$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa File: 2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa (raw, json) Hash identifier: Kr7AkI/PaKHDV4eVcyEOS+ZiJV/z5KjUgLnWTC0eiSI= Subject key identifier: C1:A9:0F:3C:CB:2C:25:B5:7F:A9:22:CC:D8:A2:CA:81:F2:86:56:E8 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584BAEC7BAA538632F1F806C2BA0 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 11232 IP address blocks: 129.101.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:ba:a5:38:63:2f:1f:80:6c:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=857d9760-dadb-4998-a9d1-86e765104a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:71:dc:1d:24:c3:9d:79:31:f1:67:86:f5: 72:c6:25:d5:5b:41:8d:14:5e:bb:f5:83:bc:5d:31: d1:b6:27:1f:19:2f:bd:d5:5c:13:c0:38:dc:7b:80: 4e:f1:13:36:3a:57:58:25:3d:1a:c2:c2:e9:3f:39: b3:1a:50:01:d0:e7:2b:6e:44:45:06:d8:78:70:e8: 87:dc:1e:80:2f:48:6b:fa:22:a5:27:ed:a4:d8:48: 0a:32:99:59:81:be:d2:bb:b6:51:0e:ae:a1:01:d9: cf:35:4d:7e:71:81:ec:92:cc:b0:81:cd:73:25:a3: 05:18:df:20:ef:3e:42:ce:1c:03:c4:3c:70:2b:84: 65:d5:21:af:36:44:8a:9b:67:7e:09:d1:f2:f2:54: 6c:b3:27:f5:60:41:0b:6d:0f:04:e1:86:3b:16:43: f9:aa:d5:54:88:9e:b2:c5:a4:df:2d:27:6d:a3:e5: 78:a7:6b:39:6a:ac:a5:b9:28:18:38:c1:04:29:60: 7b:61:02:e9:c3:3d:45:83:d1:87:83:18:5b:37:d8: 34:81:05:ba:12:36:7c:d8:03:f3:3f:c4:7e:c1:00: b9:86:9a:5a:c3:09:4a:0a:ab:18:cd:04:6e:d1:9e: f3:1b:1e:5a:f2:29:e1:36:f2:96:cf:07:93:07:c4: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A9:0F:3C:CB:2C:25:B5:7F:A9:22:CC:D8:A2:CA:81:F2:86:56:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 129.101.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0c:8b:ec:e7:1d:0a:de:48:da:4b:28:6e:57:4e:da:9f:14: 0c:2a:fc:72:bc:d1:77:b4:98:ea:95:d0:66:df:a2:40:0c:13: 71:5d:82:f0:92:e2:96:d8:8f:4c:40:dc:ce:1c:b5:8f:fc:e9: 4e:f5:b6:e7:f9:5c:48:27:2f:57:82:a2:4e:54:76:ae:42:5b: 78:35:65:cf:01:c3:02:53:81:e1:bd:04:27:08:8b:6c:c9:84: ea:6a:b7:ea:67:33:c4:f6:f7:0e:0e:b9:91:8a:57:79:db:23: 20:1a:31:51:20:12:12:8e:23:11:eb:7e:ba:29:ef:11:2c:d1: 9d:37:e5:5b:d6:57:39:f7:da:00:72:72:bf:e3:82:1c:05:2d: 07:6f:50:49:f1:2f:8f:07:74:44:fa:5d:4f:98:a8:16:9e:29: e6:84:60:22:61:47:7e:54:93:b7:67:c2:30:12:b0:77:f1:39: 76:3c:7f:c1:34:29:bd:ae:e1:e5:ea:71:15:df:f7:7a:5d:0e: 09:84:3c:e5:49:33:c5:a8:93:90:b9:fc:f9:ac:fe:fb:d9:5a: e5:7d:cc:79:67:1e:35:0f:c1:5c:0e:2b:83:ef:e6:41:f7:2d: 4e:d0:21:3d:c2:96:44:04:0c:9f:30:3c:af:c9:cf:5b:ad:cb: 1f:c9:a7:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7qlOGMvH4BsK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ODU3ZDk3NjAtZGFkYi00OTk4LWE5ZDEtODZlNzY1MTA0YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyihx3B0kw515MfFnhvVyxiXVW0GNFF679YO8 XTHRticfGS+91VwTwDjce4BO8RM2OldYJT0awsLpPzmzGlAB0OcrbkRFBth4cOiH 3B6AL0hr+iKlJ+2k2EgKMplZgb7Su7ZRDq6hAdnPNU1+cYHsksywgc1zJaMFGN8g 7z5CzhwDxDxwK4Rl1SGvNkSKm2d+CdHy8lRssyf1YEELbQ8E4YY7FkP5qtVUiJ6y xaTfLSdto+V4p2s5aqyluSgYOMEEKWB7YQLpwz1Fg9GHgxhbN9g0gQW6EjZ82APz P8R+wQC5hppawwlKCqsYzQRu0Z7zGx5a8inhNvKWzweTB8RnnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGpDzzLLCW1f6kizNiiyoHyhlboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMjI4OWRkZTAtNDlkMC0z YTBmLWJkZGQtZDZmYjFiNzBkZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgWUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAMi+znHQreSNpLKG5XTtqfFAwq/HK80Xe0mOqV0GbfokAME3FdgvCS 4pbYj0xA3M4ctY/86U71tuf5XEgnL1eCok5Udq5CW3g1Zc8BwwJTgeG9BCcIi2zJ hOpqt+pnM8T29w4OuZGKV3nbIyAaMVEgEhKOIxHrfrop7xEs0Z035VvWVzn32gBy cr/jghwFLQdvUEnxL48HdET6XU+YqBaeKeaEYCJhR35Uk7dnwjASsHfxOXY8f8E0 Kb2u4eXqcRXf93pdDgmEPOVJM8Wok5C5/Pms/vvZWuV9zHlnHjUPwVwOK4Pv5kH3 LU7QIT3ClkQEDJ8wPK/Jz1utyx/Jpwo= -----END CERTIFICATE-----Generated at Tue Nov 4 13:38:42 2025 by rpki-client