$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa File: 0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (raw, json) Hash identifier: 5rEakzpicjZdy1rdLS01m1eADCtBNUC1skWAF4Bkono= Subject key identifier: DD:5B:81:51:D2:C3:D4:4E:B0:6B:89:CA:E3:7C:4C:1A:D1:67:2A:DF Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B540C8C1DCA6D99F3F9252E00 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 63293 IP address blocks: 129.134.128.0/24 maxlen: 24 129.134.130.0/24 maxlen: 24 129.134.131.0/24 maxlen: 24 129.134.132.0/24 maxlen: 24 129.134.135.0/24 maxlen: 24 129.134.136.0/24 maxlen: 24 129.134.137.0/24 maxlen: 24 129.134.138.0/24 maxlen: 24 129.134.139.0/24 maxlen: 24 129.134.140.0/24 maxlen: 24 129.134.143.0/24 maxlen: 24 129.134.144.0/24 maxlen: 24 129.134.147.0/24 maxlen: 24 129.134.148.0/24 maxlen: 24 129.134.149.0/24 maxlen: 24 129.134.150.0/24 maxlen: 24 129.134.154.0/24 maxlen: 24 129.134.155.0/24 maxlen: 24 129.134.156.0/24 maxlen: 24 129.134.157.0/24 maxlen: 24 129.134.158.0/24 maxlen: 24 129.134.159.0/24 maxlen: 24 129.134.160.0/26 maxlen: 26 129.134.161.0/24 maxlen: 24 129.134.163.0/24 maxlen: 24 129.134.164.0/24 maxlen: 24 129.134.165.0/24 maxlen: 24 129.134.168.0/24 maxlen: 24 129.134.169.0/24 maxlen: 24 129.134.170.0/24 maxlen: 24 129.134.171.0/24 maxlen: 24 129.134.172.0/24 maxlen: 24 129.134.173.0/24 maxlen: 24 129.134.174.0/24 maxlen: 24 129.134.175.0/24 maxlen: 24 129.134.176.0/24 maxlen: 24 129.134.177.0/24 maxlen: 24 129.134.178.0/24 maxlen: 24 129.134.179.0/24 maxlen: 24 129.134.181.0/24 maxlen: 24 129.134.182.0/24 maxlen: 24 129.134.183.0/24 maxlen: 24 129.134.184.0/24 maxlen: 24 129.134.185.0/24 maxlen: 24 129.134.186.0/24 maxlen: 24 129.134.187.0/24 maxlen: 24 157.240.128.0/24 maxlen: 24 157.240.157.0/24 maxlen: 24 157.240.158.0/24 maxlen: 24 157.240.169.0/24 maxlen: 24 157.240.170.0/24 maxlen: 24 157.240.175.0/24 maxlen: 24 157.240.176.0/24 maxlen: 24 157.240.177.0/24 maxlen: 24 157.240.179.0/24 maxlen: 24 157.240.181.0/24 maxlen: 24 157.240.182.0/24 maxlen: 24 157.240.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8c:1d:ca:6d:99:f3:f9:25:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=ee6c7cf0-fc50-4a05-892b-279ab297591d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:69:f5:96:58:60:5d:a7:52:ac:9e:dc:88: 64:9a:34:a6:79:30:94:c5:94:b1:37:0f:72:cb:95: 6f:a8:71:3f:e9:48:c1:2f:8e:23:b8:7c:d7:2f:b1: 29:b3:ae:ae:3b:a6:8d:0a:db:3f:6b:20:eb:14:81: d9:f6:40:1e:63:4e:15:85:fe:19:17:44:77:1d:21: b9:77:b5:41:ff:a3:c3:68:eb:f1:54:72:02:d2:f6: 5c:7b:41:42:ea:33:69:00:c5:de:45:79:64:c5:12: b6:aa:c8:98:a2:dc:dc:0d:5a:41:0e:34:f3:37:da: d8:c7:ed:59:2b:02:a9:35:e6:75:92:60:df:b6:f6: a9:4b:7d:5f:c8:d9:d4:1f:88:e9:ec:ce:38:ad:cc: 0f:6b:7d:2c:df:0e:8b:2c:66:c9:65:70:2c:91:25: d5:66:3d:3b:48:4b:5b:e1:fa:88:d8:ae:f2:93:87: 6e:99:43:47:18:da:af:4d:59:44:61:48:a0:4f:2f: a2:38:6b:39:5d:02:ee:c7:55:8c:1e:15:f7:7d:1d: a7:cd:8d:10:a1:a1:55:fe:1b:d8:7b:6d:26:fc:49: 3f:f0:61:75:f7:d3:d9:c5:61:fc:ba:6b:81:07:5a: