$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/24ec594c-79c0-36d4-a6f7-db9855e7035f.roa File: 24ec594c-79c0-36d4-a6f7-db9855e7035f.roa (raw, json) Hash identifier: hsyJfi9W8uXrSqdELSXb+5U8qivhtHgiZELl0HybNmU= Subject key identifier: A2:73:71:AC:3E:81:75:85:FA:C3:FF:56:85:41:C7:69:35:ED:CB:EB Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584B1C3752E373FA7A92F0C8C3A0 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/24ec594c-79c0-36d4-a6f7-db9855e7035f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 11808 IP address blocks: 129.101.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:52:e3:73:fa:7a:92:f0:c8:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=7be8cd5b-4f20-459f-ba2e-b9f914b94ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:6f:e6:ce:6f:43:f2:b6:2d:bb:1d:e3:0a: b1:5a:5b:f5:6a:83:5d:33:dd:bf:48:66:8f:f4:25: 06:ac:dd:71:75:f4:2d:d6:99:ec:73:a8:68:04:d6: 22:8a:b4:20:a3:6a:e7:0c:70:2b:11:69:20:83:f8: 3f:28:b8:c6:64:4a:20:6d:c7:ab:97:44:dd:11:d0: 62:f7:1e:87:c3:dc:11:f7:59:91:03:d9:04:78:0c: 61:4e:bc:9a:6a:86:5e:58:16:92:62:43:09:75:0f: ee:8d:56:ec:90:89:e8:d0:49:3c:b8:70:b9:7f:da: 52:a0:d1:a8:5e:17:54:5b:93:a7:6f:25:a5:a5:c6: 19:aa:96:3d:69:1f:be:30:8e:dc:21:10:d3:30:7e: 09:40:44:89:e3:6f:94:bd:c0:90:c9:d9:c4:7e:77: 77:df:15:56:c2:64:e6:53:e0:5e:49:80:54:b7:c7: 70:fa:bb:59:52:60:f4:22:d1:ff:c2:22:3c:42:c9: 07:1c:2d:70:06:a2:9a:48:e1:b0:88:34:fd:15:bf: e6:55:10:25:6b:16:78:b1:df:5e:9b:e0:7d:46:0e: a8:d3:9b:15:d1:bd:cd:7d:0f:cf:2f:20:9e:fe:08: 59:05:da:35:f2:96:0e:32:c3:d5:21:f1:96:d4:da: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:73:71:AC:3E:81:75:85:FA:C3:FF:56:85:41:C7:69:35:ED:CB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/24ec594c-79c0-36d4-a6f7-db9855e7035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a7:da:35:3b:22:b4:15:15:82:c3:dd:96:aa:7a:17:88:dd: 9d:94:08:3d:f5:3f:18:89:53:3b:66:6b:2c:6a:1b:b4:54:c4: bc:56:af:f4:bf:06:aa:c3:07:92:0d:98:7b:6a:79:53:f2:06: ea:7a:5c:03:d0:ab:ca:44:bb:bb:66:9b:a8:08:1b:09:08:e6: 97:e4:33:81:1b:88:d1:f8:ab:49:9b:f3:99:c7:81:5e:7a:09: 20:57:f8:86:de:15:46:1f:56:ae:3c:f2:c3:5b:f5:ee:0a:ec: ad:71:5e:ba:a6:1d:b8:8a:53:2e:68:f2:8a:05:2a:5c:dc:72: db:c4:f9:7f:87:91:03:03:72:e0:07:e7:2d:83:4a:56:9c:ff: 21:47:af:dc:be:8b:50:95:d9:33:19:80:42:11:15:91:4e:da: 3b:9f:2d:78:9b:2b:e5:26:2d:05:5d:c4:53:f6:05:f1:5f:17: 5e:ac:e7:70:96:88:e2:c0:cd:a1:e6:b6:03:d9:79:8b:9b:27: a5:08:da:cf:cf:34:d3:0c:a9:84:39:ea:ee:ad:f1:59:14:5b: b1:01:c7:4b:1c:24:16:64:33:73:1d:8d:d0:34:c2:9e:b4:38: f8:41:8f:d8:dd:47:81:67:ab:a4:0c:68:e2:83:67:09:f9:4e: 2f:be:1d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN1Ljc/p6kvDIw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk N2JlOGNkNWItNGYyMC00NTlmLWJhMmUtYjlmOTE0Yjk0YWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Nv5s5vQ/K2Lbsd4wqxWlv1aoNdM92/SGaP 9CUGrN1xdfQt1pnsc6hoBNYiirQgo2rnDHArEWkgg/g/KLjGZEogbcerl0TdEdBi 9x6Hw9wR91mRA9kEeAxhTryaaoZeWBaSYkMJdQ/ujVbskIno0Ek8uHC5f9pSoNGo XhdUW5OnbyWlpcYZqpY9aR++MI7cIRDTMH4JQESJ42+UvcCQydnEfnd33xVWwmTm U+BeSYBUt8dw+rtZUmD0ItH/wiI8QskHHC1wBqKaSOGwiDT9Fb/mVRAlaxZ4sd9e m+B9Rg6o05sV0b3NfQ/PLyCe/ghZBdo18pYOMsPVIfGW1NonYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJzcaw+gXWF+sP/VoVBx2k17cvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvMjRlYzU5NGMtNzljMC0z NmQ0LWE2ZjctZGI5ODU1ZTcwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWX3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmn2jU7IrQVFYLD3ZaqeheI3Z2UCD31PxiJUztmayxqG7RUxLxWr/S/ BqrDB5INmHtqeVPyBup6XAPQq8pEu7tmm6gIGwkI5pfkM4EbiNH4q0mb85nHgV56 CSBX+IbeFUYfVq488sNb9e4K7K1xXrqmHbiKUy5o8ooFKlzcctvE+X+HkQMDcuAH 5y2DSlac/yFHr9y+i1CV2TMZgEIRFZFO2jufLXibK+UmLQVdxFP2BfFfF16s53CW iOLAzaHmtgPZeYubJ6UI2s/PNNMMqYQ56u6t8VkUW7EBx0scJBZkM3MdjdA0wp60 OPhBj9jdR4Fnq6QMaOKDZwn5Ti++HcI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:48:48 2025 by rpki-client