$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa File: a5bf3ded-14db-36b1-939a-11cea42f1831.roa (raw, json) Hash identifier: i5qtJuipjgzOOXwFolg9Spcg+fPea695j/KZKCQ0HRM= Subject key identifier: 55:6D:29:DA:FD:05:4A:EE:53:7E:09:12:1E:87:D2:2E:E0:10:84:49 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584B2E5C49966F9AD664BF9F4D60 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 12145 IP address blocks: 129.82.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:49:96:6f:9a:d6:64:bf:9f:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=995bdc31-e4ed-48b7-8113-216af4b69f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:26:88:89:73:fd:01:54:f6:59:a2:1e:4a: 9f:3d:5f:04:bd:86:72:8b:ed:b0:67:d9:b8:2d:d3: c1:0b:f2:47:cd:09:62:ed:5f:6a:e2:d5:f9:f0:20: 38:40:d8:78:86:c3:7d:62:28:fd:33:9b:22:ae:8a: 77:8d:c3:d6:0e:f3:45:71:56:5b:50:bc:26:c4:c1: 60:48:b1:ee:0e:77:14:09:8a:62:ca:33:b1:f6:40: 4c:ab:c5:e3:5c:a2:d9:96:80:03:c3:39:d5:e0:d4: 15:45:7e:7e:5b:8c:8b:e1:6c:50:ca:8f:1e:f0:e7: 4f:82:20:88:86:ab:21:c9:48:98:d2:85:d7:0c:8f: 15:a8:da:ad:dd:d5:59:e4:45:42:e1:37:dc:b2:5e: 0a:fa:cf:c4:9e:fc:5d:2b:01:81:c8:e9:5f:5b:09: 28:d5:b4:a2:b3:31:a4:15:34:5d:55:98:f7:cc:7e: 2f:55:90:3a:5c:0b:42:44:70:85:3c:62:93:86:9e: 3b:a5:21:ec:c0:57:3b:96:d5:b7:86:b1:03:f9:cf: 67:4e:9e:1d:56:66:db:19:e8:e1:d9:e0:05:f9:2d: 6a:86:ef:5f:e9:17:8d:84:a5:8d:3a:8e:aa:f4:f9: 13:48:58:47:ad:52:e6:62:c5:f8:3c:83:68:c2:58: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6D:29:DA:FD:05:4A:EE:53:7E:09:12:1E:87:D2:2E:E0:10:84:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.82.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:91:d9:23:45:33:25:54:e8:d6:f1:02:10:32:4f:b3:f0:e9: 7f:a3:67:82:a8:f1:af:95:46:a6:f5:54:44:a4:ae:9c:bf:98: a4:87:f7:e9:0d:42:f4:4e:f9:18:c9:59:19:80:55:c0:d1:6a: f9:8e:34:4e:ee:37:9a:1e:92:ee:48:83:85:b1:9a:1f:01:b9: 99:fe:7d:ca:fa:e3:60:20:5d:d5:4e:51:0e:d1:0f:d2:2d:bd: d3:c8:b6:26:f2:82:6a:f5:01:97:fd:5e:64:11:46:98:95:17: d4:52:31:4f:4d:fd:62:ab:ad:c4:5d:91:12:ca:f4:1b:c4:53: cd:15:78:9d:f4:ba:30:c8:34:8b:b6:38:80:e2:12:70:2f:ea: dd:f0:0e:f4:44:cf:55:9a:50:19:16:5c:e7:f0:e9:35:19:f5: 0c:6a:37:91:7d:f2:ff:dd:44:6d:79:35:5c:d4:0b:ca:a6:41: 1b:95:4f:09:7d:77:f1:95:30:4e:31:d8:04:84:e5:fd:69:d3: dc:ca:35:9b:61:42:77:47:a6:f5:0a:33:8a:9d:c6:cb:cb:be: 10:91:ec:00:fc:81:40:1e:50:c7:9b:af:8a:b7:74:af:6d:92: 6d:39:10:25:56:f3:72:e2:23:9d:0f:68:e4:d4:ce:dd:ce:9a: 2b:82:f9:79 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsuXEmWb5rWZL+fTWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OTk1YmRjMzEtZTRlZC00OGI3LTgxMTMtMjE2YWY0YjY5ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1UmiIlz/QFU9lmiHkqfPV8EvYZyi+2wZ9m4 LdPBC/JHzQli7V9q4tX58CA4QNh4hsN9Yij9M5sirop3jcPWDvNFcVZbULwmxMFg SLHuDncUCYpiyjOx9kBMq8XjXKLZloADwznV4NQVRX5+W4yL4WxQyo8e8OdPgiCI hqshyUiY0oXXDI8VqNqt3dVZ5EVC4Tfcsl4K+s/EnvxdKwGByOlfWwko1bSiszGk FTRdVZj3zH4vVZA6XAtCRHCFPGKThp47pSHswFc7ltW3hrED+c9nTp4dVmbbGejh 2eAF+S1qhu9f6ReNhKWNOo6q9PkTSFhHrVLmYsX4PINowlgsQQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFVtKdr9BUruU34JEh6H0i7gEIRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYTViZjNkZWQtMTRkYi0z NmIxLTkzOWEtMTFjZWE0MmYxODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADpHZI0UzJVTo1vECEDJPs/Dpf6Nngqjxr5VGpvVURKSunL+YpIf36Q1C 9E75GMlZGYBVwNFq+Y40Tu43mh6S7kiDhbGaHwG5mf59yvrjYCBd1U5RDtEP0i29 08i2JvKCavUBl/1eZBFGmJUX1FIxT039YqutxF2REsr0G8RTzRV4nfS6MMg0i7Y4 gOIScC/q3fAO9ETPVZpQGRZc5/DpNRn1DGo3kX3y/91EbXk1XNQLyqZBG5VPCX13 8ZUwTjHYBITl/WnT3Mo1m2FCd0em9Qozip3Gy8u+EJHsAPyBQB5Qx5uvird0r22S bTkQJVbzcuIjnQ9o5NTO3c6aK4L5eQ== -----END CERTIFICATE-----Generated at Tue Oct 21 01:33:52 2025 by rpki-client