$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa File: bb95430e-8b80-392c-8296-34539bd6cb9e.roa (raw, json) Hash identifier: +61GymS0tZr/jytppl8v+A0J+qYAc0kz7j68ZNZhD7U= Subject key identifier: 0D:0A:E4:97:13:8F:21:CE:FE:DB:F8:56:64:2C:37:3A:E1:07:90:05 Certificate issuer: /CN=9f263856-ae8c-471f-bea5-ef7480840262 Certificate serial: 010D0C9F4328584BBE405E414AD1699BFF2B0880 Authority key identifier: FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 394473 IP address blocks: 158.120.88.0/22 maxlen: 24 192.190.154.0/23 maxlen: 24 192.190.156.0/22 maxlen: 24 199.250.224.0/20 maxlen: 24 199.250.251.0/24 maxlen: 24 199.250.252.0/23 maxlen: 24 209.16.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5e:41:4a:d1:69:9b:ff:2b:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f263856-ae8c-471f-bea5-ef7480840262 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=eceefc40-825d-44e7-9c83-7e90801981b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:77:71:c6:94:3e:53:8a:03:f1:0b:ed:3b: f3:3f:03:1d:52:c7:e6:4d:8e:f7:5c:48:b7:ed:e8: b2:40:64:15:77:05:d0:91:36:b8:35:34:91:97:a1: f3:c6:83:c4:25:e9:23:61:ce:27:ce:7b:c4:74:85: ef:48:a5:87:86:14:ee:33:7e:3d:ce:01:09:2b:89: e4:b0:39:b4:31:5d:67:65:a4:c8:12:ce:6a:3e:1c: 19:3e:98:11:9a:90:b0:4d:fd:61:ba:fc:2e:d5:cc: 9f:b1:ba:c5:2a:74:63:d1:e0:27:56:d8:72:11:05: 34:33:35:f1:5b:18:a4:39:80:d8:1b:d5:f1:51:87: 11:5a:cf:39:b0:7c:62:de:55:b7:c0:91:bd:79:c6: da:7f:45:9e:8f:dd:9a:e5:d5:f0:90:58:9d:6d:b0: 86:0d:43:73:2e:7a:55:c5:90:3a:9a:2e:d1:e2:6c: 89:86:9e:5f:ac:7b:49:95:4d:3f:eb:b9:38:b8:59: 62:32:ba:af:08:30:73:4a:af:7f:11:b1:21:c2:12: 9f:b9:c8:dd:c7:13:9a:81:ed:e0:6d:fb:f2:db:18: c0:d6:5d:57:c2:a7:70:7d:03:b5:3d:a6:e6:51:f9: 2a:ea:2f:1a:1e:f5:e9:ae:ca:7f:8a:2b:f0:93:e4: a6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0A:E4:97:13:8F:21:CE:FE:DB:F8:56:64:2C:37:3A:E1:07:90:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/bb95430e-8b80-392c-8296-34539bd6cb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262/9f263856-ae8c-471f-bea5-ef7480840262.crl X509v3 Authority Key Identifier: keyid:FF:2E:01:66:79:76:80:AB:1E:2E:5A:47:7C:2F:BE:9F:4F:40:37:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f263856-ae8c-471f-bea5-ef7480840262.cer sbgp-ipAddrBlock: critical IPv4: 158.120.88.0/22 192.190.154.0-192.190.159.255 199.250.224.0/20 199.250.251.0-199.250.253.255 209.16.