$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa File: c40b1190-1515-3cb5-9550-3ac9f9324c14.roa (raw, json) Hash identifier: dIuYu9oDOkVzvqAH+QZ1CG8NwDpVsYdVL3wHSDJpcbI= Subject key identifier: FD:4A:A9:29:0B:D9:81:8F:B4:10:61:E7:92:86:4E:91:DF:49:F5:EA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B95AB02A799A09C6091BB07C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 13443 IP address blocks: 128.241.35.0/24 maxlen: 24 128.242.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:02:a7:99:a0:9c:60:91:bb:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c565cb5c-0cdd-44a3-b3fa-3dee8b20b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:7c:e0:30:c7:2e:c1:60:08:00:ac:b3:f5: 1d:35:f2:32:f2:f7:c2:ff:20:04:2d:4b:9f:b6:ee: 44:e1:8f:ed:8d:3c:9b:0e:43:b8:4a:21:4b:c6:5b: b7:92:4d:a7:fe:91:79:d6:30:5a:23:0d:88:61:41: f3:f5:e1:1c:8a:a4:3d:92:76:0b:a6:89:5a:d4:74: 6b:b2:29:19:19:df:da:20:09:54:9f:94:36:16:48: d8:30:ad:41:89:1d:60:d1:e3:e4:98:f2:35:6a:e9: 56:7d:8d:cb:5b:60:10:43:7c:ee:f5:bf:3e:e3:26: bc:13:8e:df:8c:af:cc:a7:3e:8a:f3:f3:52:7c:b0: 29:ad:ce:4c:b3:32:a0:5f:9c:c1:94:b1:9f:ef:b9: cc:74:b5:70:4c:57:a7:a1:d9:f9:03:b0:1a:f0:d1: 0a:1e:11:d3:ca:7c:58:42:65:a7:c5:11:82:57:fe: c2:f5:3e:59:cc:22:8d:4e:e8:be:77:39:a6:f1:f8: 00:c2:00:e5:c1:fb:09:9d:6a:64:91:7f:d1:3d:b9: f5:d9:02:be:73:66:9f:67:b2:16:30:22:b6:05:db: 9a:f3:a8:9f:41:08:27:16:a7:c0:a8:63:26:70:21: 92:ed:65:4a:3a:9c:f8:d0:1d:db:56:8b:bd:85:83: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:A9:29:0B:D9:81:8F:B4:10:61:E7:92:86:4E:91:DF:49:F5:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.35.0/24 128.242.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:da:64:43:6d:91:46:73:68:56:3b:3b:6b:a2:ae:ee:64:97: 60:55:62:2d:e7:87:d5:71:3f:ed:97:63:9b:68:63:55:a1:15: 9e:ed:4b:ef:73:e9:f1:db:8d:d9:9b:17:ab:58:bf:eb:00:b1: 6a:67:4f:d0:46:7b:e6:e5:a9:bb:60:b2:2c:36:72:e1:cb:fc: 04:a6:05:c6:7a:48:72:69:21:4e:f7:a9:af:56:05:55:cd:9d: 2a:6d:cf:b3:7b:7e:88:3d:8b:35:d4:e0:1a:3e:d4:7f:5c:1f: 3c:06:8c:4e:b9:56:00:a1:7f:3b:4f:be:a7:82:f0:bc:80:60: b4:60:f4:0d:32:14:4b:27:99:f3:ea:2c:0c:f4:50:0d:67:63: 98:5d:df:44:24:5f:5c:ac:22:af:94:c4:26:6f:5d:dc:9f:b0: 2d:d4:6a:e2:98:af:39:fc:bc:10:54:53:94:f9:a7:20:90:97: c4:db:77:5b:39:9f:04:8e:a6:b9:b9:37:d0:44:81:24:98:50: 96:1c:46:65:37:c6:c1:3b:e4:ad:ca:54:69:30:f7:be:39:98: ab:17:ae:3f:7a:ed:af:21:7e:af:6b:5b:ea:6e:b7:39:18:ad: e2:61:9b:20:18:d8:80:f4:1f:80:a3:30:dd:44:e4:f3:b0:b1: 70:b9:00:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuVqwKnmaCcYJG7B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzU2NWNiNWMtMGNkZC00NGEzLWIzZmEtM2RlZThiMjBiOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJB84DDHLsFgCACss/UdNfIy8vfC/yAELUuf tu5E4Y/tjTybDkO4SiFLxlu3kk2n/pF51jBaIw2IYUHz9eEciqQ9knYLpola1HRr sikZGd/aIAlUn5Q2FkjYMK1BiR1g0ePkmPI1aulWfY3LW2AQQ3zu9b8+4ya8E47f jK/Mpz6K8/NSfLAprc5MszKgX5zBlLGf77nMdLVwTFenodn5A7Aa8NEKHhHTynxY QmWnxRGCV/7C9T5ZzCKNTui+dzmm8fgAwgDlwfsJnWpkkX/RPbn12QK+c2afZ7IW MCK2Bdua86ifQQgnFqfAqGMmcCGS7WVKOpz40B3bVou9hYM2vQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFP1KqSkL2YGPtBBh55KGTpHfSfXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzQwYjExOTAtMTUxNS0z Y2I1LTk1NTAtM2FjOWY5MzI0YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgPEjAwQA gPJfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJzaZENtkUZzaFY7O2uiru5kl2BVYi3nh9VxP+2XY5toY1Wh FZ7tS+9z6fHbjdmbF6tYv+sAsWpnT9BGe+blqbtgsiw2cuHL/ASmBcZ6SHJpIU73 qa9WBVXNnSptz7N7fog9izXU4Bo+1H9cHzwGjE65VgChfztPvqeC8LyAYLRg9A0y FEsnmfPqLAz0UA1nY5hd30QkX1ysIq+UxCZvXdyfsC3UauKYrzn8vBBUU5T5pyCQ l8Tbd1s5nwSOprm5N9BEgSSYUJYcRmU3xsE75K3KVGkw9745mKsXrj967a8hfq9r W+putzkYreJhmyAY2ID0H4CjMN1E5POwsXC5AHA= -----END CERTIFICATE-----Generated at Sat Nov 1 19:48:08 2025 by rpki-client