f1:7d:06:fb:9e:5b:54:b4:28:96:2d:03:e8:12:33: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:81:51:D2:C3:D4:4E:B0:6B:89:CA:E3:7C:4C:1A:D1:67:2A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.128.0/24 129.134.130.0-129.134.132.255 129.134.135.0-129.134.140.255 129.134.143.0-129.134.144.255 129.134.147.0-129.134.150.255 129.134.154.0-129.134.160.63 129.134.161.0/24 129.134.163.0-129.134.165.255 129.134.168.0-129.134.179.255 129.134.181.0-129.134.187.255 157.240.128.0/24 157.240.157.0-157.240.158.255 157.240.169.0-157.240.170.255 157.240.175.0-157.240.177.255 157.240.179.0/24 157.240.181.0-157.240.183.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:87:18:26:68:13:70:bb:db:bb:57:c7:8e:42:53:1b:e6:aa: ba:88:88:85:b2:12:02:5f:54:06:b1:4d:18:c5:f3:56:ad:9d: d8:b4:6a:c7:95:45:40:52:c9:b0:32:f0:66:88:b3:62:5c:29: a8:a3:20:17:64:a6:00:05:69:35:ba:a0:a4:cc:7f:10:54:ed: ad:67:8e:f9:7c:09:39:4d:6a:c1:94:e9:42:a2:4c:1c:84:b0: f1:7d:02:f6:01:99:42:7e:51:73:b9:97:fd:a5:9b:ca:df:4e: 5b:dc:8e:61:52:3a:4b:3c:d3:11:47:c7:b1:76:1c:2e:33:1c: a0:ac:44:1a:ae:1e:a0:63:da:a4:70:a8:8c:bb:7e:b9:1e:10: 15:14:c7:ed:57:f0:8b:74:a7:54:81:94:61:ad:80:b8:2d:ae: e8:ae:66:60:89:55:a4:6c:a2:d8:75:02:de:f4:86:1a:7a:18: bd:63:df:41:5f:d9:91:49:a4:a4:55:f5:7e:bf:03:b5:b7:e5: 70:af:ce:07:ec:82:b5:00:94:00:f3:af:26:45:7f:98:ae:a8: d6:18:36:37:ab:ba:d2:54:b6:f2:1e:8a:cb:b4:98:be:35:8d: a8:a2:8b:48:95:4c:e5:0e:9b:3c:89:94:3e:70:cc:08:28:dd: 7d:dd:31:60 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEtUDIwdym2Z8/klLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWU2YzdjZjAtZmM1MC00YTA1LTg5MmItMjc5YWIyOTc1OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvapp9ZZYYF2nUqye3IhkmjSmeTCUxZSxNw9y y5VvqHE/6UjBL44juHzXL7Eps66uO6aNCts/ayDrFIHZ9kAeY04Vhf4ZF0R3HSG5 d7VB/6PDaOvxVHIC0vZce0FC6jNpAMXeRXlkxRK2qsiYotzcDVpBDjTzN9rYx+1Z KwKpNeZ1kmDftvapS31fyNnUH4jp7M44rcwPa30s3w6LLGbJZXAskSXVZj07SEtb 4fqI2K7yk4dumUNHGNqvTVlEYUigTy+iOGs5XQLux1WMHhX3fR2nzY0QoaFV/hvY e20m/Ek/8GF199PZxWH8umuBB1rxfQb7nltUtCiWLQPoEjMF7wIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFN1bgVHSw9ROsGuJyuN8TBrRZyrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMGY2OTgxZmEtMWU3Mi0z MjRhLWJjMDgtMGUzNTNjNmZiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEDBACB hoAwDAMEAYGGggMEAIGGhDAMAwQAgYaHAwQAgYaMMAwDBACBho8DBACBhpAwDAME AIGGkwMEAIGGljANAwQBgYaaAwUGgYagAAMEAIGGoTAMAwQAgYajAwQBgYakMAwD BAOBhqgDBAKBhrAwDAMEAIGGtQMEAoGGuAMEAJ3wgDAMAwQAnfCdAwQAnfCeMAwD BACd8KkDBACd8KowDAMEAJ3wrwMEAZ3wsAMEAJ3wszAMAwQAnfC1AwQDnfCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuHGCZoE3C727tXx45CUxvmqrqIiIWyEgJfVAaxTRjF81atndi0aseV RUBSybAy8GaIs2JcKaijIBdkpgAFaTW6oKTMfxBU7a1njvl8CTlNasGU6UKiTByE sPF9AvYBmUJ+UXO5l/2lm8rfTlvcjmFSOks80xFHx7F2HC4zHKCsRBquHqBj2qRw qIy7frkeEBUUx+1X8It0p1SBlGGtgLgtruiuZmCJVaRsoth1At70hhp6GL1j30Ff 2ZFJpKRV9X6/A7W35XCvzgfsgrUAlADzryZFf5iuqNYYNjerutJUtvIeisu0mL41 jaiii0iVTOUOmzyJlD5wzAgo3X3dMWA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:23 2025 by rpki-client