$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa File: e5299180-b70f-3125-a781-6b51c883c759.roa (raw, json) Hash identifier: 9HGMVx5ttV0db6DX4IgKIV7b46s2yZWLGs9BE41R09o= Subject key identifier: E1:E4:C1:80:22:A1:44:D9:D9:DD:48:B9:EF:B4:FF:AA:43:0E:38:1E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B7F5212277BCAB75BBA263D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 204670 IP address blocks: 128.121.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:12:27:7b:ca:b7:5b:ba:26:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=39e5a5e3-2309-4543-9518-2b5d02874c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:f1:24:b2:9e:63:d9:56:e7:bb:e8:29:a5: 14:c9:f0:4e:19:c6:1f:83:33:de:d5:1e:d8:aa:96: f1:e5:09:f8:ad:91:2f:0f:bd:1d:64:f2:19:2b:fe: 5d:70:7a:46:50:d5:9c:ce:12:7c:94:96:d3:22:54: 78:35:22:ad:a7:8e:af:56:84:ad:f2:07:5c:52:4e: 96:89:0a:21:db:ee:e4:55:52:df:7b:d8:4a:d1:5f: 8d:50:11:6d:ae:83:b7:7d:69:64:ac:68:fd:f9:77: 49:c3:f0:fc:a5:dc:8e:c6:c6:95:7d:f2:1d:5d:a7: bf:db:49:0b:fa:e0:4b:89:27:9a:da:37:d1:ad:d0: 07:24:7d:07:92:64:84:84:b5:44:fd:97:07:79:0f: 93:63:14:ac:28:36:19:cd:c0:27:f5:3c:7c:63:b4: 07:13:b2:63:f8:df:92:3a:06:9c:5e:d2:37:87:bb: 0c:8c:e5:8d:5e:f5:44:ac:f9:29:dc:7a:b7:64:2b: a9:01:d6:2f:bf:b1:b2:95:03:ca:3c:ee:66:cc:0d: e2:11:8d:33:d6:e6:d2:74:74:06:67:d0:33:1a:8e: 92:c8:91:c1:c5:b1:2c:84:15:9c:94:fd:e6:de:3a: 01:c1:f0:cf:da:db:dc:12:b5:d3:e7:fe:29:6c:f8: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E4:C1:80:22:A1:44:D9:D9:DD:48:B9:EF:B4:FF:AA:43:0E:38:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:09:b9:f6:3e:db:b5:f9:74:50:80:41:99:77:cf:cb:cd:dd: f8:6b:50:80:9a:01:e7:2e:a9:fc:d6:ff:d3:58:6f:a9:b8:59: 34:f5:62:92:1c:a5:10:71:58:65:be:85:09:63:3e:cd:66:e5: 55:7a:b3:3d:74:50:ff:5f:c9:14:ac:2e:e4:85:08:ee:ca:a6: 05:62:50:b6:b2:68:34:80:e1:14:38:85:e6:49:72:e1:eb:7e: 81:65:50:65:64:7f:22:b9:e8:a7:a3:ee:51:70:ad:66:82:7b: 15:c7:3c:ba:85:ea:4e:6f:03:73:41:58:fd:c2:36:e5:47:42: af:a1:07:4e:4e:ab:1e:9e:0a:e2:72:7c:d2:c0:0d:d2:fc:cd: 29:d3:7b:8e:dc:06:5e:2d:15:ba:e5:b2:d4:87:f7:47:35:46: 44:3b:b3:65:10:7f:5d:2c:71:b2:b3:af:0f:93:9b:b9:27:34: 5a:3d:c3:c5:ee:5d:5c:31:84:45:dd:cc:45:27:84:a2:4b:38: 1d:18:bf:3a:bc:b3:89:15:19:b8:12:a7:9d:75:d7:c2:6b:bb: 48:74:a2:97:7e:de:bf:72:1c:78:52:5b:b4:4a:64:3c:9b:42: f9:2f:07:a7:31:53:7b:f8:19:1c:92:06:d6:ef:15:8a:a5:ad: 95:3d:e0:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UhIne8q3W7omPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzllNWE1ZTMtMjMwOS00NTQzLTk1MTgtMmI1ZDAyODc0YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNzxJLKeY9lW57voKaUUyfBOGcYfgzPe1R7Y qpbx5Qn4rZEvD70dZPIZK/5dcHpGUNWczhJ8lJbTIlR4NSKtp46vVoSt8gdcUk6W iQoh2+7kVVLfe9hK0V+NUBFtroO3fWlkrGj9+XdJw/D8pdyOxsaVffIdXae/20kL +uBLiSea2jfRrdAHJH0HkmSEhLVE/ZcHeQ+TYxSsKDYZzcAn9Tx8Y7QHE7Jj+N+S OgacXtI3h7sMjOWNXvVErPkp3Hq3ZCupAdYvv7GylQPKPO5mzA3iEY0z1ubSdHQG Z9AzGo6SyJHBxbEshBWclP3m3joBwfDP2tvcErXT5/4pbPi7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHkwYAioUTZ2d1Iue+0/6pDDjgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTUyOTkxODAtYjcwZi0z MTI1LWE3ODEtNmI1MWM4ODNjNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoJufY+27X5dFCAQZl3z8vN3fhrUICaAecuqfzW/9NYb6m4WTT1YpIc pRBxWGW+hQljPs1m5VV6sz10UP9fyRSsLuSFCO7KpgViULayaDSA4RQ4heZJcuHr foFlUGVkfyK56Kej7lFwrWaCexXHPLqF6k5vA3NBWP3CNuVHQq+hB05Oqx6eCuJy fNLADdL8zSnTe47cBl4tFbrlstSH90c1RkQ7s2UQf10scbKzrw+Tm7knNFo9w8Xu XVwxhEXdzEUnhKJLOB0Yvzq8s4kVGbgSp51118Jru0h0opd+3r9yHHhSW7RKZDyb QvkvB6cxU3v4GRySBtbvFYqlrZU94B4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:52:24 2025 by rpki-client