$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa File: 0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa (raw, json) Hash identifier: LE+Jd0NJXRE4l8GZ7jC+d2YjUnMpllZ+q8Qw1zWO6Mg= Subject key identifier: 74:C9:17:39:CC:2E:51:24:99:59:20:58:9F:1B:BA:CA:D5:10:E8:53 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584BA667A1F42DD0B72CFB2B3280 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 98.158.240.0/20 maxlen: 20 148.64.0.0/19 maxlen: 19 168.149.128.0/18 maxlen: 18 170.176.240.0/21 maxlen: 21 199.247.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a1:f4:2d:d0:b7:2c:fb:2b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=b20bb163-6c96-4ea1-90b0-d3a370a01fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ef:25:8c:83:b2:f0:d3:a6:f5:9c:89:13:e2: c8:e4:fa:16:e5:3f:7c:4c:58:24:79:4f:8a:a9:28: a0:a0:a2:67:15:fb:1f:08:dc:1c:da:35:9d:29:de: f5:90:fb:f9:df:c8:75:5a:fc:9e:25:3a:68:39:0a: 41:1d:50:9f:52:6b:8d:75:63:1b:ea:7e:0b:e2:67: 88:3d:5e:c3:17:65:9c:bb:92:cd:90:78:54:30:41: a6:58:b4:34:6d:40:a1:26:f5:1b:c4:96:81:ec:67: e9:34:0c:1d:ea:0c:6d:55:20:8e:66:19:94:0b:ac: 09:42:72:60:4c:0b:b4:00:d9:f2:92:95:0a:f8:25: c6:39:d5:33:92:2e:dd:f6:6b:3d:a0:29:80:16:8d: f1:7b:7c:02:6b:1e:17:4d:5b:00:06:ad:49:1f:d1: 7a:8d:83:38:2c:24:61:dc:74:60:64:cf:4e:ea:6e: e3:a9:a6:cf:84:f4:fa:19:29:3b:78:4f:ef:55:83: 9f:72:f4:cf:76:53:1f:68:b1:6e:26:ae:31:a9:e0: dc:67:90:4b:a4:fe:0c:a8:77:98:68:5b:61:38:2c: 37:6b:25:22:41:f4:db:7e:67:7c:9e:d6:89:02:ff: 1e:12:4d:76:62:e9:a6:42:e1:c2:b0:2c:d8:5d:d1: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:17:39:CC:2E:51:24:99:59:20:58:9F:1B:BA:CA:D5:10:E8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/0e5db1f3-b3a1-3597-99f3-28ec533ed3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 98.158.240.0/20 148.64.0.0/19 168.149.128.0/18 170.176.240.0/21 199.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:5f:5a:d9:be:46:09:e6:54:ff:a8:45:e7:ec:ff:c3:0a: 3e:39:15:4a:e8:cf:ce:23:2f:7e:0e:d9:14:2e:ab:5b:ff:24: cb:3b:9e:2a:5c:c4:39:40:72:b1:df:54:37:4f:5a:47:27:b5: 9f:dc:66:44:5f:2a:b5:20:94:67:25:7a:39:2c:1b:20:77:c4: 4a:64:7f:e9:7b:d1:9b:d5:72:d4:ea:6d:75:ab:c7:24:cb:b1: b7:95:a1:b9:9a:90:2f:64:07:5a:01:9a:6a:ca:63:13:74:c2: 90:4e:13:46:35:de:c5:af:22:cd:8e:d1:4e:23:3a:f2:07:a0: 90:b5:80:9f:73:2f:4c:f3:31:8e:37:40:0d:00:c9:92:e0:b3: 57:5d:c1:2b:e9:5a:1a:70:57:77:75:79:dc:43:d6:dc:de:68: 8a:a6:7e:06:ac:d2:5c:5f:f4:b5:84:bb:30:7c:91:9f:93:1a: 8d:40:16:d1:53:a0:0d:61:47:fe:06:b2:24:ce:dc:e5:dc:ef: ce:6d:da:ce:06:08:1e:11:0c:0f:3b:43:e3:24:05:9e:29:e0: 18:8b:6b:3d:31:db:3e:dd:34:f7:06:11:6d:b0:ec:ce:d1:6d: a5:1b:45:93:c5:9e:d2:b5:70:f4:41:d6:e8:02:a1:6f:18:58: e7:6d:1a:91 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEumZ6H0LdC3LPsrMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YjIwYmIxNjMtNmM5Ni00ZWExLTkwYjAtZDNhMzcwYTAxZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu8ljIOy8NOm9ZyJE+LI5PoW5T98TFgkeU+K qSigoKJnFfsfCNwc2jWdKd71kPv538h1WvyeJTpoOQpBHVCfUmuNdWMb6n4L4meI PV7DF2Wcu5LNkHhUMEGmWLQ0bUChJvUbxJaB7GfpNAwd6gxtVSCOZhmUC6wJQnJg TAu0ANnykpUK+CXGOdUzki7d9ms9oCmAFo3xe3wCax4XTVsABq1JH9F6jYM4LCRh 3HRgZM9O6m7jqabPhPT6GSk7eE/vVYOfcvTPdlMfaLFuJq4xqeDcZ5BLpP4MqHeY aFthOCw3ayUiQfTbfmd8ntaJAv8eEk12YummQuHCsCzYXdH/2wIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFHTJFznMLlEkmVkgWJ8busrVEOhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMGU1ZGIxZjMtYjNhMS0z NTk3LTk5ZjMtMjhlYzUzM2VkM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEYp7wAwQF lEAAAwQGqJWAAwQDqrDwAwQEx/cgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIK2X1rZvkYJ5lT/qEXn7P/D Cj45FUroz84jL34O2RQuq1v/JMs7nipcxDlAcrHfVDdPWkcntZ/cZkRfKrUglGcl ejksGyB3xEpkf+l70ZvVctTqbXWrxyTLsbeVobmakC9kB1oBmmrKYxN0wpBOE0Y1 3sWvIs2O0U4jOvIHoJC1gJ9zL0zzMY43QA0AyZLgs1ddwSvpWhpwV3d1edxD1tze aIqmfgas0lxf9LWEuzB8kZ+TGo1AFtFToA1hR/4GsiTO3OXc785t2s4GCB4RDA87 Q+MkBZ4p4BiLaz0x2z7dNPcGEW2w7M7RbaUbRZPFntK1cPRB1ugCoW8YWOdtGpE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:07:40 2025 by rpki-client