$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa File: a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa (raw, json) Hash identifier: kkLYvVVSYzCja42ne/4s2QMGsA2vjiD8dA1suPvJBuM= Subject key identifier: 85:BC:BB:4E:A1:16:2D:23:9F:45:8C:64:E3:C5:EF:59:01:CD:B6:F4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB27747F6782C2D2118804540 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa Signing time: Thu 30 Oct 2025 20:41:55 +0000 ROA not before: Thu 30 Oct 2025 20:41:55 +0000 ROA not after: Wed 28 Jan 2026 21:41:55 +0000 asID: 13443 IP address blocks: 128.242.116.0/24 maxlen: 24 128.242.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:77:47:f6:78:2c:2d:21:18:80:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 30 20:41:55 2025 GMT Not After : Jan 28 21:41:55 2026 GMT Subject: CN=54973ea1-1518-43c8-9c83-588d2e9cae9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fc:ae:b7:ff:40:07:48:e1:54:be:03:a6:ff: f6:ed:8c:ea:6e:51:20:ff:e7:36:f6:b4:8b:66:91: 9f:79:87:ab:eb:7b:e8:35:17:e4:24:67:87:10:32: 0e:32:ca:a4:87:38:7b:15:a7:19:8c:d3:3d:82:32: 3d:04:e8:fe:58:69:e6:8b:e3:a1:95:89:99:40:57: be:18:97:2d:c3:8f:1d:bb:aa:4c:aa:0a:70:28:19: 07:74:48:b1:62:df:bb:c7:4a:bf:66:e7:75:8e:e6: 6f:99:e5:ad:f2:85:1c:30:2f:5d:4f:fd:fb:74:3b: 24:fa:c4:0e:53:ab:86:34:44:e7:b2:dd:e5:c9:5f: 38:46:09:15:a2:fe:1d:be:75:dd:ca:84:12:81:c5: 16:a9:c8:81:84:da:57:73:31:7c:55:c3:8f:bd:7e: 22:17:e9:fa:19:2b:b1:54:08:bc:3b:8f:7d:af:ef: d8:93:57:67:6e:e6:00:43:c8:8e:f5:6f:4c:c5:12: 2e:0c:96:ff:5b:e9:54:e3:71:77:89:fc:ee:9f:20: d1:b4:1e:cd:4f:a5:f0:d2:2d:7d:96:79:14:88:01: ea:2a:e6:46:a5:a9:73:01:52:f2:2e:71:ae:cb:10: 91:62:a5:5c:92:be:02:8c:f7:89:3d:81:c9:c0:e9: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:BB:4E:A1:16:2D:23:9F:45:8C:64:E3:C5:EF:59:01:CD:B6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.116.0/24 128.242.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:db:f9:12:db:5b:21:e3:63:52:aa:7b:4e:30:35:49:66:9a: 82:76:30:94:1d:d8:00:7b:2a:f4:28:5a:ea:cf:ec:66:91:8e: 31:41:a4:2c:b1:e7:27:63:65:bc:ea:69:8b:b7:96:d2:c2:14: 1b:1c:2d:ca:02:06:b7:dd:27:7d:1c:80:01:84:d5:93:35:f0: 67:f3:e7:94:eb:38:71:51:9a:17:12:63:05:f7:e1:fc:8c:f0: 32:b7:06:3f:74:e9:31:d0:85:bd:7f:b6:c2:8d:c5:09:29:63: 1b:af:a1:6c:3e:60:8b:15:f9:94:16:3f:35:51:71:ab:ee:60: f2:f0:83:a0:d7:aa:3e:81:86:55:ec:6c:9b:65:f4:db:0e:1f: d8:aa:7e:7c:cb:d5:48:02:3d:aa:cf:88:52:92:41:51:32:f8: 53:ef:5d:df:67:04:e3:7f:8f:37:6b:c1:52:2b:58:53:4d:79: 7e:80:d8:cf:b5:e2:da:8e:b6:87:ae:b3:f8:20:66:53:f6:50: cb:03:ad:13:5b:94:9e:19:40:af:f3:f3:f0:e6:7b:3f:63:8b: 91:64:3e:fa:57:66:92:a0:b6:37:dd:ad:ca:ff:eb:ac:dd:ca: ac:07:35:13:45:c3:1c:ce:a9:0c:08:b6:57:0e:5c:6f:3f:0c: da:c6:56:31 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuyd0f2eCwtIRiARUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAzMDIwNDE1NVoXDTI2MDEyODIxNDE1NVowLzEtMCsGA1UEAxMk NTQ5NzNlYTEtMTUxOC00M2M4LTljODMtNTg4ZDJlOWNhZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPyut/9AB0jhVL4Dpv/27YzqblEg/+c29rSL ZpGfeYer63voNRfkJGeHEDIOMsqkhzh7FacZjNM9gjI9BOj+WGnmi+OhlYmZQFe+ GJctw48du6pMqgpwKBkHdEixYt+7x0q/Zud1juZvmeWt8oUcMC9dT/37dDsk+sQO U6uGNETnst3lyV84RgkVov4dvnXdyoQSgcUWqciBhNpXczF8VcOPvX4iF+n6GSux VAi8O499r+/Yk1dnbuYAQ8iO9W9MxRIuDJb/W+lU43F3ifzunyDRtB7NT6Xw0i19 lnkUiAHqKuZGpalzAVLyLnGuyxCRYqVckr4CjPeJPYHJwOnPbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIW8u06hFi0jn0WMZOPF71kBzbb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTdjMjY5NTMtMDhkZC0z ZTI1LWFjYmUtYjRiNWUzY2FlZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgPJ0AwQA gPK1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACfb+RLbWyHjY1Kqe04wNUlmmoJ2MJQd2AB7KvQoWurP7GaR jjFBpCyx5ydjZbzqaYu3ltLCFBscLcoCBrfdJ30cgAGE1ZM18Gfz55TrOHFRmhcS YwX34fyM8DK3Bj906THQhb1/tsKNxQkpYxuvoWw+YIsV+ZQWPzVRcavuYPLwg6DX qj6BhlXsbJtl9NsOH9iqfnzL1UgCParPiFKSQVEy+FPvXd9nBON/jzdrwVIrWFNN eX6A2M+14tqOtoeus/ggZlP2UMsDrRNblJ4ZQK/z8/Dmez9ji5FkPvpXZpKgtjfd rcr/66zdyqwHNRNFwxzOqQwItlcOXG8/DNrGVjE= -----END CERTIFICATE-----Generated at Sat Nov 1 19:48:56 2025 by rpki-client