$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa File: 6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa (raw, json) Hash identifier: yGLPqe0QxatW7V1n6VEpw+1RkC3EWKEOJs8vGHmvUdQ= Subject key identifier: BF:F7:06:72:54:43:EE:BD:CE:41:E9:0D:C2:32:AE:76:30:1A:8E:7F Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B89178474BEE2CF1B01C25D80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 62610 IP address blocks: 128.1.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:84:74:be:e2:cf:1b:01:c2:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cdd9c33e-2774-4252-a091-b76af178ffb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ae:69:51:de:0a:ec:37:b6:82:26:43:1f:af: ca:b7:d7:81:58:2d:74:eb:68:31:80:06:fd:e9:7a: 3a:8f:4a:7e:39:38:32:49:36:2c:06:c1:06:04:c3: 86:ae:96:69:09:7c:ef:47:04:5d:96:e5:25:40:b0: 2e:10:61:2f:0d:90:99:0f:16:3a:46:57:ba:b7:f1: cf:b5:59:62:e2:e6:fa:39:f2:5d:7b:58:27:c5:ea: 51:fe:66:49:de:77:28:94:de:6a:7b:25:bf:f9:19: 2b:53:8a:73:4f:b5:41:e7:99:90:4c:18:40:c6:5a: 53:83:cd:af:d2:18:69:ab:76:0f:b9:9b:bc:7f:77: 39:b9:aa:13:57:23:fe:d0:37:46:57:9c:2d:91:3d: c1:fa:40:2c:e6:60:16:08:22:cb:c0:7b:81:eb:4d: d4:e8:45:45:e3:6d:41:20:cb:59:74:c0:8a:44:58: dd:90:36:ca:e4:31:41:05:ee:07:b0:a4:a7:25:dc: 44:78:0d:8c:e0:3c:c5:43:83:1f:08:5f:16:cb:6f: ec:21:3c:65:9d:04:4a:a5:9a:7c:c5:3c:29:91:9b: dc:33:56:b5:87:a0:e1:85:15:66:18:c6:42:1d:b0: ce:c5:6a:94:01:b7:d8:eb:52:d5:f8:01:51:90:1d: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:06:72:54:43:EE:BD:CE:41:E9:0D:C2:32:AE:76:30:1A:8E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8f:f3:c4:d6:7f:9f:76:05:7b:b8:3e:de:89:4b:2b:fb:cd: 33:ad:72:6a:8a:b9:9e:c5:86:e2:1a:88:4e:e3:6b:16:a7:a3: 6e:23:8a:89:de:21:fb:26:b9:03:40:26:b0:cc:1f:c0:46:7f: d0:a2:41:c1:40:f4:7c:f2:12:cb:5a:31:49:85:a7:32:a0:c1: 6d:ed:c2:d9:de:31:d5:57:4e:46:f7:e7:cb:35:bb:49:e7:c3: 2d:2c:60:0b:69:52:e2:ff:80:01:68:60:d2:ed:32:c8:2d:04: c6:94:2c:97:b1:50:13:c9:c4:2d:99:8e:a1:82:43:7b:8b:6d: c3:4f:78:5f:ca:29:f8:d1:b7:b4:e3:42:8d:37:0a:9f:6d:ac: 84:2b:23:d1:4c:0b:90:ac:11:2e:df:fc:70:04:ca:d3:f7:e7: d0:6e:8f:9a:21:d2:f9:30:d4:3e:3f:32:08:27:38:1b:dc:4f: 35:e7:a7:b6:2d:52:d0:00:47:e7:a3:a1:e8:14:51:3f:2d:19: 57:11:54:89:99:49:e3:3b:e8:62:9e:e3:18:5c:9a:63:22:02: f3:1d:80:f4:16:ea:21:fc:de:35:60:88:eb:c7:81:92:68:a7: 31:3f:af:c0:f2:13:62:92:df:7b:8e:74:b6:bb:9a:36:4b:97: 8a:17:83:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4R0vuLPGwHCXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2RkOWMzM2UtMjc3NC00MjUyLWEwOTEtYjc2YWYxNzhmZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK5pUd4K7De2giZDH6/Kt9eBWC1062gxgAb9 6Xo6j0p+OTgySTYsBsEGBMOGrpZpCXzvRwRdluUlQLAuEGEvDZCZDxY6Rle6t/HP tVli4ub6OfJde1gnxepR/mZJ3ncolN5qeyW/+RkrU4pzT7VB55mQTBhAxlpTg82v 0hhpq3YPuZu8f3c5uaoTVyP+0DdGV5wtkT3B+kAs5mAWCCLLwHuB603U6EVF421B IMtZdMCKRFjdkDbK5DFBBe4HsKSnJdxEeA2M4DzFQ4MfCF8Wy2/sITxlnQRKpZp8 xTwpkZvcM1a1h6DhhRVmGMZCHbDOxWqUAbfY61LV+AFRkB3gEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/3BnJUQ+69zkHpDcIyrnYwGo5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNmJkYzJlYTktYzQ2MC0z M2E5LWI0M2UtYWY3MmMwMDhhZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgAGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2P88TWf592BXu4Pt6JSyv7zTOtcmqKuZ7FhuIaiE7jaxano24jione IfsmuQNAJrDMH8BGf9CiQcFA9HzyEstaMUmFpzKgwW3twtneMdVXTkb358s1u0nn wy0sYAtpUuL/gAFoYNLtMsgtBMaULJexUBPJxC2ZjqGCQ3uLbcNPeF/KKfjRt7Tj Qo03Cp9trIQrI9FMC5CsES7f/HAEytP359Buj5oh0vkw1D4/MggnOBvcTzXnp7Yt UtAAR+ejoegUUT8tGVcRVImZSeM76GKe4xhcmmMiAvMdgPQW6iH83jVgiOvHgZJo pzE/r8DyE2KS33uOdLa7mjZLl4oXgz4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:07:07 2025 by rpki-client