$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa File: e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa (raw, json) Hash identifier: ap83HRgjt9V3OfiMiSenO9kBYcfQNS5vgD6E0R34rww= Subject key identifier: 6A:FA:FB:8E:9E:C4:36:3D:44:81:4F:5F:D5:8E:26:B0:0E:71:1B:8E Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584B9E6757628D0A1214A98CC680 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 22423 IP address blocks: 24.231.96.0/20 maxlen: 22 45.42.72.0/21 maxlen: 21 45.58.96.0/20 maxlen: 20 65.38.64.0/19 maxlen: 19 104.159.0.0/22 maxlen: 22 104.159.0.0/24 maxlen: 24 104.159.4.0/22 maxlen: 22 104.159.8.0/22 maxlen: 22 104.159.12.0/22 maxlen: 22 104.159.16.0/22 maxlen: 22 104.159.20.0/22 maxlen: 22 104.159.32.0/19 maxlen: 19 104.159.64.0/22 maxlen: 22 104.159.108.0/22 maxlen: 22 104.159.112.0/22 maxlen: 22 104.159.116.0/22 maxlen: 22 104.159.120.0/23 maxlen: 23 104.159.122.0/23 maxlen: 23 104.159.124.0/22 maxlen: 22 104.244.64.0/22 maxlen: 22 138.229.16.0/20 maxlen: 20 144.208.96.0/22 maxlen: 22 144.208.100.0/22 maxlen: 22 144.208.112.0/22 maxlen: 22 160.20.232.0/22 maxlen: 22 166.48.158.0/24 maxlen: 24 166.48.160.0/23 maxlen: 23 166.48.188.0/22 maxlen: 22 166.48.192.0/19 maxlen: 19 166.48.232.0/21 maxlen: 21 166.48.254.0/24 maxlen: 24 170.100.208.0/22 maxlen: 22 170.100.212.0/22 maxlen: 22 180.181.160.0/19 maxlen: 19 192.214.128.0/20 maxlen: 20 192.214.144.0/20 maxlen: 20 192.214.224.0/19 maxlen: 19 192.214.255.0/24 maxlen: 24 199.189.76.0/22 maxlen: 22 199.241.128.0/21 maxlen: 21 199.241.128.0/23 maxlen: 23 199.241.130.0/23 maxlen: 23 199.241.132.0/23 maxlen: 23 199.241.134.0/23 maxlen: 23 205.233.150.0/24 maxlen: 24 205.236.43.0/24 maxlen: 24 205.236.80.0/24 maxlen: 24 205.236.89.0/24 maxlen: 24 205.236.120.0/22 maxlen: 22 205.236.120.0/24 maxlen: 24 205.236.121.0/24 maxlen: 24 205.236.122.0/23 maxlen: 23 205.236.226.0/24 maxlen: 24 206.180.240.0/20 maxlen: 20 206.180.240.0/23 maxlen: 23 206.180.242.0/23 maxlen: 23 206.180.244.0/23 maxlen: 23 206.180.246.0/23 maxlen: 23 206.180.248.0/23 maxlen: 23 206.180.250.0/23 maxlen: 23 206.180.252.0/23 maxlen: 23 206.180.254.0/23 maxlen: 23 209.182.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:67:57:62:8d:0a:12:14:a9:8c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=5818039b-7e0b-4317-b68c-82f9e92c9ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fe:cd:31:c8:c6:83:43:8e:25:ec:25:b5:01: a8:39:5c:1b:61:f6:d7:39:76:e5:3e:fd:7f:29:68: 95:b4:f1:26:7e:09:30:90:e3:ce:77:cd:6b:2b:50: c6:a5:54:46:77:91:69:23:d9:db:2f:c9:41:3e:d4: d3:f8:44:38:98:79:db:23:bc:20:9b:21:ce:c5:96: b9:a3:9a:4b:dd:74:c0:fb:72:27:cd:00:6d:ce:55: 3b:36:cc:14:79:b5:14:1d:cc:15:28:25:c5:22:dc: 31:67:59:d0:31:45:ba:93:c5:54:f6:72:fb:27:13: b2:5c:ca:51:fb:4c:0c:54:d2:80:df:fe:b3:32:d8: af:14:01:bc:3c:ba:2d:50:77:06:7c:0a:3e:6c:8b: 51:f5:c9:1f:bf:72:27:98:68:a0:0d:58:ab:96:40: 7e:f8:c9:ac:92:8d:c8:28:b6:b8:5c:3c:05:a3:21: 44:07:d7:8f:33:93:c4:fa:b4:34:c4:7e:63:91:fb: b4:c3:97:9c:f8:d2:6f:f2:7e:02:e0:df:08:25:28: 9f:e3:2e:07:ac:73:f0:ba:dd:22:20:5d:8f:10:3d: 14:66:e9:5f:39:9a:f4:2f:9e:e3:7e:50:5e:61:43: 