$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa File: 3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa (raw, json) Hash identifier: CajvxXcCdoA2wpxT1TkVLV8fFnURxChHLkmUiDk7LX0= Subject key identifier: F7:A8:DD:01:77:74:33:F2:97:74:BA:9D:62:C0:32:D8:77:99:8A:63 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B0B76D724F565AEE30FCE2AC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 3949 IP address blocks: 128.121.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d7:24:f5:65:ae:e3:0f:ce:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=7ea7676b-daaf-4d96-9d47-853e8f835638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:f7:c6:63:76:2f:11:c3:4e:8a:d0:aa:6d: 90:7b:2a:a7:b3:de:dd:48:43:ca:c1:ac:61:b4:9b: d6:36:ce:d5:73:a8:d2:63:7b:52:2c:53:a8:d4:eb: e6:6e:db:08:78:92:e8:13:fd:e5:bb:ed:f1:fc:8f: c2:6d:f3:d3:b5:bc:6d:24:76:0e:0b:d9:3b:02:de: 69:1d:d2:1c:0d:45:ca:b6:8f:fb:8b:44:7e:e0:8c: e8:c8:86:54:a4:36:75:0b:db:26:db:3e:82:33:25: f1:1e:8f:55:09:d2:47:4f:2a:9a:60:f2:34:5a:92: 4b:b8:03:d8:5c:2e:39:40:70:e3:31:55:cd:6c:67: 98:a5:8e:dd:85:fe:b7:e7:10:0d:60:8e:25:5a:f3: 2f:8a:46:0f:a3:16:12:7e:d3:0a:e6:53:35:11:8d: e3:e9:a4:29:63:7f:5d:f7:48:f2:76:f2:15:9a:3a: be:36:9c:2e:7b:cc:04:e3:c3:9e:46:ad:56:c8:47: 77:5a:07:7d:cb:a3:2f:49:09:c7:6d:0a:10:8f:5a: ad:12:68:43:1c:56:15:a3:ef:f5:43:22:d1:ac:2c: 7d:14:ae:05:b6:28:14:8f:cb:38:8d:57:71:9b:ae: 68:98:ef:d1:59:89:df:1e:c4:0c:5d:1a:e1:cb:ec: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A8:DD:01:77:74:33:F2:97:74:BA:9D:62:C0:32:D8:77:99:8A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4b:af:b6:ac:3c:7a:b1:f7:7b:e0:4f:ef:93:51:5f:dc:42: f8:7d:68:f7:86:9e:a2:16:8f:db:99:ce:06:db:f4:e4:56:e2: 0d:19:8b:fb:96:d2:5a:1e:77:2d:17:fc:08:c5:63:de:67:ec: a8:dd:c0:3b:6c:17:15:74:cc:89:a6:30:58:3c:9f:ea:e6:f8: 4f:05:87:42:62:b1:6c:b6:11:f9:dc:c2:71:67:89:f9:81:6e: 93:5e:66:ab:d7:66:75:52:91:3d:0e:6f:65:c1:96:1e:14:d8: 27:dd:c0:e9:80:5f:26:ea:35:03:da:26:c1:9b:ee:de:01:59: fd:38:ce:f3:e4:14:c0:03:50:46:eb:8f:25:98:5f:c9:c3:a3: 75:53:9e:30:15:ca:83:0f:24:af:7c:1e:fe:17:79:a6:ca:1f: 86:44:29:2f:99:8d:d5:55:63:66:50:19:40:ef:a3:ce:f6:2c: 9b:a0:75:a8:b0:5d:b4:25:98:72:9c:49:e4:ed:8c:a4:af:39: 9f:7c:3d:62:4e:eb:88:d1:07:78:e3:91:fb:f6:14:a4:51:0b: ae:46:04:8c:28:1f:d9:72:be:92:4d:30:e1:14:4a:a5:7f:56: 8f:13:62:5b:2a:6c:30:87:cf:b2:9f:23:a5:29:45:2f:91:2b: f7:41:6f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtck9WWu4w/OKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk N2VhNzY3NmItZGFhZi00ZDk2LTlkNDctODUzZThmODM1NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjET3xmN2LxHDTorQqm2Qeyqns97dSEPKwaxh tJvWNs7Vc6jSY3tSLFOo1OvmbtsIeJLoE/3lu+3x/I/CbfPTtbxtJHYOC9k7At5p HdIcDUXKto/7i0R+4IzoyIZUpDZ1C9sm2z6CMyXxHo9VCdJHTyqaYPI0WpJLuAPY XC45QHDjMVXNbGeYpY7dhf635xANYI4lWvMvikYPoxYSftMK5lM1EY3j6aQpY39d 90jydvIVmjq+Npwue8wE48OeRq1WyEd3Wgd9y6MvSQnHbQoQj1qtEmhDHFYVo+/1 QyLRrCx9FK4FtigUj8s4jVdxm65omO/RWYnfHsQMXRrhy+wYXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeo3QF3dDPyl3S6nWLAMth3mYpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2UwZmNhZmYtOThhYy0z NTQ0LTkyZWUtNWMwMzg4NjZjOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgHkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5Lr7asPHqx93vgT++TUV/cQvh9aPeGnqIWj9uZzgbb9ORW4g0Zi/uW 0loedy0X/AjFY95n7KjdwDtsFxV0zImmMFg8n+rm+E8Fh0JisWy2EfncwnFnifmB bpNeZqvXZnVSkT0Ob2XBlh4U2CfdwOmAXybqNQPaJsGb7t4BWf04zvPkFMADUEbr jyWYX8nDo3VTnjAVyoMPJK98Hv4XeabKH4ZEKS+ZjdVVY2ZQGUDvo872LJugdaiw XbQlmHKcSeTtjKSvOZ98PWJO64jRB3jjkfv2FKRRC65GBIwoH9lyvpJNMOEUSqV/ Vo8TYlsqbDCHz7KfI6UpRS+RK/dBb+E= -----END CERTIFICATE-----Generated at Tue Oct 14 10:51:09 2025 by rpki-client