$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa File: 6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (raw, json) Hash identifier: abd1sBKpg754lEIWAD5M6aeplJ1bGaJjR+aQ/OnjdVg= Subject key identifier: 1F:D4:91:29:C4:0C:36:18:7B:DD:79:AA:D4:EE:F8:A6:A9:6C:20:80 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584B92DD4461D08CD6556469D300 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 63293 IP address blocks: 129.134.162.0/24 maxlen: 24 157.240.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:44:61:d0:8c:d6:55:64:69:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=616bf456-d16b-446b-bdcd-50235b299cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:f1:18:ce:53:3b:fb:90:81:33:2b:f4:0e: b9:30:c1:3d:d5:a2:b2:d8:37:12:07:f4:53:94:96: 77:1c:dc:c6:36:00:09:96:47:16:68:7f:5d:67:db: be:cf:19:06:d2:e3:36:79:76:f5:9d:b7:da:22:0c: 11:bc:55:ef:68:a5:e4:99:fa:b4:a9:3f:3a:f4:20: 16:1b:fa:96:30:23:9c:54:28:11:d2:33:9c:44:d8: 57:bd:cc:c7:d6:41:29:9d:cc:5b:ea:47:39:b0:cc: 62:ca:cd:d5:81:da:96:b5:ee:9e:08:11:46:77:e4: 7a:c5:a9:7b:6a:67:6f:a7:01:fb:bd:0e:9d:8c:c2: 56:7d:54:a7:1c:81:11:b6:8c:1d:18:4a:28:8e:9e: 8b:b8:0a:b5:2d:3e:c9:ed:f4:02:bf:15:f4:5a:da: d4:82:79:33:02:29:c0:1e:ea:9c:61:7f:b9:a8:83: 36:3b:c0:33:8d:de:38:9e:a9:56:5d:ed:11:8a:35: b9:08:2f:75:0f:47:d5:79:80:98:cd:90:b5:31:e7: 6a:f7:6b:87:02:07:8e:83:c8:c4:0a:fb:79:9f:2d: 50:4d:fa:4d:a7:53:78:23:5e:37:ec:33:28:4f:49: 5b:37:9d:1b:9f:f5:7c:10:ab:92:ab:e6:54:ec:3d: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:91:29:C4:0C:36:18:7B:DD:79:AA:D4:EE:F8:A6:A9:6C:20:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.162.0/24 157.240.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b1:9e:47:89:5e:42:0d:ad:53:e0:1e:9b:52:7a:65:46:90: 6e:08:3c:4b:c7:e2:ee:a3:9e:c2:6f:fd:fc:9b:b4:84:84:b3: 0f:fb:cd:d5:4c:dd:a8:eb:57:8b:c4:df:45:1b:91:86:8d:69: be:73:a5:0b:e4:ce:a4:b8:42:7c:4a:53:3c:58:d2:0a:b0:5c: 40:ef:a3:c3:9c:dc:3e:df:60:62:42:89:38:df:55:c0:1a:56: 3f:48:9a:9e:f7:e9:4e:4d:d0:9c:4b:e3:07:fc:da:e5:f4:de: 8f:b6:78:f4:6a:e3:a7:06:6a:6c:2c:16:49:c8:fb:cc:24:cb: da:97:b6:ec:f9:44:21:5d:2b:ef:02:9d:2d:cb:ea:2b:e7:b3: e3:37:90:2a:84:96:6c:8a:27:aa:dd:5f:68:0c:14:2d:67:36: e9:3d:19:19:c4:6e:33:0e:f9:30:83:ff:99:83:61:45:c7:7c: 2f:8f:e1:70:4d:cc:ea:13:41:74:72:b7:36:7a:00:9c:c4:54: e1:c4:06:f3:a5:82:91:26:fa:65:bb:14:71:2c:86:27:dc:4a: dd:d8:f6:56:6b:19:dc:cc:85:1b:3c:e7:1e:71:f3:3b:2d:02: 49:ab:81:cd:76:37:f8:d0:71:a9:bc:e8:ab:c3:00:ea:63:6a: cf:6b:b8:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuS3URh0IzWVWRp0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjE2YmY0NTYtZDE2Yi00NDZiLWJkY2QtNTAyMzViMjk5Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve7xGM5TO/uQgTMr9A65MME91aKy2DcSB/RT lJZ3HNzGNgAJlkcWaH9dZ9u+zxkG0uM2eXb1nbfaIgwRvFXvaKXkmfq0qT869CAW G/qWMCOcVCgR0jOcRNhXvczH1kEpncxb6kc5sMxiys3VgdqWte6eCBFGd+R6xal7 amdvpwH7vQ6djMJWfVSnHIERtowdGEoojp6LuAq1LT7J7fQCvxX0WtrUgnkzAinA HuqcYX+5qIM2O8Azjd44nqlWXe0RijW5CC91D0fVeYCYzZC1Medq92uHAgeOg8jE Cvt5ny1QTfpNp1N4I1437DMoT0lbN50bn/V8EKuSq+ZU7D3YeQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB/UkSnEDDYYe915qtTu+KapbCCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNmViNGM3MGYtZGVjMS0z YmJjLWIzYzUtZTMyZDgyMmIyYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgYaiAwQA nfCBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHuxnkeJXkINrVPgHptSemVGkG4IPEvH4u6jnsJv/fybtISE sw/7zdVM3ajrV4vE30UbkYaNab5zpQvkzqS4QnxKUzxY0gqwXEDvo8Oc3D7fYGJC iTjfVcAaVj9Imp736U5N0JxL4wf82uX03o+2ePRq46cGamwsFknI+8wky9qXtuz5 RCFdK+8CnS3L6ivns+M3kCqElmyKJ6rdX2gMFC1nNuk9GRnEbjMO+TCD/5mDYUXH fC+P4XBNzOoTQXRytzZ6AJzEVOHEBvOlgpEm+mW7FHEshifcSt3Y9lZrGdzMhRs8 5x5x8zstAkmrgc12N/jQcam86KvDAOpjas9ruMI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:22 2025 by rpki-client