$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa File: 6aa460fd-e42f-3608-9335-77aaae092d13.roa (raw, json) Hash identifier: C6NnwcRwbNMnQpwUCPsnLLEg+x+MnkYVT6q8wPXhcvs= Subject key identifier: BA:27:91:B5:3B:38:98:EA:68:37:48:BB:9A:6F:96:70:C4:34:2B:2D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B85CD38050C4EFA5E53F8C470 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa Signing time: Tue 14 Oct 2025 20:43:42 +0000 ROA not before: Tue 14 Oct 2025 20:43:42 +0000 ROA not after: Mon 12 Jan 2026 21:43:42 +0000 asID: 23013 IP address blocks: 128.241.1.0/29 maxlen: 29 128.242.180.112/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:cd:38:05:0c:4e:fa:5e:53:f8:c4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 14 20:43:42 2025 GMT Not After : Jan 12 21:43:42 2026 GMT Subject: CN=8a244a78-b6a2-447c-b249-9ef8c4102159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:b9:8f:e4:d5:3b:9e:ee:da:05:9d:63:db: a9:24:b1:01:65:c9:92:ac:06:b8:42:41:68:ad:39: db:8a:b2:70:23:2c:ba:d3:b8:11:29:4a:52:af:58: 98:a9:9d:68:17:0c:be:04:3d:c0:2c:71:74:32:cf: 37:33:e6:b2:4f:f2:0d:62:d4:cf:74:71:da:72:e8: 65:a6:df:57:82:39:4d:42:0a:11:12:e0:ab:25:14: ad:0e:b5:b1:9c:35:2e:05:cb:a3:0e:67:f0:d6:87: d7:ff:05:f9:b1:db:2a:4c:fb:f7:7a:2d:97:95:d1: 0e:41:37:79:d4:96:7b:53:0c:c8:0f:7f:14:64:d2: 23:07:a1:e6:a9:63:ec:c4:ad:22:ae:b6:53:e6:22: f8:70:f1:84:61:30:7a:69:5e:ad:ee:d3:8c:9e:b4: 5f:37:c9:42:ae:37:ae:68:5e:8e:e1:a7:d6:64:92: 4c:95:a3:dd:03:01:c9:7d:5b:a7:ec:16:99:be:ce: 9c:1a:fb:2d:73:6e:3a:5b:16:a8:a6:63:b5:ba:c9: 98:b0:15:15:5e:ee:dd:62:d2:22:f9:e9:29:2b:a8: 33:d1:6f:a1:cf:3c:ab:d1:6a:04:da:cc:04:89:8d: 49:f7:16:55:fa:1e:38:bd:e2:0d:9f:1b:e1:8a:22: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:91:B5:3B:38:98:EA:68:37:48:BB:9A:6F:96:70:C4:34:2B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.1.0/29 128.242.180.112/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ba:1b:eb:8e:b6:b4:f1:54:2d:77:72:68:ef:0f:f6:76:27: e5:f3:69:11:15:85:77:f7:b3:76:b4:99:89:47:15:85:07:a7: 7f:d3:de:00:20:5a:ef:15:ec:c9:69:4b:b7:87:4b:b9:92:84: 18:b4:37:6a:6c:ee:d6:92:f3:92:46:2f:8c:3b:e1:08:a5:dc: d0:e3:19:0d:75:b5:ae:e7:85:83:b8:b4:e0:9d:e1:cf:0b:5b: cb:07:93:d1:85:ec:19:24:43:4e:55:b8:79:a3:d6:a9:71:4e: 9c:44:59:46:a3:bf:af:ae:45:03:c6:80:a5:72:12:f7:4f:26: a6:58:b5:1e:ee:e9:71:f1:f5:1f:43:87:56:73:60:9b:1f:51: 5e:0b:a9:d4:25:cf:5a:98:cb:81:6c:0d:a0:60:a5:cd:fc:33: 5d:1b:e6:33:1d:b7:6b:40:b2:ee:7e:68:69:37:d2:f0:0d:6a: bc:e5:a4:d1:17:f2:e8:4e:63:b1:a8:ac:e6:a6:fa:11:49:b1: 79:db:8f:7d:1d:f9:3f:78:89:44:78:e2:ac:24:bb:23:b4:dd: 7c:a1:fc:c3:b0:c2:06:82:a4:2b:5e:8f:66:64:e7:44:ad:16: 97:f5:3d:03:c1:12:05:af:1c:00:32:a1:d0:b5:4f:96:7f:89: 83:38:31:fa -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuFzTgFDE76XlP4xHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxNDIwNDM0MloXDTI2MDExMjIxNDM0MlowLzEtMCsGA1UEAxMk OGEyNDRhNzgtYjZhMi00NDdjLWIyNDktOWVmOGM0MTAyMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZe5j+TVO57u2gWdY9upJLEBZcmSrAa4QkFo rTnbirJwIyy607gRKUpSr1iYqZ1oFwy+BD3ALHF0Ms83M+ayT/INYtTPdHHacuhl pt9XgjlNQgoREuCrJRStDrWxnDUuBcujDmfw1ofX/wX5sdsqTPv3ei2XldEOQTd5 1JZ7UwzID38UZNIjB6HmqWPsxK0irrZT5iL4cPGEYTB6aV6t7tOMnrRfN8lCrjeu aF6O4afWZJJMlaPdAwHJfVun7BaZvs6cGvstc246WxaopmO1usmYsBUVXu7dYtIi +ekpK6gz0W+hzzyr0WoE2swEiY1J9xZV+h44veINnxvhiiLiZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLonkbU7OJjqaDdIu5pvlnDENCstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmFhNDYwZmQtZTQyZi0z NjA4LTkzMzUtNzdhYWFlMDkyZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUDgPEBAAMF A4DytHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALbob6462tPFULXdyaO8P9nYn5fNpERWFd/ezdrSZiUcV hQenf9PeACBa7xXsyWlLt4dLuZKEGLQ3amzu1pLzkkYvjDvhCKXc0OMZDXW1rueF g7i04J3hzwtbyweT0YXsGSRDTlW4eaPWqXFOnERZRqO/r65FA8aApXIS908mpli1 Hu7pcfH1H0OHVnNgmx9RXgup1CXPWpjLgWwNoGClzfwzXRvmMx23a0Cy7n5oaTfS 8A1qvOWk0Rfy6E5jsais5qb6EUmxeduPfR35P3iJRHjirCS7I7TdfKH8w7DCBoKk K16PZmTnRK0Wl/U9A8ESBa8cADKh0LVPln+Jgzgx+g== -----END CERTIFICATE-----Generated at Wed Oct 29 06:48:29 2025 by rpki-client