$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa File: 5c85609e-52d3-32f0-af5f-894bf50602aa.roa (raw, json) Hash identifier: M4mKddlYDw+cCYA+lpHNL0HSd2fTQEoYc/GoFBpwEk4= Subject key identifier: 06:28:7C:73:C6:EE:BB:C1:6E:DA:02:97:5C:0B:A4:E5:FF:C7:54:45 Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584B28C6EFE7B5C46D1E4450E0A0 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 11808 IP address blocks: 129.101.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ef:e7:b5:c4:6d:1e:44:50:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=9a207d58-a96b-4cdf-970a-68afe756284f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:93:98:66:0c:36:c8:0d:e4:e2:df:74:64: e7:41:a1:6c:99:a3:47:86:ad:83:ff:b8:d2:31:05: 64:b5:0e:b8:a1:3b:4d:30:db:68:67:9c:86:44:1f: 0b:80:0d:51:c1:42:71:16:73:08:cd:21:ce:66:f3: 23:47:eb:39:a9:bf:55:e1:a3:4f:65:a6:b7:84:87: 1d:22:59:37:13:91:64:2e:04:0a:6b:8f:a6:55:eb: 25:ed:73:35:1f:de:31:bb:18:e9:14:ff:72:e5:13: a4:0c:f6:f1:9d:41:e6:c1:8a:ab:bc:71:7b:3d:49: 13:c8:c1:03:74:e2:2f:e8:e2:8e:c4:b1:61:34:a9: cf:51:cb:1f:d3:fa:b1:3d:85:ed:bf:a7:a7:90:ab: e2:8e:c8:a9:09:59:7c:86:d2:b4:d6:d0:c6:21:f6: ec:af:26:5c:3e:7f:1f:ed:0f:e9:f2:5b:8f:ed:56: 3b:ec:f3:8a:bf:88:71:3d:30:c6:df:d8:c5:3f:88: a7:79:62:5e:fb:0a:f0:f6:60:f6:0d:d2:46:52:a2: c0:28:8d:a9:27:86:b9:30:dc:45:86:54:f8:01:9f: a3:e8:91:c6:18:09:a5:1f:ea:2e:2c:6a:4d:98:e8: 50:cc:88:e7:2f:44:d3:75:b2:9b:3c:6a:ea:5c:3f: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:7C:73:C6:EE:BB:C1:6E:DA:02:97:5C:0B:A4:E5:FF:C7:54:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fb:b4:7e:01:17:e0:12:cd:bb:ad:65:5e:ea:4f:73:86:5e: 9f:a2:df:fb:83:fd:3c:8e:c0:88:6f:85:5b:d7:d0:fc:e9:f8: 96:c1:28:08:94:c4:fd:d7:b8:ac:9c:4f:c1:77:b7:63:14:31: 6b:82:bd:2e:f9:35:41:ce:13:e1:67:11:db:b8:e8:df:8b:b5: 0f:07:23:14:cc:fb:d7:65:a3:ee:22:f4:4b:a3:f7:2c:e6:83: b0:74:b3:6c:87:50:76:8d:73:36:45:20:3a:4f:08:45:36:57: 9f:0c:c6:c1:f9:9e:08:98:a8:c4:5b:d0:40:c4:66:e1:a9:ca: 69:a8:ed:48:59:5b:68:30:f6:29:35:ab:6e:36:3f:af:25:9f: 10:1f:40:12:75:30:ab:3a:b1:9b:42:a7:8d:3e:e5:9f:36:96: 22:56:e2:1c:d5:ac:83:70:d1:d0:92:17:29:dc:c4:11:d7:76: b5:b0:ff:e0:73:9e:b5:bd:d0:2c:1b:19:1e:e5:c0:7c:59:08: a1:ae:81:c3:f5:78:35:98:ec:58:b7:15:21:da:e0:03:0b:aa: cb:28:6d:81:4d:75:74:98:c1:5f:4c:6e:3c:7a:73:1c:a9:25: ae:cc:7a:61:96:78:a0:c1:39:9d:37:b1:37:4f:58:a3:47:3b: df:4e:e0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxu/ntcRtHkRQ4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk OWEyMDdkNTgtYTk2Yi00Y2RmLTk3MGEtNjhhZmU3NTYyODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdSTmGYMNsgN5OLfdGTnQaFsmaNHhq2D/7jS MQVktQ64oTtNMNtoZ5yGRB8LgA1RwUJxFnMIzSHOZvMjR+s5qb9V4aNPZaa3hIcd Ilk3E5FkLgQKa4+mVesl7XM1H94xuxjpFP9y5ROkDPbxnUHmwYqrvHF7PUkTyMED dOIv6OKOxLFhNKnPUcsf0/qxPYXtv6enkKvijsipCVl8htK01tDGIfbsryZcPn8f 7Q/p8luP7VY77POKv4hxPTDG39jFP4ineWJe+wrw9mD2DdJGUqLAKI2pJ4a5MNxF hlT4AZ+j6JHGGAmlH+ouLGpNmOhQzIjnL0TTdbKbPGrqXD9y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYofHPG7rvBbtoCl1wLpOX/x1RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvNWM4NTYwOWUtNTJkMy0z MmYwLWFmNWYtODk0YmY1MDYwMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL7tH4BF+ASzbutZV7qT3OGXp+i3/uD/TyOwIhvhVvX0Pzp+JbBKAiU xP3XuKycT8F3t2MUMWuCvS75NUHOE+FnEdu46N+LtQ8HIxTM+9dlo+4i9Euj9yzm g7B0s2yHUHaNczZFIDpPCEU2V58MxsH5ngiYqMRb0EDEZuGpymmo7UhZW2gw9ik1 q242P68lnxAfQBJ1MKs6sZtCp40+5Z82liJW4hzVrINw0dCSFyncxBHXdrWw/+Bz nrW90CwbGR7lwHxZCKGugcP1eDWY7Fi3FSHa4AMLqssobYFNdXSYwV9Mbjx6cxyp Ja7MemGWeKDBOZ03sTdPWKNHO99O4Ow= -----END CERTIFICATE-----Generated at Tue Oct 28 13:16:38 2025 by rpki-client