$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0cb7dbcf-fbc5-34a2-a6e9-a8a70f76538d.roa File: 0cb7dbcf-fbc5-34a2-a6e9-a8a70f76538d.roa (raw, json) Hash identifier: AO+hOWZ18bq4tZcj5wM1s/5qID00J6ufe8uno1wYETQ= Subject key identifier: 75:B8:8C:6C:7D:EF:ED:82:42:DC:0A:B6:B1:42:F6:43:85:54:D5:B1 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584B6632037F2454B5233F51C280 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0cb7dbcf-fbc5-34a2-a6e9-a8a70f76538d.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 14041 IP address blocks: 129.19.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:03:7f:24:54:b5:23:3f:51:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=ecad229d-d40d-4e53-9472-ce6135acd206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:e0:45:75:54:d9:10:a6:f4:3f:6b:c2:ca: 35:7c:74:6d:3b:a0:aa:4b:80:3f:eb:af:5b:62:fc: 04:c4:52:ee:61:96:ef:eb:18:7c:cf:06:ce:fc:4f: 29:d2:9b:67:db:74:b5:31:7b:16:ab:eb:8e:1f:4e: f8:69:00:4d:49:07:28:d1:46:fa:8f:f0:40:70:5f: 71:11:70:d0:48:dc:bf:96:30:ff:9c:5a:87:b6:ad: 69:c5:ea:77:69:8d:d7:7d:68:f7:46:e0:4a:8c:7c: 1a:30:3c:ec:ef:b4:16:67:3a:e4:7a:f6:eb:32:c8: 50:cd:97:1b:74:2c:d9:27:27:d4:45:ac:56:48:52: d3:cc:3a:14:6b:17:98:d2:a7:7a:7d:6b:ff:30:b1: aa:0d:f9:72:fa:35:ad:e5:51:fe:1e:ba:ab:71:e4: e4:6f:43:92:85:6a:b7:0c:e6:9e:b3:0e:b4:de:31: c5:80:78:15:36:57:6d:89:fd:09:f9:51:49:aa:64: 46:5f:d2:b7:d2:d9:19:f5:6f:7e:b8:67:be:39:7e: 97:1d:ee:84:c6:31:d8:94:de:c3:cd:c5:29:ca:aa: 89:34:fb:08:1c:70:d1:ae:35:71:27:ac:ec:4c:de: 6e:17:16:77:87:cc:8a:06:0d:64:13:34:0a:76:9f: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:8C:6C:7D:EF:ED:82:42:DC:0A:B6:B1:42:F6:43:85:54:D5:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0cb7dbcf-fbc5-34a2-a6e9-a8a70f76538d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:40:1b:53:24:cd:91:58:5a:ce:25:1f:cf:7c:7a:30:2e:34: a2:cd:6f:95:c4:e2:46:0a:78:87:d7:56:58:b2:43:1c:5d:35: d0:ed:51:3a:cf:33:b1:db:ee:79:35:84:bb:a7:fe:0b:c3:37: a9:a8:af:ba:2c:e8:f6:ff:19:96:7e:c4:cb:b2:da:39:3e:a9: f7:8f:eb:42:11:77:41:86:61:36:76:1f:60:86:46:6a:3e:1d: 42:2b:d1:d7:c9:d2:64:6d:73:af:fd:31:10:fd:06:60:2e:33: e6:5a:8f:e1:3b:77:3d:e7:83:83:b5:88:d4:b6:40:d4:2e:42: d5:ff:d9:0c:03:aa:30:81:05:c8:83:a8:ce:7d:fd:f8:ac:05: f6:da:00:22:4e:19:b0:44:e8:9f:c4:c0:24:b1:db:d3:c6:b9: 36:06:96:b1:be:ee:99:5f:8a:32:79:ed:15:35:f7:16:ea:2a: f7:56:6c:68:5f:a9:04:47:ea:37:4a:28:00:67:8d:41:cb:4d: e4:00:b6:83:60:c0:62:66:75:4e:e2:b7:5b:dc:d7:0b:7b:67: bc:cc:39:d1:36:aa:c8:4e:5a:e7:98:bc:5e:86:28:83:e2:91: 74:9e:13:de:72:3f:ab:c7:a0:ee:cb:77:72:db:8e:d0:86:0b: a3:8a:16:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgN/JFS1Iz9RwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZWNhZDIyOWQtZDQwZC00ZTUzLTk0NzItY2U2MTM1YWNkMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvrgRXVU2RCm9D9rwso1fHRtO6CqS4A/669b YvwExFLuYZbv6xh8zwbO/E8p0ptn23S1MXsWq+uOH074aQBNSQco0Ub6j/BAcF9x EXDQSNy/ljD/nFqHtq1pxep3aY3XfWj3RuBKjHwaMDzs77QWZzrkevbrMshQzZcb dCzZJyfURaxWSFLTzDoUaxeY0qd6fWv/MLGqDfly+jWt5VH+HrqrceTkb0OShWq3 DOaesw603jHFgHgVNldtif0J+VFJqmRGX9K30tkZ9W9+uGe+OX6XHe6ExjHYlN7D zcUpyqqJNPsIHHDRrjVxJ6zsTN5uFxZ3h8yKBg1kEzQKdp9+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW4jGx97+2CQtwKtrFC9kOFVNWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMGNiN2RiY2YtZmJjNS0z NGEyLWE2ZTktYThhNzBmNzY1MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRAG1MkzZFYWs4lH898ejAuNKLNb5XE4kYKeIfXVliyQxxdNdDtUTrP M7Hb7nk1hLun/gvDN6mor7os6Pb/GZZ+xMuy2jk+qfeP60IRd0GGYTZ2H2CGRmo+ HUIr0dfJ0mRtc6/9MRD9BmAuM+Zaj+E7dz3ng4O1iNS2QNQuQtX/2QwDqjCBBciD qM59/fisBfbaACJOGbBE6J/EwCSx29PGuTYGlrG+7plfijJ57RU19xbqKvdWbGhf qQRH6jdKKABnjUHLTeQAtoNgwGJmdU7it1vc1wt7Z7zMOdE2qshOWueYvF6GKIPi kXSeE95yP6vHoO7Ld3LbjtCGC6OKFiM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:15 2025 by rpki-client