10:f1:a2:03:cd:fd:12:3f:6f:2e:4e:92:c8:12:23: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FA:FB:8E:9E:C4:36:3D:44:81:4F:5F:D5:8E:26:B0:0E:71:1B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/e422d3a4-7ed0-30a2-b306-a0e19fdd800b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 24.231.96.0/20 45.42.72.0/21 45.58.96.0/20 65.38.64.0/19 104.159.0.0-104.159.23.255 104.159.32.0-104.159.67.255 104.159.108.0-104.159.127.255 104.244.64.0/22 138.229.16.0/20 144.208.96.0/21 144.208.112.0/22 160.20.232.0/22 166.48.158.0/24 166.48.160.0/23 166.48.188.0-166.48.223.255 166.48.232.0/21 166.48.254.0/24 170.100.208.0/21 180.181.160.0/19 192.214.128.0/19 192.214.224.0/19 199.189.76.0/22 199.241.128.0/21 205.233.150.0/24 205.236.43.0/24 205.236.80.0/24 205.236.89.0/24 205.236.120.0/22 205.236.226.0/24 206.180.240.0/20 209.182.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:83:97:e3:ed:6f:7b:be:10:78:a8:b7:59:8a:b0:d5:99:1d: ab:5a:cb:3b:c3:4b:68:19:d4:fc:8f:b5:8e:a0:15:b9:b2:ab: 87:22:46:3a:21:71:5b:dd:f7:3f:d5:c3:4f:19:7f:e6:00:54: 06:61:6a:5d:b2:cc:1b:fe:52:4b:d1:48:09:eb:2e:99:cf:bd: 15:fe:70:8f:24:ec:b6:4e:69:06:22:27:0f:f7:de:be:00:d4: 7f:01:83:67:99:e6:85:1f:51:a1:e0:d0:74:da:ab:00:04:cf: ee:79:3f:72:c9:f0:a6:73:b6:4e:35:1f:7e:8b:f5:68:7d:72: d3:d9:52:ca:97:4e:05:98:96:9b:d4:1e:6d:08:40:7e:4c:ca: 2f:b7:85:98:5a:84:8c:1b:b0:a1:b2:84:59:29:6c:66:70:88: 36:42:11:57:7b:94:40:0c:12:0e:7d:23:49:e9:52:d7:e5:45: e5:85:26:8b:13:9f:48:80:c8:8a:e8:5d:11:75:c0:86:ae:d5: 71:ee:8b:9f:fe:60:3c:07:4c:cd:52:19:bf:1a:35:96:a4:b1: 32:a6:23:74:af:58:5b:a9:59:60:e5:6f:3c:41:77:58:b8:10: af:81:a7:43:e0:31:d3:fc:25:ab:f3:e0:b3:6e:c4:eb:52:11: da:c8:52:62 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEueZ1dijQoSFKmMxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTgxODAzOWItN2UwYi00MzE3LWI2OGMtODJmOWU5MmM5YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/7NMcjGg0OOJewltQGoOVwbYfbXOXblPv1/ KWiVtPEmfgkwkOPOd81rK1DGpVRGd5FpI9nbL8lBPtTT+EQ4mHnbI7wgmyHOxZa5 o5pL3XTA+3InzQBtzlU7NswUebUUHcwVKCXFItwxZ1nQMUW6k8VU9nL7JxOyXMpR +0wMVNKA3/6zMtivFAG8PLotUHcGfAo+bItR9ckfv3InmGigDVirlkB++Mmsko3I KLa4XDwFoyFEB9ePM5PE+rQ0xH5jkfu0w5ec+NJv8n4C4N8IJSif4y4HrHPwut0i IF2PED0UZulfOZr0L57jflBeYUMQ8aIDzf0SP28uTpLIEiNCEQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFGr6+46exDY9RIFPX9WOJrAOcRuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvZTQyMmQzYTQtN2VkMC0z MGEyLWIzMDYtYTBlMTlmZGQ4MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMIH2BggrBgEFBQcBBwEB/wSB5jCB4zCB4AQCAAEwgdkDBAQY 52ADBAMtKkgDBAQtOmADBAVBJkAwCwMDAGifAwQDaJ8QMAwDBAVonyADBAJon0Aw DAMEAmifbAMEB2ifAAMEAmj0QAMEBIrlEAMEA5DQYAMEApDQcAMEAqAU6AMEAKYw ngMEAaYwoDAMAwQCpjC8AwQFpjDAAwQDpjDoAwQApjD+AwQDqmTQAwQFtLWgAwQF wNaAAwQFwNbgAwQCx71MAwQDx/GAAwQAzemWAwQAzewrAwQAzexQAwQAzexZAwQC zex4AwQAzeziAwQEzrTwAwQA0bbkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEuDl+Ptb3u+EHiot1mKsNWZ HatayzvDS2gZ1PyPtY6gFbmyq4ciRjohcVvd9z/Vw08Zf+YAVAZhal2yzBv+UkvR SAnrLpnPvRX+cI8k7LZOaQYiJw/33r4A1H8Bg2eZ5oUfUaHg0HTaqwAEz+55P3LJ 8KZztk41H36L9Wh9ctPZUsqXTgWYlpvUHm0IQH5Myi+3hZhahIwbsKGyhFkpbGZw iDZCEVd7lEAMEg59I0npUtflReWFJosTn0iAyIroXRF1wIau1XHui5/+YDwHTM1S Gb8aNZaksTKmI3SvWFupWWDlbzxBd1i4EK+Bp0PgMdP8Javz4LNuxOtSEdrIUmI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:00:00 2025 by rpki-client