$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa File: 8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa (raw, json) Hash identifier: UWQ9pS8MILDkNn3fRo180+2wIR7USw8rridWy9Oy6Qc= Subject key identifier: CF:06:DA:65:1B:A8:54:5A:E2:5D:E0:BF:96:E8:CB:0B:0C:2F:4E:85 Certificate issuer: /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Certificate serial: 010D0C9F4328584B477C6DFE2C1766985A846100 Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 14041 IP address blocks: 129.72.0.0/16 maxlen: 24 192.65.143.0/24 maxlen: 24 192.84.113.0/24 maxlen: 24 192.160.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6d:fe:2c:17:66:98:5a:84:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=9ab831df-c61a-4207-bfb1-c971cb7e53af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:72:8a:37:3c:9b:02:ef:03:56:73:f1:0a: b3:27:83:aa:66:cb:af:2a:f1:f4:19:ad:34:48:a4: fd:81:d7:ef:cd:49:e8:df:81:fe:fa:82:f6:e2:5e: ec:29:f7:ba:c0:19:96:b4:b0:23:e1:fe:ac:76:3f: 5d:57:01:11:de:a3:a8:b2:88:0c:28:4d:be:d1:78: 7d:ba:83:1d:00:e4:1f:81:64:a0:78:6d:c3:c8:5c: d9:1b:88:ba:22:40:60:de:45:5b:88:77:58:4b:09: ad:87:37:cb:17:0e:6d:5b:50:bb:63:97:16:a1:1c: 3b:d9:12:13:27:d8:80:04:15:78:82:b2:a2:93:2a: fd:18:98:4e:cc:e4:b4:cd:3c:85:0d:52:20:7c:db: ef:a2:35:bc:e4:78:22:d6:f0:60:dc:cf:ca:2d:d9: b6:cb:ad:3a:cd:96:f3:0b:4d:c0:6a:74:c9:2e:61: 62:a9:d3:cd:24:ab:44:ab:82:0e:4e:43:b6:f0:e0: a8:0c:b5:37:29:c8:aa:d9:20:fc:4a:16:3b:aa:f9: a6:c4:24:dc:fc:87:2d:a6:8f:9d:a5:74:69:5d:c0: e5:6d:06:48:a6:27:5e:39:94:64:cc:cb:2a:de:4a: 7b:57:a2:51:36:35:a9:3e:1f:c7:3b:76:53:3d:77: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:DA:65:1B:A8:54:5A:E2:5D:E0:BF:96:E8:CB:0B:0C:2F:4E:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl X509v3 Authority Key Identifier: keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer sbgp-ipAddrBlock: critical IPv4: 129.72.0.0/16 192.65.143.0/24 192.84.113.0/24 192.160.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:95:50:ce:30:2c:dc:8e:a8:4e:ec:d5:fa:aa:10:f8:15:f7: a2:45:3d:51:19:6c:62:ae:fb:80:03:8b:45:10:f8:b4:cb:39: 47:6b:74:47:41:08:14:4f:18:1f:1d:43:16:f1:96:94:2f:4e: 23:99:b1:fe:98:f3:a2:8a:82:55:4e:55:d5:39:27:2f:38:37: 0d:08:4c:ac:17:fd:35:dc:58:a3:73:a5:10:47:55:9e:5e:90: c5:07:e8:d8:39:16:08:9d:fa:84:be:12:fe:7f:f7:76:ff:e8: d8:18:eb:13:b8:e2:98:67:05:a4:6f:40:2f:43:b5:72:00:58: fe:7c:2a:f5:d2:4b:76:8b:af:5d:6b:f8:96:90:dc:49:c6:be: e8:f9:64:ac:cb:3e:ed:43:73:00:6e:46:53:d3:18:93:1e:8f: a3:22:55:a3:55:c7:66:88:8f:2f:1e:32:70:a8:7d:9e:25:1d: f6:22:ba:b8:b7:6b:22:89:d3:87:db:4c:c3:a1:d4:17:a2:9f: f4:87:e2:e9:fc:59:51:75:ba:e5:0b:63:84:12:69:f4:7b:97: 68:b8:10:25:2f:d9:90:e6:10:a8:2a:aa:f6:43:0b:e8:b6:6f: 03:ea:d6:6c:bb:6c:f2:80:14:8b:80:27:f0:e8:c9:b7:00:12: ef:4c:2e:e9 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtHfG3+LBdmmFqEYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBj YmQzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OWFiODMxZGYtYzYxYS00MjA3LWJmYjEtYzk3MWNiN2U1M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2xyijc8mwLvA1Zz8QqzJ4OqZsuvKvH0Ga00 SKT9gdfvzUno34H++oL24l7sKfe6wBmWtLAj4f6sdj9dVwER3qOosogMKE2+0Xh9 uoMdAOQfgWSgeG3DyFzZG4i6IkBg3kVbiHdYSwmthzfLFw5tW1C7Y5cWoRw72RIT J9iABBV4grKikyr9GJhOzOS0zTyFDVIgfNvvojW85Hgi1vBg3M/KLdm2y606zZbz C03AanTJLmFiqdPNJKtEq4IOTkO28OCoDLU3Kciq2SD8ShY7qvmmxCTc/Ictpo+d pXRpXcDlbQZIpideOZRkzMsq3kp7V6JRNjWpPh/HO3ZTPXc8KQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFM8G2mUbqFRa4l3gv5boywsML06FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjEz MTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvOGQ5ZWFhM2MtNGNmNC0z NjdkLTk3MWItMTc3ZTRiZjc1MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGIxMzE3OTYtYTI3ZC00OGRhLTgw ZTUtNzZiOGU3YzBjYmQzL2RiMTMxNzk2LWEyN2QtNDhkYS04MGU1LTc2YjhlN2Mw Y2JkMy5jcmwwHwYDVR0jBBgwFoAUue3K3qkHUolV9qvgFYie93MR9pUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4 ZTdjMGNiZDMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAgUgDBADA QY8DBADAVHEDBADAoDEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQZVQzjAs3I6oTuzV+qoQ+BX3okU9URls Yq77gAOLRRD4tMs5R2t0R0EIFE8YHx1DFvGWlC9OI5mx/pjzooqCVU5V1TknLzg3 DQhMrBf9NdxYo3OlEEdVnl6QxQfo2DkWCJ36hL4S/n/3dv/o2BjrE7jimGcFpG9A L0O1cgBY/nwq9dJLdouvXWv4lpDcSca+6PlkrMs+7UNzAG5GU9MYkx6PoyJVo1XH ZoiPLx4ycKh9niUd9iK6uLdrIonTh9tMw6HUF6Kf9Ifi6fxZUXW65QtjhBJp9HuX aLgQJS/ZkOYQqCqq9kML6LZvA+rWbLts8oAUi4An8OjJtwAS70wu6Q== -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:05 2025 by rpki-client