$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa File: 2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa (raw, json) Hash identifier: OAn5NPED+BVPLC9VpKnKDoxRATUArYJycRt2kF3alkA= Subject key identifier: 3C:7E:4D:39:3F:E7:F6:B7:E3:41:37:24:93:56:31:62:F7:E5:DD:4B Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584B1C37529221BBA9993E134757 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 11808 IP address blocks: 129.101.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:52:92:21:bb:a9:99:3e:13:47:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b7fd58bb-3ff3-48ec-a335-fcbf1342d62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:a8:5b:68:17:94:2d:59:18:c2:11:12:33: 16:d8:ce:86:45:09:af:94:f6:72:c7:53:85:9a:1f: 4d:ad:20:4c:b1:4a:d6:75:7e:35:53:22:07:04:34: c1:63:70:2c:39:30:8b:4f:c1:57:39:b7:07:38:77: 69:04:23:83:7d:f6:74:5e:45:43:3e:8b:3c:c5:fa: 49:c3:52:1c:e6:62:04:b0:ab:a3:26:c7:d3:a7:94: 78:70:ca:bd:ec:bf:73:fb:e4:eb:8e:39:df:0e:c8: ff:38:5d:36:c0:d1:fd:5e:68:eb:c9:7a:ac:c2:58: ae:c0:f4:75:81:39:7d:09:8a:75:73:35:ca:0f:b9: 60:c2:72:61:47:39:79:23:0e:53:b2:ce:e2:69:0c: 61:25:4a:5d:9d:0f:31:cb:aa:fc:5e:03:01:cc:f2: 5b:54:c7:48:b0:4e:0b:15:04:72:28:a2:89:1a:2e: 58:23:4d:b7:0a:2a:b8:d0:38:f2:d9:66:48:71:e2: f5:49:3d:4f:90:1c:ed:49:66:70:40:dd:b9:a1:4f: 93:7f:e3:f0:5c:ba:c4:66:76:2a:4c:f7:fc:58:da: 19:3b:e9:b7:ba:e4:31:63:c5:a3:a8:66:e6:dc:b8: e2:7b:26:5c:a3:e1:0d:ce:ba:08:0b:36:3e:6b:6a: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:4D:39:3F:E7:F6:B7:E3:41:37:24:93:56:31:62:F7:E5:DD:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:df:95:78:6a:b4:27:e6:e3:84:ae:05:d6:06:1f:eb:39:f5: ff:5d:00:48:04:7f:e7:88:e0:4b:b4:c6:31:cc:72:37:c2:b3: 1b:c2:18:45:a9:d1:2b:3e:58:30:eb:29:52:e6:64:14:4f:8f: ed:ca:bf:6c:29:75:e2:13:c0:10:08:fc:5c:7a:18:ad:2b:bc: 8d:57:4b:2f:85:f9:a1:50:8f:ec:91:14:71:1d:55:0a:dd:3d: 75:f0:da:cf:f9:7e:0b:5e:88:cc:8a:16:0e:ed:a7:01:84:e9: 7a:e2:9d:ae:5d:63:cd:68:b5:47:f8:db:71:c4:e5:69:74:76: 23:45:fa:9a:66:86:17:f1:1b:f3:99:ec:6f:94:7a:a9:f3:66: 31:7d:eb:37:af:a8:f1:9b:11:0a:e6:01:16:54:09:52:36:fa: bb:46:e3:ce:fd:c0:b8:59:70:65:fb:c2:a7:53:b3:48:d8:ca: 87:7a:5e:82:8e:d3:52:55:2d:d7:f7:f5:c6:43:11:18:31:54: 84:d0:97:76:d0:bd:31:ad:ce:a3:f4:bf:81:a0:a3:b2:83:66: 85:29:78:01:0c:f4:14:ad:51:00:17:c7:f5:73:c0:15:7b:d2: 2e:94:39:23:8f:90:24:d8:97:3d:ae:c5:5b:8b:eb:dd:88:9e: 3e:82:f2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscN1KSIbupmT4TR1cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjdmZDU4YmItM2ZmMy00OGVjLWEzMzUtZmNiZjEzNDJkNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMGoW2gXlC1ZGMIREjMW2M6GRQmvlPZyx1OF mh9NrSBMsUrWdX41UyIHBDTBY3AsOTCLT8FXObcHOHdpBCODffZ0XkVDPos8xfpJ w1Ic5mIEsKujJsfTp5R4cMq97L9z++TrjjnfDsj/OF02wNH9XmjryXqswliuwPR1 gTl9CYp1czXKD7lgwnJhRzl5Iw5Tss7iaQxhJUpdnQ8xy6r8XgMBzPJbVMdIsE4L FQRyKKKJGi5YI023Ciq40Djy2WZIceL1ST1PkBztSWZwQN25oU+Tf+PwXLrEZnYq TPf8WNoZO+m3uuQxY8WjqGbm3LjieyZco+ENzroICzY+a2o7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx+TTk/5/a340E3JJNWMWL35d1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvMjY1NGY1Y2UtZWYyYi0z YWJjLTgzN2QtZmM1YjMyMDU2ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLflXhqtCfm44SuBdYGH+s59f9dAEgEf+eI4Eu0xjHMcjfCsxvCGEWp 0Ss+WDDrKVLmZBRPj+3Kv2wpdeITwBAI/Fx6GK0rvI1XSy+F+aFQj+yRFHEdVQrd PXXw2s/5fgteiMyKFg7tpwGE6Xrina5dY81otUf423HE5Wl0diNF+ppmhhfxG/OZ 7G+UeqnzZjF96zevqPGbEQrmARZUCVI2+rtG4879wLhZcGX7wqdTs0jYyod6XoKO 01JVLdf39cZDERgxVITQl3bQvTGtzqP0v4Ggo7KDZoUpeAEM9BStUQAXx/VzwBV7 0i6UOSOPkCTYlz2uxVuL692Inj6C8tA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:48 2025 by rpki-client