$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa File: 72590a81-0372-3494-a8c9-c4c50e29c4e4.roa (raw, json) Hash identifier: k2ocWURfQObVzTXH2YpHH5U1DAp7CGdYaakbdq+K4mY= Subject key identifier: F9:51:7E:60:BE:63:19:7F:48:00:3C:C7:32:96:60:7F:9A:A7:99:31 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BD3F53A2702CABD8F95673820 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa Signing time: Tue 11 Nov 2025 20:37:22 +0000 ROA not before: Tue 11 Nov 2025 20:37:22 +0000 ROA not after: Mon 09 Feb 2026 20:37:22 +0000 asID: 210187 IP address blocks: 128.242.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:f5:3a:27:02:ca:bd:8f:95:67:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 11 20:37:22 2025 GMT Not After : Feb 9 20:37:22 2026 GMT Subject: CN=f4e5a674-fcbb-4f9e-87b6-61409ef40303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:52:a2:1e:81:80:ed:ec:fd:fb:81:4c:e5: 86:9d:69:7e:a7:ec:bc:30:eb:59:fa:fc:3b:f2:42: ba:d8:2a:14:f3:36:63:89:75:93:3e:5e:62:01:12: 52:a8:34:43:55:92:60:a6:4d:0a:ce:9e:91:98:27: 43:fe:ad:2c:ef:f2:44:cd:5f:05:5d:b9:39:a3:a7: 9f:88:60:b8:5f:0b:cb:07:c5:63:d1:9a:47:59:ea: 55:4d:3d:32:87:62:78:06:f9:8a:1a:a4:35:5a:ec: 8e:65:cd:92:ae:6f:d0:eb:2d:9e:0a:ce:f4:1f:80: ff:99:42:72:ce:41:1a:be:74:ba:81:b8:20:68:f7: 98:da:fe:a9:88:0c:7c:4d:a0:48:27:0e:2d:b1:17: 4d:bb:62:24:7b:f7:90:08:3d:43:ef:2b:a9:b0:2c: 2b:34:2e:5e:31:d3:18:9c:2e:82:fd:4d:93:62:55: 82:48:42:87:05:67:aa:84:30:c9:84:78:92:1f:1b: 35:9e:e1:c3:77:d7:c2:08:c5:0a:39:a5:77:a6:5b: a3:cd:8d:cc:c3:23:ab:ca:e3:17:55:d3:bb:82:11: 2a:e8:83:58:b9:8b:22:35:75:00:cf:c4:f3:6b:0c: a3:5d:b0:10:3c:dc:5f:bc:c2:63:29:3d:ab:d5:6d: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:7E:60:BE:63:19:7F:48:00:3C:C7:32:96:60:7F:9A:A7:99:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f2:00:ac:4f:e4:43:93:de:02:e6:cc:5e:e4:18:58:6a:c3: 43:24:7d:5e:f7:67:77:39:e6:19:c0:c4:22:6f:38:4d:bb:7a: a2:58:cc:cf:42:55:0f:3d:5b:38:4c:58:31:57:81:96:f9:d2: 98:01:a9:f2:7a:62:ce:64:c1:0c:ea:41:17:f5:1a:6c:11:88: 5f:81:75:3f:22:23:8b:cc:b9:33:47:3c:26:8d:4f:94:a5:a9: 31:33:92:8b:ee:e7:a6:83:cd:b3:4d:ee:61:41:ec:af:c0:df: 3e:7b:d5:ea:92:b0:7c:3d:42:0a:a6:5e:3f:35:5f:85:5d:12: c5:f6:4a:ba:d7:a7:b0:83:ff:2d:89:3b:cf:49:ee:30:cb:97: 1e:b3:88:ac:df:ac:be:29:37:33:e7:92:9c:f3:fd:5f:86:b2: 97:47:69:18:dd:a6:0c:ae:dc:c2:1e:99:3d:6e:ad:2e:a5:70: 3b:1c:36:ef:53:19:0c:f9:be:c8:1a:7d:10:e7:91:51:f5:9e: 7e:fe:3e:8d:2b:cf:6f:6a:f0:02:86:62:97:6e:4e:79:95:0b: 6f:d0:4c:e7:0e:8b:ba:71:62:10:08:ca:80:ef:33:66:ea:c4: 16:87:13:5f:cf:45:cc:6c:9a:33:3b:bf:85:e4:28:5b:77:eb: a7:df:fc:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvT9TonAsq9j5VnOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTExMTIwMzcyMloXDTI2MDIwOTIwMzcyMlowLzEtMCsGA1UEAxMk ZjRlNWE2NzQtZmNiYi00ZjllLTg3YjYtNjE0MDllZjQwMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZSoh6BgO3s/fuBTOWGnWl+p+y8MOtZ+vw7 8kK62CoU8zZjiXWTPl5iARJSqDRDVZJgpk0Kzp6RmCdD/q0s7/JEzV8FXbk5o6ef iGC4XwvLB8Vj0ZpHWepVTT0yh2J4BvmKGqQ1WuyOZc2Srm/Q6y2eCs70H4D/mUJy zkEavnS6gbggaPeY2v6piAx8TaBIJw4tsRdNu2Ike/eQCD1D7yupsCwrNC5eMdMY nC6C/U2TYlWCSEKHBWeqhDDJhHiSHxs1nuHDd9fCCMUKOaV3plujzY3MwyOryuMX VdO7ghEq6INYuYsiNXUAz8TzawyjXbAQPNxfvMJjKT2r1W2bjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlRfmC+Yxl/SAA8xzKWYH+ap5kxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzI1OTBhODEtMDM3Mi0z NDk0LWE4YzktYzRjNTBlMjljNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPK9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzyAKxP5EOT3gLmzF7kGFhqw0MkfV73Z3c55hnAxCJvOE27eqJYzM9C VQ89WzhMWDFXgZb50pgBqfJ6Ys5kwQzqQRf1GmwRiF+BdT8iI4vMuTNHPCaNT5Sl qTEzkovu56aDzbNN7mFB7K/A3z571eqSsHw9QgqmXj81X4VdEsX2SrrXp7CD/y2J O89J7jDLlx6ziKzfrL4pNzPnkpzz/V+GspdHaRjdpgyu3MIemT1urS6lcDscNu9T GQz5vsgafRDnkVH1nn7+Po0rz29q8AKGYpduTnmVC2/QTOcOi7pxYhAIyoDvM2bq xBaHE1/PRcxsmjM7v4XkKFt366ff/Kw= -----END CERTIFICATE-----Generated at Sat Nov 15 08:26:30 2025 by rpki-client