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8e:03:b8:17:33:a7:88:ee:e1:73:11:bf:4e:80:fd:a5:9e: 3e:4e:68:93:07:9d:83:64:81:1f:75:98:7b:79:64:9e:bc:bb: a7:a7:00:85:fc:8f:d3:f2:e9:0a:b4:cc:26:21:01:84:7a:da: 91:be:37:c6:a6:40:12:60:1e:cb:4c:c4:95:c5:f2:e9:1d:30: 58:45:ba:0b:3d:51:2c:07:8c:02:b5:fd:78:f4:4e:56:dc:2c: 40:32:1c:11:c1:28:75:bc:89:4a:56:85:4a:55:01:8b:51:c9: 3a:03:7a:9a:20:4f:92:79:60:a1:e3:49:10:5e:f8:ba:75:e5: 3a:59:45:f8:ea:39:e5:59:67:20:f9:fe:e5:3b:6a:f3:50:56: 4a:96:42:c2:ec:e9:06:c3:fd:c7:8b:85:c7:f2:f3:e9:f7:a7: aa:72:18:a5:6c:f9:e6:92:05:e8:5e:d0:cf:0b:eb:6b:aa:63: 52:b1:cc:28:9a:24:bf:81:43:6d:89:d5:83:77:e4:a9:8b:3f: 2b:ef:b5:05:f2:b7:7b:59:21:0c:8c:a4:c8:76:de:43:91:73: b3:5e:86:1a:b7:a4:01:dc:cd:30:bd:7a:b8:2b:84:25:ac:43: 46:27:38:8c:40:e1:65:69:fe:9a:c1:23:92:78:f4:39:cc:36: 19:c5:4f:97 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEu+QF5BStFpm/8rCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWYyNjM4NTYtYWU4Yy00NzFmLWJlYTUtZWY3NDgwODQw MjYyMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWNlZWZjNDAtODI1ZC00NGU3LTljODMtN2U5MDgwMTk4MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlR3ccaUPlOKA/EL7TvzPwMdUsfmTY73XEi3 7eiyQGQVdwXQkTa4NTSRl6HzxoPEJekjYc4nznvEdIXvSKWHhhTuM349zgEJK4nk sDm0MV1nZaTIEs5qPhwZPpgRmpCwTf1huvwu1cyfsbrFKnRj0eAnVthyEQU0MzXx WxikOYDYG9XxUYcRWs85sHxi3lW3wJG9ecbaf0Wej92a5dXwkFidbbCGDUNzLnpV xZA6mi7R4myJhp5frHtJlU0/67k4uFliMrqvCDBzSq9/EbEhwhKfucjdxxOage3g bfvy2xjA1l1XwqdwfQO1PabmUfkq6i8aHvXprsp/iivwk+SmXQIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFA0K5JcTjyHO/tv4VmQsNzrhB5AFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2 Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0ODA4NDAyNjIvYmI5NTQzMGUtOGI4MC0z OTJjLTgyOTYtMzQ1MzliZDZjYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWYyNjM4NTYtYWU4Yy00NzFmLWJl YTUtZWY3NDgwODQwMjYyLzlmMjYzODU2LWFlOGMtNDcxZi1iZWE1LWVmNzQ4MDg0 MDI2Mi5jcmwwHwYDVR0jBBgwFoAU/y4BZnl2gKseLlpHfC++n09ANxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ZjI2Mzg1Ni1hZThjLTQ3MWYtYmVhNS1lZjc0 ODA4NDAyNjIuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCnnhYMAwD BAHAvpoDBAXAvoADBATH+uAwDAMEAMf6+wMEAcf6/AMEAtEQlDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY jgO4FzOniO7hcxG/ToD9pZ4+TmiTB52DZIEfdZh7eWSevLunpwCF/I/T8ukKtMwm IQGEetqRvjfGpkASYB7LTMSVxfLpHTBYRboLPVEsB4wCtf149E5W3CxAMhwRwSh1 vIlKVoVKVQGLUck6A3qaIE+SeWCh40kQXvi6deU6WUX46jnlWWcg+f7lO2rzUFZK lkLC7OkGw/3Hi4XH8vPp96eqchilbPnmkgXoXtDPC+trqmNSscwomiS/gUNtidWD d+Spiz8r77UF8rd7WSEMjKTIdt5DkXOzXoYat6QB3M0wvXq4K4QlrENGJziMQOFl af6awSOSePQ5zDYZxU+X -----END CERTIFICATE-----Generated at Wed Nov 5 10:12:36 2025 by rpki-client