$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa File: 13f94f60-2c64-39fc-a547-9f9152aac3be.roa (raw, json) Hash identifier: VBmoH3H+2+BcClUrpIv0/KRTYFeaa2izd1bTjhy9hDQ= Subject key identifier: BE:86:CB:A0:CF:99:B5:A2:94:53:D7:25:F1:49:09:1E:59:CD:29:59 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BC8059E890F5C7945BF600680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa Signing time: Fri 07 Nov 2025 14:00:38 +0000 ROA not before: Fri 07 Nov 2025 14:00:38 +0000 ROA not after: Thu 05 Feb 2026 14:00:38 +0000 asID: 134578 IP address blocks: 206.54.13.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:05:9e:89:0f:5c:79:45:bf:60:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 7 14:00:38 2025 GMT Not After : Feb 5 14:00:38 2026 GMT Subject: CN=d0bc9f49-fb3b-4a90-8c31-8893643e8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:ba:da:c7:aa:b9:95:9d:09:74:69:63:bd: 5a:fd:0e:34:4d:1f:18:d0:cd:57:ef:14:95:85:96: d5:7a:97:87:ad:5c:90:45:4b:ac:09:30:dc:d1:2b: 94:f9:14:16:99:12:0a:32:bc:50:fb:a8:b0:7c:6e: f6:19:bc:1d:6b:69:dc:48:da:0e:6b:d3:43:4e:01: 77:a5:f0:62:f2:69:88:1e:28:e9:0b:eb:fa:9c:0e: d6:8a:aa:c0:d2:f5:49:68:5e:ba:6d:83:e7:d0:b8: 5c:db:6b:b7:08:fb:c4:4d:9e:40:62:48:f4:24:ac: 09:c3:15:52:73:7e:5d:4b:8d:03:08:35:32:41:ed: 4f:ae:ab:4a:69:cf:8b:37:c0:90:05:48:3b:f6:81: db:f4:b2:91:df:7a:f9:6c:a3:64:43:b2:d1:87:cf: 75:32:fe:1b:b7:54:c4:8f:95:ed:bb:72:ea:fd:86: c0:cb:cd:50:d7:ed:21:c6:8b:97:26:a3:30:0d:12: a0:11:29:b4:a3:4c:a1:88:73:9c:a8:9b:fc:70:1a: 28:fc:0b:44:0f:ce:a7:ee:7e:c1:e4:d1:eb:4d:2c: 7a:f6:02:72:21:98:b5:ac:0b:ce:ef:25:a0:ed:87: 1c:04:83:ad:4d:0e:44:be:0e:23:d5:9a:70:8c:76: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:CB:A0:CF:99:B5:A2:94:53:D7:25:F1:49:09:1E:59:CD:29:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/13f94f60-2c64-39fc-a547-9f9152aac3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.13.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:af:6c:1a:f9:f0:41:ad:a7:8e:05:56:9f:70:fb:75:89:4a: bc:63:22:c2:35:e7:b2:5b:22:1f:ea:46:46:e4:39:22:bc:3f: d5:42:55:aa:e2:9a:a8:e3:8d:84:9d:7c:01:ec:83:0e:90:a0: f9:6b:52:35:84:84:f4:3f:e4:6c:25:67:b1:67:e3:30:0d:21: ac:89:09:8e:64:41:46:5e:b4:c1:51:1b:fc:33:61:ee:e4:ba: 74:31:f0:7c:65:41:2f:33:8d:18:48:fd:52:98:40:46:7d:fa: fb:4c:36:50:56:7d:e8:e9:f3:86:4f:8e:d3:1e:ad:28:0a:0e: 23:58:2b:5a:fd:14:e8:ed:fe:d7:54:b7:91:d0:2b:05:ef:4a: 22:94:f3:ba:c1:26:cf:89:3b:5e:f8:4b:79:92:bc:97:11:19: 61:4f:ef:e3:f1:0c:e3:20:fe:f2:a1:d3:57:94:8b:58:83:25: 06:cd:38:0b:ca:c3:cd:12:12:3a:0b:d4:86:a8:d6:44:f0:13: 02:b8:05:6d:f2:ef:e5:ca:02:7b:8a:7a:72:61:ee:ae:5b:88: 15:bc:e8:dc:fa:a3:4f:9f:55:84:95:c6:43:d8:d2:f7:65:ad: 0a:73:21:a0:e3:ba:9a:8c:4c:f9:09:c3:ac:dc:3a:48:d3:e9: 1a:e8:d0:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvIBZ6JD1x5Rb9gBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNzE0MDAzOFoXDTI2MDIwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDBiYzlmNDktZmIzYi00YTkwLThjMzEtODg5MzY0M2U4NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMa62sequZWdCXRpY71a/Q40TR8Y0M1X7xSV hZbVepeHrVyQRUusCTDc0SuU+RQWmRIKMrxQ+6iwfG72Gbwda2ncSNoOa9NDTgF3 pfBi8mmIHijpC+v6nA7WiqrA0vVJaF66bYPn0Lhc22u3CPvETZ5AYkj0JKwJwxVS c35dS40DCDUyQe1PrqtKac+LN8CQBUg79oHb9LKR33r5bKNkQ7LRh891Mv4bt1TE j5Xtu3Lq/YbAy81Q1+0hxouXJqMwDRKgESm0o0yhiHOcqJv8cBoo/AtED86n7n7B 5NHrTSx69gJyIZi1rAvO7yWg7YccBIOtTQ5Evg4j1ZpwjHb/TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL6Gy6DPmbWilFPXJfFJCR5ZzSlZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTNmOTRmNjAtMmM2NC0z OWZjLWE1NDctOWY5MTUyYWFjM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5r2wa+fBBraeOBVafcPt1iUq8YyLCNeeyWyIf6kZG5DkivD/VQlWq 4pqo442EnXwB7IMOkKD5a1I1hIT0P+RsJWexZ+MwDSGsiQmOZEFGXrTBURv8M2Hu 5Lp0MfB8ZUEvM40YSP1SmEBGffr7TDZQVn3o6fOGT47THq0oCg4jWCta/RTo7f7X VLeR0CsF70oilPO6wSbPiTte+Et5kryXERlhT+/j8QzjIP7yodNXlItYgyUGzTgL ysPNEhI6C9SGqNZE8BMCuAVt8u/lygJ7inpyYe6uW4gVvOjc+qNPn1WElcZD2NL3 Za0KcyGg47qajEz5CcOs3DpI0+ka6NDG -----END CERTIFICATE-----Generated at Sat Nov 15 08:29:11 2025 by rpki-client