWI1YWItODM3MTU0YTViNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirVKddmNS3udS85ul1C0F2GB7m/Tii6R4g+c nxVI1l1LsdktQvepS7TQDeXSI8aQ0nXKvhz5otK9HuYyuIHy23o7RYAGjXQZasal Ogq2UPPf1zWS2sAnJs/Zs0oGDzq4FoNr7jD3rM20OGitzz078CXDh3/bpznWYqOx jw038sFRIgT0USaOngodvcX+j02/t2M9WRal5bcLgMcGACvyuZ9HgjLzFIiiZeM6 uKM7jmUcPYVlLDqTTqvIJizbYb+Ya+DGVtcUUPgqNlaF6XVHvV7V4Ba1YXFQ/DqG dg/n6fqtCMJANgejflgwJXg+jRIAUaFFpU4pwladoyg2VjKrnQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFKa8PRTnM/76I3/sYM7qhaE6iKFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRl ZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4YjczMDFhMTgvMGJlOWMwMDgtMGI4MS0z OTgxLWJkYWEtYzJjMGQwZWMxZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBkZWZjOTktNzNmMS00Y2NmLTkz ZmYtYWMwOGI3MzAxYTE4LzIwZGVmYzk5LTczZjEtNGNjZi05M2ZmLWFjMDhiNzMw MWExOC5jcmwwHwYDVR0jBBgwFoAUGVL0PL3a0EHYb5rqmuhcTFVNeGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGRlZmM5OS03M2YxLTRjY2YtOTNmZi1hYzA4 YjczMDFhMTguY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF6jBAwQC aJksAwQCotmQAwQAwOf/AwQCx+dcAwQC0EgUAwQC0F3YMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJuHsBto xiZAAVcljIPCJkoyImZDW6QjGi02RB8jTAfbXVfyAAYNYRxti25xjXBiEVn113NI IK1Z75kXFOfZR/WyrhlpclPAj6u0DhUxCnIfovn7Y6631JjpUlMS+4aq1tJCipi5 D8mZ8ZKk29mL56IWHwQ0OfeABHXMwAR9J+ftMyCK5SJMH+RS72ZeQQnJfP0MM+Sa 9RmALLth0o4egNNla+n82z8r58p4JaySOcvqkflpkvQPzLVA4R+/WZRvHj3J6ge7 z9XVZjdgIhvF+y28GbpPrc6XD6cdGo45Y4MEVLVqdMS0mwiZaW+rfhZFKZaFnMqB fj1OfDouNvqj+gI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:52 2025 by rpki-client