$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa File: b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json) Hash identifier: O4gKSQLC2lb6L45dRgTiu5tZD5SdVeThC53JYRTvgvk= Subject key identifier: 28:18:A3:BA:3D:1C:59:00:1C:E3:BF:87:F1:87:71:C2:6C:48:51:08 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584B6201F0DB7A42CA8BB4C73C40 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 14593 IP address blocks: 135.129.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f0:db:7a:42:ca:8b:b4:c7:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=2ac109e6-6a9b-4bd1-9342-4a76444da5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:ca:44:8c:2f:3b:23:27:89:29:bc:a0:32: 12:e5:d4:37:fe:02:84:ce:1a:51:46:ce:4f:7d:96: 9e:ec:b2:95:85:7f:8c:4f:ae:97:4e:b4:4a:00:c4: 9d:c0:85:7b:bb:db:7d:bd:c0:69:db:e5:66:5e:29: 16:49:a1:9e:15:d3:3f:61:67:ce:59:81:da:fa:e2: b2:68:fc:1f:dc:e6:ba:2e:cc:54:30:2f:eb:d6:cc: 26:f9:64:c7:8b:87:f1:a9:23:14:1d:d0:2b:7c:eb: b7:89:53:41:6d:75:4a:30:38:aa:e6:c9:66:3a:71: 9b:cf:94:35:78:a3:3f:98:93:73:3d:2b:5b:26:f8: 16:36:98:a5:74:da:1e:75:fc:71:7c:23:86:41:03: 17:e9:95:77:21:68:c1:12:ae:16:3f:5a:42:5f:23: 88:35:dc:26:f7:ac:02:35:f7:8c:4e:63:1b:9f:44: 70:3b:06:6f:5e:32:d2:e8:b9:b8:55:81:f7:fe:01: 9c:95:a8:0b:5e:f9:d7:04:43:07:b3:ef:1a:6f:f4: 00:af:50:12:39:fe:20:ce:92:13:d3:e5:9f:53:cf: c8:45:e3:c1:62:5d:72:85:d9:67:99:f8:75:4c:d8: c2:79:49:82:38:d9:1a:7a:6e:0b:9d:72:c9:ab:33: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:18:A3:BA:3D:1C:59:00:1C:E3:BF:87:F1:87:71:C2:6C:48:51:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:34:1e:7b:f6:f3:c7:f5:38:38:52:ce:02:7e:ab:67:38:41: 33:54:76:4a:ea:e9:b9:64:25:03:aa:30:92:c5:7d:cd:0d:f0: d8:bd:bd:75:66:9c:5d:52:f6:8b:1b:de:a9:13:16:00:9c:93: c0:17:3d:85:07:d6:44:2f:e2:ed:dc:64:dc:94:87:c3:e4:c9: b3:24:3b:a8:91:27:8e:95:52:6c:ac:91:ea:b8:da:c9:aa:71: ab:e2:f2:22:62:23:9b:4a:b5:85:80:10:9c:29:33:d8:c2:b7: 5d:53:e6:63:d3:a5:31:e4:af:43:60:1c:7d:5c:3b:87:3a:83: f3:dc:60:a3:5e:5d:f6:67:ab:3b:13:54:58:9e:2d:fd:c3:f3: 27:e3:25:93:8e:cd:71:70:58:65:bb:a4:a5:e7:12:c2:16:00: 50:e7:63:93:38:a4:54:0a:49:43:65:04:66:50:af:8e:47:e0: f7:26:34:71:ed:52:8f:ca:eb:96:eb:b7:ea:81:22:1a:3c:72: 87:fe:87:93:2f:56:85:e1:2a:a0:ef:7c:fb:92:ef:ba:6a:9e: 4e:f9:db:7d:52:e7:c7:4e:c1:b4:35:7d:3c:ac:ad:ff:a9:c6: b6:58:b4:c6:9c:bc:32:31:11:3d:1a:70:46:89:bb:01:88:3c: 24:cf:15:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfDbekLKi7THPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MmFjMTA5ZTYtNmE5Yi00YmQxLTkzNDItNGE3NjQ0NGRhNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxbKRIwvOyMniSm8oDIS5dQ3/gKEzhpRRs5P fZae7LKVhX+MT66XTrRKAMSdwIV7u9t9vcBp2+VmXikWSaGeFdM/YWfOWYHa+uKy aPwf3Oa6LsxUMC/r1swm+WTHi4fxqSMUHdArfOu3iVNBbXVKMDiq5slmOnGbz5Q1 eKM/mJNzPStbJvgWNpildNoedfxxfCOGQQMX6ZV3IWjBEq4WP1pCXyOINdwm96wC NfeMTmMbn0RwOwZvXjLS6Lm4VYH3/gGclagLXvnXBEMHs+8ab/QAr1ASOf4gzpIT 0+WfU8/IRePBYl1yhdlnmfh1TNjCeUmCONkaem4LnXLJqzND2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgYo7o9HFkAHOO/h/GHccJsSFEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYjk3MmMwNDctMmFmZC0z MGE0LWE0MGItMmI4NTAyMDJjZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh4HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM0Hnv288f1ODhSzgJ+q2c4QTNUdkrq6blkJQOqMJLFfc0N8Ni9vXVm nF1S9osb3qkTFgCck8AXPYUH1kQv4u3cZNyUh8PkybMkO6iRJ46VUmyskeq42smq cavi8iJiI5tKtYWAEJwpM9jCt11T5mPTpTHkr0NgHH1cO4c6g/PcYKNeXfZnqzsT VFieLf3D8yfjJZOOzXFwWGW7pKXnEsIWAFDnY5M4pFQKSUNlBGZQr45H4PcmNHHt Uo/K65brt+qBIho8cof+h5MvVoXhKqDvfPuS77pqnk75231S58dOwbQ1fTysrf+p xrZYtMacvDIxET0acEaJuwGIPCTPFcQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:52 2025 by rpki-client