$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa File: 0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa (raw, json) Hash identifier: 7KDwOSDKw1irFGtCutzxKlrvaha6CKOaFRwxRcGx328= Subject key identifier: DB:09:92:78:09:FB:ED:F8:C2:8D:D6:8B:20:73:D2:C8:64:9B:94:A1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D29327599BF82E750BF80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 129.250.35.248/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:29:32:75:99:bf:82:e7:50:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=69d8e4e4-29b6-468b-afb7-f380ecda1b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:79:77:bc:6d:d8:f6:9d:e9:98:ef:3b:2a: 9c:75:df:05:32:95:cf:74:63:22:72:ed:f3:87:8b: 18:53:8e:e7:fa:06:ca:83:8f:dd:9e:3e:ee:eb:c1: d9:77:85:78:e1:88:59:7d:ce:e4:5d:13:3c:2e:ed: a4:5c:fb:07:35:44:53:a1:6c:a8:73:2b:b9:7d:0f: a0:b5:8a:60:53:83:ec:c2:46:52:24:e6:04:9b:75: bf:d6:e2:d1:b5:bf:74:67:c8:a8:43:49:4a:04:38: 82:50:f7:88:24:d3:cb:bd:04:06:eb:ff:a1:a1:90: af:53:43:b3:6b:c6:41:98:eb:e7:f9:ce:56:74:c9: 21:4e:85:d4:a3:cf:75:a6:86:35:eb:d8:9e:51:83: f5:8f:ef:fb:23:e9:65:b8:d0:38:cd:90:69:6f:7b: 76:cf:6b:a8:48:1c:7c:a6:77:34:83:f2:67:50:45: d5:62:bf:d0:65:86:57:7e:61:cb:33:b9:fb:3c:b6: 2f:a6:c4:32:c5:15:19:c5:86:8a:b9:cd:2b:b2:eb: 08:b7:12:5d:0d:ca:fa:e9:a3:cb:2e:1d:52:e2:47: ca:41:eb:a6:16:ea:1a:5e:da:70:51:cb:ad:1c:96: 8f:90:6c:2a:91:bb:97:11:fd:44:e9:e2:17:53:37: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:92:78:09:FB:ED:F8:C2:8D:D6:8B:20:73:D2:C8:64:9B:94:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.248/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:52:17:48:06:01:42:d1:a7:e1:8a:95:86:e7:61:5b:5c: 9d:c5:1e:45:9e:38:d8:7d:00:41:11:44:cb:7a:63:b2:5c:7d: 35:e1:9b:03:9c:cc:e4:c9:38:72:58:1c:96:6a:61:ba:16:dd: 52:2e:da:2d:2e:c1:14:2a:8a:d2:83:63:97:7a:c5:5c:bd:80: 0c:a9:50:33:b6:71:7a:fe:6a:c1:6f:6b:3e:83:a7:e7:53:73: de:5b:c3:70:77:15:b2:a3:c8:bb:5e:ea:63:b8:46:b1:95:0b: ed:92:53:1f:a0:b1:a7:20:44:0b:4d:27:65:79:26:af:a3:13: 17:e3:ae:54:51:1d:39:23:19:19:0c:ba:4c:dd:0b:f9:a2:51: b6:d1:7b:c4:10:74:3e:a4:16:c1:e4:37:58:71:6f:aa:d4:bf: c7:4c:ec:d4:95:9e:68:de:f9:49:93:22:c8:cc:f5:1a:46:84: 8f:e7:e2:09:4c:62:05:61:d6:f4:b2:9c:e3:3c:72:3b:f4:e2: d2:8d:87:80:1c:a9:c1:08:47:a8:bb:7b:76:39:23:f9:68:f3: 44:c7:fb:d3:e3:c2:71:3e:68:99:cc:3f:fa:05:e2:1b:45:61: 49:d4:bf:e7:de:8e:e2:bd:fe:83:e5:a8:4f:1b:31:27:42:0d: b5:75:b9:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSkydZm/gudQv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NjlkOGU0ZTQtMjliNi00NjhiLWFmYjctZjM4MGVjZGExYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAV5d7xt2Pad6ZjvOyqcdd8FMpXPdGMicu3z h4sYU47n+gbKg4/dnj7u68HZd4V44YhZfc7kXRM8Lu2kXPsHNURToWyocyu5fQ+g tYpgU4PswkZSJOYEm3W/1uLRtb90Z8ioQ0lKBDiCUPeIJNPLvQQG6/+hoZCvU0Oz a8ZBmOvn+c5WdMkhToXUo891poY169ieUYP1j+/7I+lluNA4zZBpb3t2z2uoSBx8 pnc0g/JnUEXVYr/QZYZXfmHLM7n7PLYvpsQyxRUZxYaKuc0rsusItxJdDcr66aPL Lh1S4kfKQeumFuoaXtpwUcutHJaPkGwqkbuXEf1E6eIXUzc3qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNsJkngJ++34wo3WiyBz0shkm5ShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNiZjcwYWEtN2JiOS0z ZDczLWIxMmUtZjAyYTczZjA4MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfoj+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDF1IXSAYBQtGn4YqVhudhW1ydxR5FnjjYfQBBEUTLemOyXH014ZsD nMzkyThyWByWamG6Ft1SLtotLsEUKorSg2OXesVcvYAMqVAztnF6/mrBb2s+g6fn U3PeW8NwdxWyo8i7XupjuEaxlQvtklMfoLGnIEQLTSdleSavoxMX465UUR05IxkZ DLpM3Qv5olG20XvEEHQ+pBbB5DdYcW+q1L/HTOzUlZ5o3vlJkyLIzPUaRoSP5+IJ TGIFYdb0spzjPHI79OLSjYeAHKnBCEeou3t2OSP5aPNEx/vT48JxPmiZzD/6BeIb RWFJ1L/n3o7ivf6D5ahPGzEnQg21dblX -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:25 2025 by rpki-client