$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa File: a98512e7-344c-36be-b82d-198e7f9783ca.roa (raw, json) Hash identifier: 4K31EBGeJJU3KLyT0rzNGtmuhMqNNJO5cR/qlBc53mc= Subject key identifier: 6B:45:06:0A:C6:59:82:A5:31:84:AE:0D:07:3F:66:33:F7:31:1E:80 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584BA9325C545EC5413698556150 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14593 IP address blocks: 135.129.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5c:54:5e:c5:41:36:98:55:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=06a8f460-fca5-40d6-9950-9d9a8e65b543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:2d:bc:bd:00:2f:0f:59:a5:8a:5e:0e:1c: 72:e0:43:4b:3a:1c:e4:35:d8:92:e0:f5:a5:ee:2a: 81:dc:70:30:18:0a:b5:25:05:ac:7e:b9:9d:24:49: 26:64:f2:d5:ce:2c:a1:15:a0:ca:31:60:59:38:d4: 11:d8:40:98:4b:20:3e:6f:10:d8:98:e9:43:bc:fd: 85:14:46:d3:ae:bb:92:47:fb:87:6e:51:7a:30:15: 57:86:f2:40:86:cf:1e:95:6a:20:ef:7b:44:e6:8f: 9d:27:d7:8c:e9:43:d2:a9:ca:f1:5a:aa:05:8e:9d: 11:2c:e3:ea:51:a3:6e:45:25:5b:17:4f:ab:ec:ff: 0b:73:06:b9:5b:1e:73:d5:e5:46:b8:89:7e:83:57: 6f:6f:ca:a7:d0:a1:fd:94:16:bf:6c:07:38:78:2b: 61:af:41:49:aa:72:b2:e8:ec:31:76:75:18:af:7b: c8:f1:5d:7d:09:fb:88:62:c2:41:76:9f:76:7b:c7: 2b:2f:a2:0d:ea:22:ec:33:3e:dc:dd:d6:60:76:88: cd:ed:6b:a7:38:e9:c1:c6:68:eb:91:32:93:e2:45: 98:35:8b:46:05:c8:01:7d:fc:ce:a0:1d:9d:0d:5f: 89:74:98:be:5f:c8:19:96:5a:81:6d:b3:26:2b:09: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:45:06:0A:C6:59:82:A5:31:84:AE:0D:07:3F:66:33:F7:31:1E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:97:2a:dc:72:94:5b:1e:33:bf:a1:77:5d:85:d5:50:94:d8: 11:a4:b8:47:98:16:1a:c5:ce:c1:53:17:46:5c:4a:50:6f:7d: ad:f9:ec:e6:32:78:08:3d:d7:35:c0:2c:af:35:32:9c:cb:a4: ae:71:bb:7a:4e:25:e8:57:f8:2c:d0:c1:4e:d7:84:bd:f5:a4: bb:22:58:1b:d0:98:c3:67:3c:83:2c:c8:b1:1b:a8:fe:da:e2: 57:0e:36:2a:ae:74:f5:98:83:6a:f6:de:97:8c:62:85:19:9a: 6b:3a:3d:5a:ca:6c:ac:d2:5a:10:9c:9c:c1:8b:25:64:4b:e8: 80:3e:f6:be:7c:c5:f4:45:3c:4a:35:6b:d4:ff:78:63:16:cf: 71:4f:3a:7d:ee:6e:f5:76:6a:b6:64:76:4f:7b:fc:36:32:38: 13:a9:62:62:06:08:3a:a2:b1:d3:4d:79:7f:90:d0:5f:59:f1: 1f:5d:f9:1e:02:48:e6:e8:4e:bd:88:df:78:32:49:2b:bd:bd: ea:2b:d3:5d:8f:1f:be:4c:2e:eb:81:0e:2a:50:e5:fe:81:1b: 22:03:b2:ac:54:ba:6a:b4:3d:89:d5:25:3c:af:61:58:21:7d: c4:71:5f:bc:e6:69:6d:64:69:56:26:80:da:35:09:27:13:ee: 83:b3:91:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlxUXsVBNphVYVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MDZhOGY0NjAtZmNhNS00MGQ2LTk5NTAtOWQ5YThlNjViNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+8tvL0ALw9ZpYpeDhxy4ENLOhzkNdiS4PWl 7iqB3HAwGAq1JQWsfrmdJEkmZPLVziyhFaDKMWBZONQR2ECYSyA+bxDYmOlDvP2F FEbTrruSR/uHblF6MBVXhvJAhs8elWog73tE5o+dJ9eM6UPSqcrxWqoFjp0RLOPq UaNuRSVbF0+r7P8Lcwa5Wx5z1eVGuIl+g1dvb8qn0KH9lBa/bAc4eCthr0FJqnKy 6OwxdnUYr3vI8V19CfuIYsJBdp92e8crL6IN6iLsMz7c3dZgdojN7WunOOnBxmjr kTKT4kWYNYtGBcgBffzOoB2dDV+JdJi+X8gZllqBbbMmKwnmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtFBgrGWYKlMYSuDQc/ZjP3MR6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYTk4NTEyZTctMzQ0Yy0z NmJlLWI4MmQtMTk4ZTdmOTc4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGh4EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyXKtxylFseM7+hd12F1VCU2BGkuEeYFhrFzsFTF0ZcSlBvfa357OYy eAg91zXALK81MpzLpK5xu3pOJehX+CzQwU7XhL31pLsiWBvQmMNnPIMsyLEbqP7a 4lcONiqudPWYg2r23peMYoUZmms6PVrKbKzSWhCcnMGLJWRL6IA+9r58xfRFPEo1 a9T/eGMWz3FPOn3ubvV2arZkdk97/DYyOBOpYmIGCDqisdNNeX+Q0F9Z8R9d+R4C SOboTr2I33gySSu9veor012PH75MLuuBDipQ5f6BGyIDsqxUumq0PYnVJTyvYVgh fcRxX7zmaW1kaVYmgNo1CScT7oOzkQE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:43 2025 by rpki-client