$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa File: 132e7b72-2d06-316b-afaa-74c07ae106c5.roa (raw, json) Hash identifier: MtdVxlXx/yC1YEqic3zFRh/gTwWGf2R5ai/+ZA3FVi4= Subject key identifier: 2C:63:8C:E5:63:0C:A3:E0:FA:33:79:F3:E5:98:D9:23:B6:F5:C0:42 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B99D7FC19337D9FBE0F422F80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 63293 IP address blocks: 129.134.191.0/24 maxlen: 24 157.240.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fc:19:33:7d:9f:be:0f:42:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bfb04414-d12a-4f15-9f1e-2d9e98b8d126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:59:f2:3f:4a:c3:81:15:44:76:f9:4b:91: e3:d8:43:dc:91:f4:00:fe:2a:1f:79:79:a0:f4:4d: 21:e7:e5:03:2a:57:38:ec:06:80:4f:57:42:80:a9: 82:e1:dc:2f:d7:38:ff:9c:d3:83:8f:94:c6:b0:ce: 8f:85:72:72:af:82:a5:1a:8e:9d:92:71:ec:b3:08: 1c:1a:60:17:82:38:f2:08:d2:f8:54:de:dd:65:37: 61:87:23:e1:37:10:61:64:b2:21:6b:43:a5:6e:ff: 52:b9:fe:ee:f9:49:a3:ea:9f:ff:0a:19:b1:31:44: 70:aa:75:34:00:43:9a:a2:2f:cd:b1:6f:3d:28:37: 8d:2b:35:41:ef:46:d6:ff:bf:92:6a:cb:92:54:48: d0:d8:f4:c4:60:2a:c8:b7:19:32:f8:ba:8b:84:3a: c1:74:05:f8:20:39:43:7d:ed:c1:d1:c3:86:74:03: a1:73:30:0d:12:9c:e2:4a:1d:e0:c9:c6:99:28:a9: 1f:68:86:de:e1:ee:32:07:9a:b3:9c:02:af:e6:17: 5b:49:cf:90:bd:a4:a2:d4:2c:12:af:34:e1:6f:12: 9b:96:18:a8:ec:60:3f:22:51:48:d9:5d:65:4f:eb: 5e:a8:9f:74:7c:e9:c0:72:3c:6f:ae:a8:d7:89:e7: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:8C:E5:63:0C:A3:E0:FA:33:79:F3:E5:98:D9:23:B6:F5:C0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.191.0/24 157.240.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2f:52:1d:5f:e9:b9:14:e5:64:b5:7a:6b:25:d1:e7:74:4b: 60:7b:a1:63:a1:b1:e9:9b:0e:77:e4:eb:9d:c5:11:39:70:7c: f7:68:81:16:2e:a8:df:b7:46:62:b0:8d:c6:3b:67:b8:4d:c3: 8e:ef:1b:5c:2d:8f:ce:31:a9:bb:33:2f:f0:2f:2a:72:4e:23: ba:07:87:8d:80:76:6f:a6:6e:22:72:df:d5:06:4a:b0:08:3e: 87:53:70:d1:54:8a:ef:6e:a5:0f:27:09:2b:ea:0b:d5:b1:98: cf:c3:9c:7c:30:6a:90:f9:bc:3b:db:3e:7b:8e:70:db:84:91: 88:11:b0:16:2f:ad:04:41:fb:df:d8:4b:57:6f:20:14:62:bf: 52:6a:ec:91:ac:d4:34:f9:ab:df:c1:a0:4b:c0:09:39:50:29: 11:97:cc:f6:1c:af:35:13:a9:89:1b:82:6e:7a:f7:a0:41:a1: be:12:ff:9f:5c:bc:4e:c5:b3:e9:1a:1a:17:b0:3d:1f:44:86: 39:d1:0c:d4:1e:26:30:73:a7:24:45:da:fb:44:05:f0:e2:a1: 49:e6:cc:42:e4:44:df:3b:0f:e5:b4:42:49:d3:0f:94:85:eb: a9:29:f1:c2:fd:5d:58:3b:6a:86:ab:1a:de:7a:1e:17:4d:e6: 6c:9d:94:65 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ1/wZM32fvg9CL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmZiMDQ0MTQtZDEyYS00ZjE1LTlmMWUtMmQ5ZTk4YjhkMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJpZ8j9Kw4EVRHb5S5Hj2EPckfQA/iofeXmg 9E0h5+UDKlc47AaAT1dCgKmC4dwv1zj/nNODj5TGsM6PhXJyr4KlGo6dknHsswgc GmAXgjjyCNL4VN7dZTdhhyPhNxBhZLIha0Olbv9Suf7u+Umj6p//ChmxMURwqnU0 AEOaoi/NsW89KDeNKzVB70bW/7+SasuSVEjQ2PTEYCrItxky+LqLhDrBdAX4IDlD fe3B0cOGdAOhczANEpziSh3gycaZKKkfaIbe4e4yB5qznAKv5hdbSc+QvaSi1CwS rzThbxKblhio7GA/IlFI2V1lT+teqJ90fOnAcjxvrqjXiefR/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCxjjOVjDKPg+jN58+WY2SO29cBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMyZTdiNzItMmQwNi0z MTZiLWFmYWEtNzRjMDdhZTEwNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgYa/AwQA nfC+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADEvUh1f6bkU5WS1emsl0ed0S2B7oWOhsembDnfk653FETlw fPdogRYuqN+3RmKwjcY7Z7hNw47vG1wtj84xqbszL/AvKnJOI7oHh42Adm+mbiJy 39UGSrAIPodTcNFUiu9upQ8nCSvqC9WxmM/DnHwwapD5vDvbPnuOcNuEkYgRsBYv rQRB+9/YS1dvIBRiv1Jq7JGs1DT5q9/BoEvACTlQKRGXzPYcrzUTqYkbgm5696BB ob4S/59cvE7Fs+kaGhewPR9EhjnRDNQeJjBzpyRF2vtEBfDioUnmzELkRN87D+W0 QknTD5SF66kp8cL9XVg7aoarGt56HhdN5mydlGU= -----END CERTIFICATE-----Generated at Wed Oct 29 17:01:04 2025 by rpki-client