$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa File: 88c96948-a5a4-3002-ab65-1978d3810e9a.roa (raw, json) Hash identifier: luEE3NFs3BmJCQNSSEam88TB7tvNFgUGOvEegn90NV0= Subject key identifier: D8:C5:7F:DB:C1:A2:E4:A1:95:25:3A:AA:40:A4:7B:F6:BB:1C:0D:AD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBE40329C9BB05D7320446380 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 2914 IP address blocks: 129.250.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:32:9c:9b:b0:5d:73:20:44:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f6712b40-625a-4e61-b21a-4a7a31be1b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:ce:95:bf:55:a9:ce:c2:ba:96:fc:17:a5: 39:e3:91:10:57:e1:5d:a2:12:35:7a:52:34:5c:ea: ea:c0:6c:4f:bf:e4:75:cd:03:51:b7:e3:72:ab:c9: f5:14:fe:ad:6e:10:2d:84:d4:c9:ea:55:02:18:aa: 0d:33:77:ba:0e:00:2e:20:65:dc:c6:1c:dc:4b:b3: 2b:fa:81:73:d1:be:99:13:ae:af:df:6c:d2:e6:28: 86:1c:09:ca:8f:2e:9c:ab:ee:95:8d:30:10:22:26: e4:a3:81:04:a6:3b:bb:ff:2f:93:ca:76:cf:f7:b3: d1:0b:8a:7f:68:1b:fd:7e:0f:fb:de:91:ab:ba:b6: d2:2e:70:59:98:8a:85:d8:73:13:ea:4b:ff:0c:96: 5d:24:0b:af:ca:df:44:2d:82:ed:c7:0e:95:18:ef: f1:0b:f7:28:72:af:22:50:cb:d0:8a:27:26:45:06: 38:99:7c:05:eb:f6:16:53:c8:c8:42:f1:eb:f4:74: de:ee:08:77:66:fa:6a:4a:8e:00:1a:a6:90:29:af: de:c2:5f:f7:a5:48:4d:0b:86:c2:44:58:52:81:e9: f1:ad:59:b4:78:5c:ed:c6:2c:90:88:f5:cc:d8:80: 28:2c:20:2a:c7:8d:30:75:e8:21:d8:d3:9d:eb:34: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:7F:DB:C1:A2:E4:A1:95:25:3A:AA:40:A4:7B:F6:BB:1C:0D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:39:15:ad:27:77:44:07:b1:6a:38:a4:7b:5c:49:b8:84:81: 89:b0:66:b4:3e:a5:d4:27:b4:bf:a3:87:e4:2d:c6:c1:81:63: 8c:6e:e4:92:0d:ae:13:af:63:32:90:b5:01:c9:31:f6:f1:da: 40:84:f2:57:4f:fa:39:84:c2:21:39:6d:59:6b:85:69:e7:26: 3e:1f:c7:d0:74:d9:4e:7f:96:7b:ad:fe:56:ba:eb:1b:6c:50: 27:04:3a:50:45:15:f8:5d:a0:42:b4:22:87:ad:e8:b6:20:89: 8f:4d:9b:dd:fd:aa:27:c1:c0:26:13:f7:f6:e1:54:0e:2f:9c: 2b:fa:b1:fc:ef:2f:9f:d5:31:f5:88:50:04:f2:cc:c4:00:fb: da:9e:e8:6c:1b:c2:cf:1f:d5:ba:16:90:f6:e9:39:d5:b1:88: 6c:0b:73:70:51:f2:03:32:92:50:e1:27:ca:0e:8e:60:6d:25: 58:cc:e0:1b:3d:e6:c6:63:c4:88:dc:92:df:13:a4:26:13:d1: 45:b8:b4:80:f8:69:b1:f3:ef:38:6c:4b:91:9a:58:78:2e:bf: f5:c7:a1:ae:f4:14:6a:65:95:f3:bf:4d:66:c9:bb:e7:ce:63: a8:67:e6:e8:2f:09:58:98:12:a9:81:c6:80:12:78:3a:bc:00: 44:b4:81:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDKcm7BdcyBEY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjY3MTJiNDAtNjI1YS00ZTYxLWIyMWEtNGE3YTMxYmUxYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlvOlb9Vqc7Cupb8F6U545EQV+FdohI1elI0 XOrqwGxPv+R1zQNRt+Nyq8n1FP6tbhAthNTJ6lUCGKoNM3e6DgAuIGXcxhzcS7Mr +oFz0b6ZE66v32zS5iiGHAnKjy6cq+6VjTAQIibko4EEpju7/y+TynbP97PRC4p/ aBv9fg/73pGrurbSLnBZmIqF2HMT6kv/DJZdJAuvyt9ELYLtxw6VGO/xC/cocq8i UMvQiicmRQY4mXwF6/YWU8jIQvHr9HTe7gh3ZvpqSo4AGqaQKa/ewl/3pUhNC4bC RFhSgenxrVm0eFztxiyQiPXM2IAoLCAqx40wdegh2NOd6zTTNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjFf9vBouShlSU6qkCke/a7HA2tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODhjOTY5NDgtYTVhNC0z MDAyLWFiNjUtMTk3OGQzODEwZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU5Fa0nd0QHsWo4pHtcSbiEgYmwZrQ+pdQntL+jh+QtxsGBY4xu5JIN rhOvYzKQtQHJMfbx2kCE8ldP+jmEwiE5bVlrhWnnJj4fx9B02U5/lnut/la66xts UCcEOlBFFfhdoEK0Ioet6LYgiY9Nm939qifBwCYT9/bhVA4vnCv6sfzvL5/VMfWI UATyzMQA+9qe6Gwbws8f1boWkPbpOdWxiGwLc3BR8gMyklDhJ8oOjmBtJVjM4Bs9 5sZjxIjckt8TpCYT0UW4tID4abHz7zhsS5GaWHguv/XHoa70FGpllfO/TWbJu+fO Y6hn5ugvCViYEqmBxoASeDq8AES0gbg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:45 2025 by rpki-client