$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: 79xAwl2GF+0DXb3VAdzzhBOKeGbKl7Yl3Qpovgl7ISc= Subject key identifier: 9C:63:AC:09:6D:45:28:4B:A9:62:C2:4D:E2:69:47:A7:A1:A8:13:17 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D290EAF65F515B3D87E00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:29:0e:af:65:f5:15:b3:d8:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9455fba7-cd93-4b7e-9398-d2d9b9c7a7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:78:1d:bc:9e:79:a2:8f:fd:a4:2d:af:7b:e5: ff:82:d6:01:e9:97:9c:6c:e7:87:5c:ae:fa:8f:72: 5a:e7:eb:bd:42:71:bd:dd:31:87:cc:d2:29:ac:27: ce:f7:24:b5:59:9c:2b:a4:99:b3:27:e5:12:b5:1d: 99:df:bf:44:8c:f4:4a:54:45:66:fe:2a:4d:42:25: a3:57:91:80:4e:ab:52:57:1b:ae:e9:d4:14:06:e6: f9:c7:3b:c5:a1:2b:4e:35:3b:ba:94:47:b3:4f:1c: 0b:7f:a8:c2:80:6d:39:40:84:a5:50:9a:12:f3:f2: 4a:17:cc:25:44:95:49:3a:9a:1d:3a:32:10:ed:7a: 8a:66:a6:74:00:10:14:87:ce:cb:be:11:1b:55:92: 77:77:5e:9f:05:e9:d9:93:60:45:15:3d:29:a8:23: c5:2c:74:6b:b7:ca:a8:0a:c4:e1:e4:1f:fc:36:c9: f3:da:24:26:84:47:6b:38:79:42:ab:ed:3d:dd:1f: 49:f0:49:09:ec:06:27:79:d5:5a:59:3d:76:d3:e2: 9b:3c:c1:6f:22:3f:33:d3:f5:6a:c8:8e:7d:f0:a9: 45:2c:9d:c6:f4:d8:69:43:64:ff:3a:26:5d:f4:d8: 71:ff:07:7d:35:e5:6f:3a:89:67:51:05:76:92:98: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:AC:09:6D:45:28:4B:A9:62:C2:4D:E2:69:47:A7:A1:A8:13:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:79:3f:b3:0d:18:09:12:2e:cf:f1:9e:99:6e:b6:7c:b7:f0: 9a:90:b0:2f:78:3b:3f:f5:6b:2a:7c:9d:af:d0:06:20:ff:8b: c0:e8:fc:6c:d7:96:56:f2:87:92:2a:e6:d3:82:d9:b3:6c:2d: b6:17:2b:b9:97:f6:ea:df:69:97:6b:08:98:4a:8a:f5:18:a0: 19:22:ce:91:e4:86:55:09:aa:83:d0:a5:d3:a8:73:2a:94:8c: 2a:84:94:31:a4:12:88:db:ba:39:5c:f8:44:0b:ee:41:d5:57: 32:08:09:d8:da:34:0f:00:61:53:0a:89:6e:d8:a6:ab:84:ad: 18:f9:7e:d1:ea:9a:b8:ed:51:de:17:7d:6b:21:ad:c9:31:05: 65:49:92:9e:f5:7d:e2:12:94:13:89:75:cf:a0:a7:94:87:cc: 56:be:31:84:1a:98:bc:1e:f8:2f:16:0c:e7:8f:24:76:05:cc: 5c:fa:da:a4:9a:26:35:01:f6:6d:75:17:10:e5:56:6a:fc:9f: 7b:a9:b2:9d:4d:9f:a0:59:37:2c:14:e3:77:b9:21:6e:06:22: 71:26:31:4a:9c:a1:b8:17:5d:eb:32:54:d9:f5:53:9e:91:d0: 9c:ac:66:d3:0a:6e:c0:a1:fd:c7:83:6e:03:f5:b8:dd:74:b3: e8:00:48:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSkOr2X1FbPYfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTQ1NWZiYTctY2Q5My00YjdlLTkzOTgtZDJkOWI5YzdhN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHgdvJ55oo/9pC2ve+X/gtYB6ZecbOeHXK76 j3Ja5+u9QnG93TGHzNIprCfO9yS1WZwrpJmzJ+UStR2Z379EjPRKVEVm/ipNQiWj V5GATqtSVxuu6dQUBub5xzvFoStONTu6lEezTxwLf6jCgG05QISlUJoS8/JKF8wl RJVJOpodOjIQ7XqKZqZ0ABAUh87LvhEbVZJ3d16fBenZk2BFFT0pqCPFLHRrt8qo CsTh5B/8Nsnz2iQmhEdrOHlCq+093R9J8EkJ7AYnedVaWT120+KbPMFvIj8z0/Vq yI598KlFLJ3G9NhpQ2T/OiZd9Nhx/wd9NeVvOolnUQV2kpjx+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJxjrAltRShLqWLCTeJpR6ehqBMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQeT+zDRgJEi7P8Z6ZbrZ8t/CakLAveDs/9WsqfJ2v0AYg/4vA6Pxs 15ZW8oeSKubTgtmzbC22Fyu5l/bq32mXawiYSor1GKAZIs6R5IZVCaqD0KXTqHMq lIwqhJQxpBKI27o5XPhEC+5B1VcyCAnY2jQPAGFTColu2KarhK0Y+X7R6pq47VHe F31rIa3JMQVlSZKe9X3iEpQTiXXPoKeUh8xWvjGEGpi8HvgvFgznjyR2Bcxc+tqk miY1AfZtdRcQ5VZq/J97qbKdTZ+gWTcsFON3uSFuBiJxJjFKnKG4F13rMlTZ9VOe kdCcrGbTCm7Aof3Hg24D9bjddLPoAEhw -----END CERTIFICATE-----Generated at Sun Nov 2 23:39:23 2025 by rpki-client