$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa File: 197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa (raw, json) Hash identifier: ckzFGfQOzWoCl3vA+xUx2gI7LoE/8G/8QLc855PcE88= Subject key identifier: C5:98:7E:6B:45:9A:99:0D:D1:BF:2D:95:31:64:6E:C0:97:29:0A:1B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584B3DBA2994E347E3684BE71B80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 394996 IP address blocks: 129.212.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:29:94:e3:47:e3:68:4b:e7:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d47ab954-8469-43db-9c62-65255adaf233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:1a:04:95:55:c4:bd:ef:a4:15:7e:36:7c: 71:18:5b:0b:2e:93:15:1c:a7:fb:f5:56:15:f7:45: d0:44:bc:57:bc:b3:2f:3f:27:75:74:af:c7:f2:b1: 63:dc:0b:63:a5:86:d6:31:03:1a:6a:43:92:37:85: cb:5c:6c:6d:b2:b7:a8:c9:fa:da:0d:96:90:fe:7c: aa:c4:e5:7d:56:b5:ee:61:de:98:c0:a6:46:77:66: e1:02:01:0d:ba:0a:86:a4:06:65:6d:0d:60:9a:b9: 09:03:24:9f:a8:36:4b:b3:f6:91:99:33:45:21:f7: 3a:06:f5:36:7b:a2:d9:75:9e:fe:57:d1:0d:79:ec: 51:48:de:c5:1c:a9:7c:f5:2b:6d:d6:14:ae:78:c8: 1b:26:81:9b:fc:bb:21:8e:24:1c:4f:63:06:22:89: cf:44:7c:b8:e1:07:64:d9:25:c5:cf:78:c7:61:d0: 87:ee:b0:4a:0d:2c:db:1b:6a:c2:8d:95:7a:fd:a1: aa:95:bc:3b:6f:a7:30:af:83:65:c5:57:94:cd:0c: c1:64:b7:85:41:dc:ad:4f:e2:22:8c:29:7b:51:6d: 3e:58:5e:a9:5c:f4:13:fe:e6:bd:0d:8b:b5:1a:96: 8f:82:4b:d4:ad:ea:b8:87:2f:90:e6:e2:95:e6:79: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:98:7E:6B:45:9A:99:0D:D1:BF:2D:95:31:64:6E:C0:97:29:0A:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 129.212.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0a:b6:36:ed:9c:d3:40:7c:b4:bd:0f:77:e8:ba:b0:bd:f7: 20:52:34:d2:94:79:ee:17:16:ff:a4:83:38:7a:c6:d5:7e:73: 36:ec:8b:80:d7:5b:fd:2c:f7:69:c0:78:64:6b:07:5a:ff:3a: 73:60:da:36:07:a6:7a:4b:94:d9:f3:bc:77:fd:b3:4e:a2:51: af:c1:3a:09:2f:d7:64:fd:b5:a8:b7:be:98:9e:bc:86:4e:e9: 63:00:75:fa:70:48:a1:3c:f1:4f:19:b3:16:3f:87:4c:e3:a1: 08:a8:de:ab:d8:86:7f:2e:2e:90:8b:7e:e3:dc:df:55:d5:92: 89:60:de:58:61:aa:e8:27:32:e4:8c:10:53:af:76:92:b6:da: 4d:5e:cb:4c:bb:de:05:a1:fe:53:ce:9d:94:53:c2:4b:44:75: 5f:bf:c1:e0:a6:dc:8d:7b:af:34:5a:9a:5f:fc:1c:5e:10:a1: 45:f3:e1:eb:86:77:39:40:8a:72:9c:fd:e0:67:3f:f2:50:b3: 26:d0:7c:e8:3f:0d:c9:2d:d5:fc:e6:e5:2a:a5:dd:26:1d:26: b2:85:66:b5:60:7a:e8:84:15:a5:1b:66:76:d2:8e:b7:9f:e9: 0b:df:d6:a4:11:f6:a1:e5:4d:5d:a6:47:30:40:1f:44:1f:fd: 88:32:41:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uimU40fjaEvnG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ3YWI5NTQtODQ2OS00M2RiLTljNjItNjUyNTVhZGFmMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+YaBJVVxL3vpBV+NnxxGFsLLpMVHKf79VYV 90XQRLxXvLMvPyd1dK/H8rFj3AtjpYbWMQMaakOSN4XLXGxtsreoyfraDZaQ/nyq xOV9VrXuYd6YwKZGd2bhAgENugqGpAZlbQ1gmrkJAySfqDZLs/aRmTNFIfc6BvU2 e6LZdZ7+V9ENeexRSN7FHKl89Stt1hSueMgbJoGb/LshjiQcT2MGIonPRHy44Qdk 2SXFz3jHYdCH7rBKDSzbG2rCjZV6/aGqlbw7b6cwr4NlxVeUzQzBZLeFQdytT+Ii jCl7UW0+WF6pXPQT/ua9DYu1GpaPgkvUreq4hy+Q5uKV5nmguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWYfmtFmpkN0b8tlTFkbsCXKQobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMTk3ZTE3ODAtNmZiMy0z YWU3LTg0ZDctYTcxNmQwYWU5MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgdSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsKtjbtnNNAfLS9D3fourC99yBSNNKUee4XFv+kgzh6xtV+czbsi4DX W/0s92nAeGRrB1r/OnNg2jYHpnpLlNnzvHf9s06iUa/BOgkv12T9tai3vpievIZO 6WMAdfpwSKE88U8ZsxY/h0zjoQio3qvYhn8uLpCLfuPc31XVkolg3lhhqugnMuSM EFOvdpK22k1ey0y73gWh/lPOnZRTwktEdV+/weCm3I17rzRaml/8HF4QoUXz4euG dzlAinKc/eBnP/JQsybQfOg/Dckt1fzm5Sql3SYdJrKFZrVgeuiEFaUbZnbSjref 6Qvf1qQR9qHlTV2mRzBAH0Qf/YgyQXw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:42 2025 by rpki-client