$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa File: dc72472d-44a3-3787-94da-f1ac290fccda.roa (raw, json) Hash identifier: HAJotbUGUw6QgWfpCx9iGXljQ5XaiYgSg4+HQFIX0dw= Subject key identifier: 04:C6:89:A4:6A:E1:21:10:CA:B5:BD:A4:E2:1B:36:21:94:E9:D9:DF Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584B28C6F009E65832185F6BEA00 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 11808 IP address blocks: 129.101.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f0:09:e6:58:32:18:5f:6b:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=af95231d-6c07-4153-9873-d452e7081768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:9a:e3:53:63:ee:ac:df:eb:c6:f2:54:ae: 77:36:26:0c:fe:bc:41:54:35:09:ca:02:91:f3:17: 80:a0:3c:7b:6f:cd:69:84:89:02:98:cc:c9:f4:42: 85:23:e2:6e:4e:29:f7:55:7c:3a:52:bd:e3:32:60: cd:23:e9:f1:c1:87:4e:67:74:4c:f0:8f:2b:13:4f: f6:41:bc:cb:f2:4d:17:22:89:44:c2:3a:04:1b:2d: d7:ca:93:2b:8e:e6:47:18:12:7c:98:6e:a6:16:01: f1:09:de:2a:79:2e:67:80:76:a8:95:76:13:86:33: 82:ae:9f:44:9c:e9:79:3d:36:e9:73:c0:47:0b:f0: 5c:11:92:f7:74:51:16:69:ff:fb:3f:52:62:f5:45: b4:b6:de:24:9b:11:6e:20:1b:c2:7e:f1:bd:02:a2: 74:bb:d9:7c:2f:c1:bb:77:66:a7:a4:6c:9f:75:c8: 70:16:d1:03:02:97:93:21:6a:d0:ae:13:7b:46:3c: aa:e9:3c:dc:df:9f:d6:48:8d:b2:be:fb:33:3c:b1: 88:56:c0:73:8c:cf:8a:b0:33:98:c6:ec:ec:af:bd: c4:08:87:14:97:92:2d:16:a2:dd:a1:ad:26:d3:6a: d5:5c:0f:c5:9f:2f:67:b0:3c:88:3f:a6:51:99:16: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C6:89:A4:6A:E1:21:10:CA:B5:BD:A4:E2:1B:36:21:94:E9:D9:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/dc72472d-44a3-3787-94da-f1ac290fccda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4b:77:eb:c2:d8:40:1c:a0:12:1b:cf:bf:cc:bd:a5:74:5f: 8d:d5:5d:de:a4:c5:09:cd:6d:b7:8e:c3:1f:df:e8:fd:e8:fb: 3b:a9:30:a4:b5:f0:a9:a4:ef:c0:5f:ad:76:89:99:74:f5:3f: aa:fe:c4:4b:b7:d7:3b:18:68:3b:16:79:29:1b:1c:b5:ba:c9: 4a:83:92:26:33:73:c4:f6:f8:4c:97:a1:26:a6:dd:07:1f:46: ad:a6:40:7b:4f:72:74:4f:8a:52:9c:71:73:98:aa:cc:24:f4: 50:49:9f:99:66:5f:73:07:d0:63:6b:69:e5:f0:6d:37:48:2f: c9:a2:a8:40:ec:d8:64:5a:75:91:7a:16:bc:1c:37:37:66:04: bf:a2:9a:0a:61:12:dd:9a:4d:67:5c:b4:2a:fd:f0:82:77:92: cf:3d:c1:01:fd:bb:39:2f:50:8e:bc:c6:78:fa:8f:a5:9b:7d: a6:2c:49:3b:b3:c3:77:39:2b:83:6f:0e:20:30:a1:8c:11:b9: 68:4f:c4:3c:e8:aa:21:9c:21:74:ae:a9:bf:f8:20:c4:f5:85: ec:ce:6d:60:1a:d4:05:6e:70:9d:69:10:6a:20:20:9e:2a:f6: f1:f8:42:d5:f6:4c:a3:af:15:ac:ae:14:6a:3c:73:26:ea:05: 82:26:39:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxvAJ5lgyGF9r6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YWY5NTIzMWQtNmMwNy00MTUzLTk4NzMtZDQ1MmU3MDgxNzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R6a41Nj7qzf68byVK53NiYM/rxBVDUJygKR 8xeAoDx7b81phIkCmMzJ9EKFI+JuTin3VXw6Ur3jMmDNI+nxwYdOZ3RM8I8rE0/2 QbzL8k0XIolEwjoEGy3XypMrjuZHGBJ8mG6mFgHxCd4qeS5ngHaolXYThjOCrp9E nOl5PTbpc8BHC/BcEZL3dFEWaf/7P1Ji9UW0tt4kmxFuIBvCfvG9AqJ0u9l8L8G7 d2anpGyfdchwFtEDApeTIWrQrhN7Rjyq6Tzc35/WSI2yvvszPLGIVsBzjM+KsDOY xuzsr73ECIcUl5ItFqLdoa0m02rVXA/Fny9nsDyIP6ZRmRZfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATGiaRq4SEQyrW9pOIbNiGU6dnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvZGM3MjQ3MmQtNDRhMy0z Nzg3LTk0ZGEtZjFhYzI5MGZjY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgWVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhLd+vC2EAcoBIbz7/MvaV0X43VXd6kxQnNbbeOwx/f6P3o+zupMKS1 8Kmk78BfrXaJmXT1P6r+xEu31zsYaDsWeSkbHLW6yUqDkiYzc8T2+EyXoSam3Qcf Rq2mQHtPcnRPilKccXOYqswk9FBJn5lmX3MH0GNraeXwbTdIL8miqEDs2GRadZF6 FrwcNzdmBL+imgphEt2aTWdctCr98IJ3ks89wQH9uzkvUI68xnj6j6WbfaYsSTuz w3c5K4NvDiAwoYwRuWhPxDzoqiGcIXSuqb/4IMT1hezObWAa1AVucJ1pEGogIJ4q 9vH4QtX2TKOvFayuFGo8cybqBYImOZ4= -----END CERTIFICATE-----Generated at Tue Oct 28 13:16:38 2025 by rpki-client