$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa File: 37e2125b-0513-38b8-b530-2d308d41fbfe.roa (raw, json) Hash identifier: ORzBWvbMw0yqP0nux23hOuR19ZqQodOAdDB/+II3rb8= Subject key identifier: 15:89:52:3C:56:C2:A5:D9:EC:76:09:65:22:37:6B:A6:AC:9A:95:4D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BCD9B10B7504D4F7F5EF63310 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 2914 IP address blocks: 129.250.161.128/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:10:b7:50:4d:4f:7f:5e:f6:33:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=0f625b45-a3c2-4fc5-ab88-b093b0a2e382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:a1:d9:42:32:5d:22:2d:80:e8:2d:16:55: 24:87:bc:e0:c9:6d:dd:c7:92:63:91:fc:fb:c1:cd: 49:83:e6:8d:2e:f4:7f:30:ba:05:bb:81:b5:e1:85: 23:0b:c1:20:d4:b6:65:67:24:d5:81:b9:d4:04:6c: bf:99:af:82:3d:6b:aa:7d:14:16:5b:14:8e:67:46: a0:87:41:ef:17:c2:04:6c:f4:a6:e0:4f:cb:e0:f4: 0e:24:2f:24:11:46:e2:00:93:07:ad:52:b3:ee:85: a8:21:09:0c:03:88:a6:b3:48:f6:6f:fb:c8:29:7f: 91:30:f1:64:20:33:85:1b:94:05:89:d8:9a:80:b9: 54:df:b5:45:15:43:12:85:65:39:86:4e:1d:27:88: 6e:7f:0c:69:9f:83:1c:5a:21:81:e9:98:f2:a3:7a: 33:bf:e1:8b:43:d3:90:c9:70:0d:e3:df:5c:53:6a: 73:86:1b:bd:ca:0d:81:2e:17:2a:e1:35:35:5b:8a: 44:a9:53:6d:f0:15:a6:86:3f:6c:ae:2d:05:d2:01: fc:d6:dc:6c:7c:7f:62:56:0f:10:30:f3:c5:7b:41: fc:5b:87:15:b0:55:55:f7:3c:ad:4f:1e:81:74:d6: 4a:5c:cb:9d:ab:c8:80:e3:aa:ea:db:2a:dc:67:04: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:52:3C:56:C2:A5:D9:EC:76:09:65:22:37:6B:A6:AC:9A:95:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:72:96:04:19:67:11:e1:21:34:34:3f:00:5d:c3:ec:b9: cf:b3:8d:8e:b4:81:c8:23:54:59:82:ce:7f:05:3f:f9:1a:64: 87:d1:c4:23:3d:9f:03:b0:53:52:dd:19:63:9c:fc:c0:ee:78: 56:15:73:2f:15:fc:60:91:dc:95:50:2a:07:93:36:9c:34:6f: c6:9b:6e:8a:c6:e6:02:a5:7d:4b:4e:5f:b7:15:07:f2:ab:08: 36:c8:7a:9e:4c:ee:ec:24:63:b5:bb:26:91:92:96:17:f3:a4: c3:0d:58:76:e9:ce:a8:21:a1:e0:33:32:86:75:22:be:6d:1b: 49:15:7e:af:ce:56:81:d9:47:9f:57:c4:64:91:b3:99:7a:bd: da:6f:be:13:69:87:1e:96:0b:39:66:75:7c:cb:a0:e6:56:d6: a6:e2:19:db:73:d5:d8:c8:d5:f2:eb:0c:7e:d3:91:16:11:bb: f6:35:65:57:4c:72:73:4a:39:a9:f6:a1:0f:90:33:35:25:9d: a9:f9:22:af:6d:3d:0e:e8:af:97:64:a2:3c:81:0e:d7:eb:00: 5c:73:3b:6a:15:f2:69:96:bd:0b:93:37:35:33:71:eb:c6:82: 4d:ee:60:de:26:fa:25:11:f4:37:44:03:cf:f2:64:52:84:80: 31:aa:92:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvNmxC3UE1Pf172MxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MGY2MjViNDUtYTNjMi00ZmM1LWFiODgtYjA5M2IwYTJlMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYah2UIyXSItgOgtFlUkh7zgyW3dx5Jjkfz7 wc1Jg+aNLvR/MLoFu4G14YUjC8Eg1LZlZyTVgbnUBGy/ma+CPWuqfRQWWxSOZ0ag h0HvF8IEbPSm4E/L4PQOJC8kEUbiAJMHrVKz7oWoIQkMA4ims0j2b/vIKX+RMPFk IDOFG5QFidiagLlU37VFFUMShWU5hk4dJ4hufwxpn4McWiGB6Zjyo3ozv+GLQ9OQ yXAN499cU2pzhhu9yg2BLhcq4TU1W4pEqVNt8BWmhj9sri0F0gH81txsfH9iVg8Q MPPFe0H8W4cVsFVV9zytTx6BdNZKXMudq8iA46rq2yrcZwQwEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBWJUjxWwqXZ7HYJZSI3a6asmpVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzdlMjEyNWItMDUxMy0z OGI4LWI1MzAtMmQzMDhkNDFmYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAt03KWBBlnEeEhNDQ/AF3D7LnPs42OtIHII1RZgs5/BT/5GmSH0cQj PZ8DsFNS3RljnPzA7nhWFXMvFfxgkdyVUCoHkzacNG/Gm26KxuYCpX1LTl+3FQfy qwg2yHqeTO7sJGO1uyaRkpYX86TDDVh26c6oIaHgMzKGdSK+bRtJFX6vzlaB2Uef V8RkkbOZer3ab74TaYcelgs5ZnV8y6DmVtam4hnbc9XYyNXy6wx+05EWEbv2NWVX THJzSjmp9qEPkDM1JZ2p+SKvbT0O6K+XZKI8gQ7X6wBccztqFfJplr0Lkzc1M3Hr xoJN7mDeJvolEfQ3RAPP8mRShIAxqpKo -----END CERTIFICATE-----Generated at Sat Nov 15 08:24:16 2025 by rpki-client