$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa File: c289adc8-f56d-36ed-9305-ee284f075f34.roa (raw, json) Hash identifier: ZU1BE+F9PZH+pdzdUICfi1/O9GqVryRzGPRCaQ8aIgY= Subject key identifier: C2:77:44:F3:A5:41:98:87:3A:F4:98:98:E7:58:70:F8:B2:72:63:35 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584B8D477DA45C7C86B177C07D00 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 3527 IP address blocks: 128.231.0.0/16 maxlen: 25 137.187.0.0/16 maxlen: 25 156.40.0.0/18 maxlen: 25 156.40.64.0/20 maxlen: 25 156.40.80.0/21 maxlen: 25 156.40.88.0/22 maxlen: 25 156.40.92.0/24 maxlen: 25 156.40.96.0/19 maxlen: 25 156.40.128.0/18 maxlen: 25 156.40.192.0/22 maxlen: 25 156.40.196.0/24 maxlen: 25 156.40.198.0/23 maxlen: 25 156.40.200.0/21 maxlen: 25 156.40.208.0/20 maxlen: 25 156.40.224.0/19 maxlen: 25 165.112.0.0/16 maxlen: 25 192.231.145.0/24 maxlen: 29 192.231.146.0/24 maxlen: 29 192.231.147.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7d:a4:5c:7c:86:b1:77:c0:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=78bfb4be-ffe8-4d8b-8867-ccc11c716988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:94:ee:21:82:c3:fc:7a:95:12:f7:a8:11:96: 92:b8:7b:61:d2:96:3a:d4:19:d6:54:62:ad:40:b2: ad:bc:9f:69:65:59:ad:0d:30:bd:68:d9:59:63:c1: c4:6b:c7:dc:f1:99:39:35:e8:4c:10:e0:57:a1:d9: 7b:4b:30:5d:11:ac:27:21:62:52:97:88:c0:2c:d0: 36:10:ee:17:34:46:af:13:b8:68:1e:dd:cb:b1:59: b8:e9:57:ca:37:83:31:cc:6b:f5:27:dc:07:72:c3: 85:a6:2a:f6:c3:27:b3:b3:28:e0:7f:c1:a5:ae:03: fe:62:cc:22:dd:30:52:0b:b3:e8:f1:ab:b5:dc:a7: e5:de:5c:5d:ab:ac:c7:55:76:88:79:d2:e4:7b:25: a6:a2:af:d7:d7:45:e7:2a:fc:36:39:7d:51:6f:69: 6f:66:65:5c:cc:86:bd:af:f8:91:0d:bb:4b:25:60: ea:f1:4c:d8:b7:d9:5b:8f:43:be:db:f8:86:9e:59: 28:cf:d3:2f:ec:c9:d6:65:2f:80:ac:e9:0c:c8:1b: 5a:e3:b0:61:6d:c3:fb:c8:f3:36:56:b1:62:e8:88: 75:2a:62:f7:c4:fe:01:a3:e5:d6:95:35:71:b3:ba: 60:a3:fc:e1:a9:e6:ae:91:b8:7f:15:fa:92:82:c3: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:44:F3:A5:41:98:87:3A:F4:98:98:E7:58:70:F8:B2:72:63:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/c289adc8-f56d-36ed-9305-ee284f075f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 128.231.0.0/16 137.187.0.0/16 156.40.0.0-156.40.92.255 156.40.96.0-156.40.196.255 156.40.198.0-156.40.255.255 165.112.0.0/16 192.231.145.0-192.231.147.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:15:e6:68:70:89:1a:d3:10:23:56:c7:c2:eb:2d:29:53:80: 91:21:79:5f:77:52:e3:18:00:1c:b3:8b:d5:c1:d0:42:8c:7b: 87:42:26:39:6b:4c:fa:b4:2b:98:ba:88:e4:24:5a:0e:98:05: eb:75:f9:a2:13:03:44:84:6e:76:b9:13:83:24:b0:8b:74:19: 80:3e:ba:4e:1b:26:24:dd:6e:db:9d:2e:36:ec:63:3c:c4:6e: 81:18:d4:d9:fb:f0:77:5b:bb:eb:28:ee:6f:f9:cb:7c:76:9d: 76:a5:c0:16:37:57:80:30:d6:94:ea:36:87:74:23:05:08:56: e0:5e:ed:6d:70:89:11:31:d2:c4:d7:a4:f8:5c:4c:ae:5b:5f: a2:f3:2d:66:90:8b:80:56:6b:18:44:79:d5:82:8a:30:66:a7: 91:e4:21:5a:9b:21:61:60:8f:9f:47:db:84:10:42:75:d6:60: 00:2f:3f:1c:d6:1d:d7:ff:2f:2a:22:7c:c5:6d:61:20:a7:16: d9:78:08:62:58:5e:7a:4c:50:2a:e4:70:30:62:11:6a:6e:41: 3f:7c:69:dd:4f:45:ae:f3:1c:ff:b7:ed:5f:4b:0a:ce:f9:e7: 6b:4f:13:36:88:4e:6a:e6:40:ea:13:b8:fc:66:1f:57:e4:31: 42:d7:95:2c -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEuNR32kXHyGsXfAfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk NzhiZmI0YmUtZmZlOC00ZDhiLTg4NjctY2NjMTFjNzE2OTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5TuIYLD/HqVEveoEZaSuHth0pY61BnWVGKt QLKtvJ9pZVmtDTC9aNlZY8HEa8fc8Zk5NehMEOBXodl7SzBdEawnIWJSl4jALNA2 EO4XNEavE7hoHt3LsVm46VfKN4MxzGv1J9wHcsOFpir2wyezsyjgf8GlrgP+Yswi 3TBSC7Po8au13Kfl3lxdq6zHVXaIedLkeyWmoq/X10XnKvw2OX1Rb2lvZmVczIa9 r/iRDbtLJWDq8UzYt9lbj0O+2/iGnlkoz9Mv7MnWZS+ArOkMyBta47BhbcP7yPM2 VrFi6Ih1KmL3xP4Bo+XWlTVxs7pgo/zhqeaukbh/FfqSgsO5SQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFMJ3RPOlQZiHOvSYmOdYcPiycmM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYzI4OWFkYzgtZjU2ZC0z NmVkLTkzMDUtZWUyODRmMDc1ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwMAgOcDAwCJ uzALAwMDnCgDBACcKFwwDAMEBZwoYAMEAJwoxDALAwQBnCjGAwMAnCgDAwClcDAM AwQAwOeRAwQCwOeQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAA4V5mhwiRrTECNWx8LrLSlTgJEheV93UuMY AByzi9XB0EKMe4dCJjlrTPq0K5i6iOQkWg6YBet1+aITA0SEbna5E4MksIt0GYA+ uk4bJiTdbtudLjbsYzzEboEY1Nn78Hdbu+so7m/5y3x2nXalwBY3V4Aw1pTqNod0 IwUIVuBe7W1wiREx0sTXpPhcTK5bX6LzLWaQi4BWaxhEedWCijBmp5HkIVqbIWFg j59H24QQQnXWYAAvPxzWHdf/LyoifMVtYSCnFtl4CGJYXnpMUCrkcDBiEWpuQT98 ad1PRa7zHP+37V9LCs7552tPEzaITmrmQOoTuPxmH1fkMULXlSw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:41 2025 by rpki-client