$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa File: 4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa (raw, json) Hash identifier: iylQjPxzK8IaJmt/H8P3diwkgfKxYC22lRYLvaV8bDM= Subject key identifier: B1:39:08:8E:C3:35:22:ED:42:E7:17:A8:44:DC:9E:43:0F:18:1A:BD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AE1971C96F9E4E1E0261C3F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 3938 IP address blocks: 129.250.35.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1c:96:f9:e4:e1:e0:26:1c:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=b704438e-e75d-4f67-87e2-87467d9e0e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:03:99:26:b1:61:5e:5b:bd:76:05:87:ad:c4: f0:a2:0f:84:c6:ab:f5:0f:03:5f:41:49:2e:9d:d8: 00:25:88:f2:14:9d:b1:c0:7b:da:f9:bf:86:c9:d9: f8:27:29:35:3a:8d:5c:16:d8:ed:d3:1b:c8:45:74: ab:4b:24:0f:cf:4a:e6:43:81:b5:7b:c3:ea:f6:20: 74:97:33:0a:35:ad:4b:d7:bf:20:c9:51:5b:fe:26: 13:67:da:cb:40:88:b4:31:da:fa:bb:45:fa:66:f7: 2c:17:63:b8:4a:e4:c3:80:9e:b0:12:39:d9:fa:7c: 6b:d7:de:18:98:a2:72:a9:42:20:d2:86:9d:89:1f: 99:38:12:85:b5:f8:56:c8:1c:10:7a:91:c3:95:17: 6b:8d:d9:bb:1f:b7:ce:6f:02:e6:11:84:a4:93:cb: 98:4e:f4:b6:2b:50:11:ea:36:b7:63:e3:50:da:24: 1b:cc:14:5e:c1:d1:3b:59:9b:c8:b3:a4:45:b7:cc: 4b:e5:fd:35:24:74:56:7b:c7:0b:51:07:a5:ff:32: b3:8a:a7:71:20:07:5e:75:30:73:de:25:76:91:85: 55:ba:8b:19:29:62:f7:e7:0a:87:90:23:ae:1b:d2: aa:4a:39:08:be:27:c2:6f:b0:86:ca:e0:8c:12:04: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:39:08:8E:C3:35:22:ED:42:E7:17:A8:44:DC:9E:43:0F:18:1A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c8:f6:93:37:0d:32:67:2f:fe:55:40:1f:13:8f:3c:c8:e1: bc:8f:74:02:42:b7:6b:3b:88:cb:1d:a5:ca:0b:b4:07:3d:bf: cb:9d:e3:d2:c3:58:31:77:ce:a8:6b:22:48:f5:bb:52:6b:f2: 52:61:82:a9:77:cb:44:c8:de:90:f5:3e:31:17:21:d5:b1:06: 8d:fb:26:5e:31:a5:02:83:58:d0:50:2f:03:eb:f8:00:9f:3f: 93:eb:f3:3f:43:27:e2:a5:e1:6a:0a:2f:87:72:35:8f:fc:86: 43:3e:4c:50:3f:38:25:30:40:2b:eb:ae:40:39:cf:14:c4:00: 7b:8d:d9:ed:ee:83:2e:9a:f7:80:bf:a7:03:f1:98:85:ec:5a: d0:4d:e2:25:58:65:03:45:0f:c4:2b:47:e8:9b:13:af:f1:1d: a1:6e:10:55:4b:fe:33:b0:00:fe:3a:3a:68:41:9a:80:dc:dd: 40:74:69:d8:7c:f4:28:87:e0:b5:9f:1f:30:6c:84:83:fd:65: f1:69:b2:d3:de:ca:99:5d:b6:6b:3a:e9:21:6c:46:85:33:66: 6e:d6:12:37:c1:f0:8f:fc:22:31:c9:ec:7f:fd:bd:3d:7b:48: e2:18:ea:a1:71:7e:f1:ba:0d:8f:1a:6c:94:82:ca:50:e4:84: 39:b7:eb:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErhlxyW+eTh4CYcP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YjcwNDQzOGUtZTc1ZC00ZjY3LTg3ZTItODc0NjdkOWUwZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwOZJrFhXlu9dgWHrcTwog+Exqv1DwNfQUku ndgAJYjyFJ2xwHva+b+Gydn4Jyk1Oo1cFtjt0xvIRXSrSyQPz0rmQ4G1e8Pq9iB0 lzMKNa1L178gyVFb/iYTZ9rLQIi0Mdr6u0X6ZvcsF2O4SuTDgJ6wEjnZ+nxr194Y mKJyqUIg0oadiR+ZOBKFtfhWyBwQepHDlRdrjdm7H7fObwLmEYSkk8uYTvS2K1AR 6ja3Y+NQ2iQbzBRewdE7WZvIs6RFt8xL5f01JHRWe8cLUQel/zKziqdxIAdedTBz 3iV2kYVVuosZKWL35wqHkCOuG9KqSjkIvifCb7CGyuCMEgRP+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLE5CI7DNSLtQucXqETcnkMPGBq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA3OGY1YjMtYzMwZi0z ZDUyLWIxNWUtYTViMzgxNWYyNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGyPaTNw0yZy/+VUAfE488yOG8j3QCQrdrO4jLHaXKC7QHPb/LnePS w1gxd86oayJI9btSa/JSYYKpd8tEyN6Q9T4xFyHVsQaN+yZeMaUCg1jQUC8D6/gA nz+T6/M/QyfipeFqCi+HcjWP/IZDPkxQPzglMEAr665AOc8UxAB7jdnt7oMumveA v6cD8ZiF7FrQTeIlWGUDRQ/EK0fomxOv8R2hbhBVS/4zsAD+OjpoQZqA3N1AdGnY fPQoh+C1nx8wbISD/WXxabLT3sqZXbZrOukhbEaFM2Zu1hI3wfCP/CIxyex//b09 e0jiGOqhcX7xug2PGmyUgspQ5IQ5t+sn -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:46 2025 by rpki-client