$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa File: fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa (raw, json) Hash identifier: vftpWNAxV9sh7FnJdT5e4dPmYy0IbfZSQTnHFG7LL6A= Subject key identifier: 8E:63:85:EC:8C:49:3C:DD:01:54:BA:4D:C4:AA:03:E4:28:7F:5D:6A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D291F72C5D4CD612C4408 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 1225 IP address blocks: 129.250.35.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:29:1f:72:c5:d4:cd:61:2c:44:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=47d8ebba-3db1-46aa-b06f-79026552c917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:56:75:07:b5:9a:92:e5:5b:7e:ee:fb:2d: 27:59:0b:c5:f9:09:bb:31:fc:87:10:42:98:e9:fa: 3a:d9:28:34:b7:ec:a3:fa:ef:58:86:a3:99:f0:c3: 6c:97:b2:ce:be:87:9f:a9:0f:cf:1e:81:c7:4c:24: 1f:4d:2f:27:f1:ce:bc:ce:8e:72:ab:9e:aa:98:64: a7:01:d8:85:c6:88:40:ee:65:9a:6e:05:ab:9c:52: f7:11:66:e0:0e:8a:5c:a4:d6:6d:35:9b:48:2a:e2: 95:ed:dc:1d:32:73:7a:c0:f2:b4:41:cb:18:32:e3: 74:a0:eb:5f:68:cd:8f:1d:38:1e:b8:b6:3f:5a:20: c7:16:33:b5:04:2d:81:f9:5a:f2:4b:b7:d4:9c:cd: 2f:65:b5:4b:15:70:3e:77:12:90:f1:4b:65:8e:bb: 13:57:8f:a1:d3:82:ca:ac:79:07:98:70:29:84:52: 96:5a:cf:8b:6d:ea:77:1d:31:d9:78:c6:3b:9e:92: 83:ec:5a:b7:11:07:a4:96:3c:b3:77:6a:bb:da:a9: 0c:14:78:ea:8b:c2:65:8d:5d:ec:24:bf:0d:74:64: 10:fd:34:3b:03:7e:8d:bd:00:74:5b:38:a3:d1:55: 69:ec:32:5d:2a:62:b1:34:31:b7:0f:bf:08:5e:cb: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:85:EC:8C:49:3C:DD:01:54:BA:4D:C4:AA:03:E4:28:7F:5D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b1:72:ee:6e:0b:b4:fc:16:81:ed:71:1d:a7:be:e7:5b:b8: c4:e8:c6:e0:ac:de:23:d9:80:5a:e4:8d:a1:b8:18:ba:f4:df: b6:41:a0:c8:55:ee:59:91:e5:ee:50:07:5c:21:e2:c8:fc:3f: 55:58:d8:63:36:9b:dc:11:d5:0e:0b:fa:61:01:bd:af:00:42: 2b:a5:fd:c6:64:0a:92:c6:3f:b1:79:8c:2f:d2:8e:c3:9f:68: 92:5b:be:ec:51:6f:e0:4e:5e:56:2f:c7:5d:98:83:d3:40:18: 7c:af:ea:fa:9b:2b:31:d0:bf:cb:3d:8c:5e:bb:21:9e:b5:9f: 60:38:21:1d:c6:12:f8:e6:f8:fb:09:0e:c7:c1:e2:b4:f0:1c: 8c:bf:d5:de:97:d9:0f:32:c2:d3:51:c8:45:6b:de:63:04:18: 93:44:08:c3:ee:f3:7c:c8:c9:d3:9e:c8:f8:46:4e:2d:9f:f7: a1:aa:37:15:07:ba:a4:7d:f2:73:ab:6e:de:63:ea:83:3c:58: 2c:74:11:c2:d8:08:cc:60:84:91:00:fb:f9:92:39:c1:fe:42: 8a:4d:84:28:27:24:79:63:3d:ba:d4:e0:5d:f0:4a:78:f3:fb: 70:79:4b:d2:07:af:5a:83:8b:55:f3:54:33:a0:6b:de:9e:da: e2:84:f6:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jSkfcsXUzWEsRAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NDdkOGViYmEtM2RiMS00NmFhLWIwNmYtNzkwMjY1NTJjOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwdWdQe1mpLlW37u+y0nWQvF+Qm7MfyHEEKY 6fo62Sg0t+yj+u9YhqOZ8MNsl7LOvoefqQ/PHoHHTCQfTS8n8c68zo5yq56qmGSn AdiFxohA7mWabgWrnFL3EWbgDopcpNZtNZtIKuKV7dwdMnN6wPK0QcsYMuN0oOtf aM2PHTgeuLY/WiDHFjO1BC2B+VryS7fUnM0vZbVLFXA+dxKQ8UtljrsTV4+h04LK rHkHmHAphFKWWs+Lbep3HTHZeMY7npKD7Fq3EQekljyzd2q72qkMFHjqi8JljV3s JL8NdGQQ/TQ7A36NvQB0Wzij0VVp7DJdKmKxNDG3D78IXsuMswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5jheyMSTzdAVS6TcSqA+Qof11qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmI0Yjk0ZDEtMzdhMS0z YzExLWE4NmYtNjdjMWNmMTk1NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfoj4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBsXLubgu0/BaB7XEdp77nW7jE6MbgrN4j2YBa5I2huBi69N+2QaDI Ve5ZkeXuUAdcIeLI/D9VWNhjNpvcEdUOC/phAb2vAEIrpf3GZAqSxj+xeYwv0o7D n2iSW77sUW/gTl5WL8ddmIPTQBh8r+r6mysx0L/LPYxeuyGetZ9gOCEdxhL45vj7 CQ7HweK08ByMv9Xel9kPMsLTUchFa95jBBiTRAjD7vN8yMnTnsj4Rk4tn/ehqjcV B7qkffJzq27eY+qDPFgsdBHC2AjMYISRAPv5kjnB/kKKTYQoJyR5Yz261OBd8Ep4 8/tweUvSB69ag4tV81QzoGventrihPaK -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:43 2025 by rpki-client