$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa File: 5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa (raw, json) Hash identifier: aCti2Wnh6lvtvxitl9Zi2r/RUA+SFiCf8NLAaDpg0QY= Subject key identifier: BA:16:33:17:77:23:2D:08:9E:40:86:EF:D3:13:00:FD:F0:DD:01:CD Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584B5F3778EF8305D5A16FC11100 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 129.77.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:78:ef:83:05:d5:a1:6f:c1:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=76136e19-3bd6-4555-a702-d70fe08f4c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:e2:28:9c:bc:0e:94:e6:87:3f:4e:fb:1a: 19:39:a0:4c:38:0f:9a:44:0d:60:e5:ea:cc:a9:73: 54:80:fc:19:1a:a8:ce:2a:33:de:a1:c4:44:53:e2: e8:34:c7:05:5e:36:dc:25:05:f8:d5:fa:7d:6f:74: 4c:e6:53:d4:ac:9a:09:57:ce:9e:4c:bf:4c:f9:fe: 63:d4:08:c7:1a:71:76:0c:0d:3a:bb:15:a8:53:93: ac:57:19:06:5c:d2:9c:fb:ba:85:37:03:ae:ce:3d: c0:7a:3d:1c:4c:91:50:13:5a:27:4f:cc:d6:52:4f: 54:43:33:10:0f:38:6a:0d:1b:be:bc:42:5d:83:b1: d4:10:5c:e6:60:07:0f:a0:40:35:07:15:c9:f4:7c: 3c:b6:d7:9f:4c:ba:3d:b0:7f:36:dd:36:f7:d8:7d: 73:e0:2f:41:b0:9f:23:b1:d2:0a:3a:14:88:67:56: 55:5c:8f:9c:c4:8b:41:0a:42:bf:ce:c4:72:2a:b9: 48:56:1d:52:8f:d8:f0:b1:59:f5:35:8f:6a:8b:5b: 01:13:d1:16:15:36:9e:5c:62:a6:24:bc:19:d9:ff: 6c:35:a7:62:f6:dd:d8:84:b9:f3:f9:fa:6d:64:10: c8:36:c0:d7:b4:70:aa:5f:c7:e3:0d:09:ec:b6:0f: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:16:33:17:77:23:2D:08:9E:40:86:EF:D3:13:00:FD:F0:DD:01:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 129.77.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f5:a4:68:98:a8:bc:ca:9a:f9:ad:a6:1b:37:a7:d3:4b:8b: 05:03:33:f3:f7:ba:a5:ed:15:8b:d6:61:f0:60:c4:03:95:ff: ad:15:9c:f9:b1:c2:d1:cf:9b:f0:1d:e4:66:a6:67:69:e4:dc: ed:bc:3c:d9:01:5b:63:0a:6f:01:84:fc:9f:10:fd:78:c0:92: 8c:d4:b6:76:8c:24:84:ec:26:22:55:a5:4b:87:be:39:0a:82: 67:b4:f8:b1:68:76:05:47:67:67:d3:09:9e:77:38:fc:92:93: fd:07:c9:71:34:36:f1:33:2c:f0:06:5a:f8:8e:f0:ba:13:f8: 95:1b:67:97:eb:2e:df:34:81:12:21:8b:e6:b7:ad:19:16:a0: 81:71:ee:2e:b8:48:fc:47:76:82:e7:c9:1a:8c:db:85:20:78: db:ad:d6:a8:c3:fb:b3:e6:2a:e7:83:b3:6b:14:99:39:f1:50: da:ea:c4:1a:ff:be:04:3d:53:79:2a:28:ab:f1:82:af:7f:6d: 43:33:89:b6:0f:32:6e:da:48:9a:8a:10:01:2c:e7:83:fd:00: a2:86:10:97:41:00:05:21:a7:3d:80:cd:f2:29:d2:8a:76:e9: cb:92:b4:d1:7e:2e:3c:43:10:d9:46:98:ee:7e:40:83:e6:eb: c7:32:98:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3jvgwXVoW/BEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NzYxMzZlMTktM2JkNi00NTU1LWE3MDItZDcwZmUwOGY0YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5XiKJy8DpTmhz9O+xoZOaBMOA+aRA1g5erM qXNUgPwZGqjOKjPeocREU+LoNMcFXjbcJQX41fp9b3RM5lPUrJoJV86eTL9M+f5j 1AjHGnF2DA06uxWoU5OsVxkGXNKc+7qFNwOuzj3Aej0cTJFQE1onT8zWUk9UQzMQ DzhqDRu+vEJdg7HUEFzmYAcPoEA1BxXJ9Hw8ttefTLo9sH823Tb32H1z4C9BsJ8j sdIKOhSIZ1ZVXI+cxItBCkK/zsRyKrlIVh1Sj9jwsVn1NY9qi1sBE9EWFTaeXGKm JLwZ2f9sNadi9t3YhLnz+fptZBDINsDXtHCqX8fjDQnstg9iYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoWMxd3Iy0InkCG79MTAP3w3QHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWI1NDFkZjctYzIyNy0z YzFhLThhN2QtMGNlNGU5MmU0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgU0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv1pGiYqLzKmvmtphs3p9NLiwUDM/P3uqXtFYvWYfBgxAOV/60VnPmx wtHPm/Ad5GamZ2nk3O28PNkBW2MKbwGE/J8Q/XjAkozUtnaMJITsJiJVpUuHvjkK gme0+LFodgVHZ2fTCZ53OPySk/0HyXE0NvEzLPAGWviO8LoT+JUbZ5frLt80gRIh i+a3rRkWoIFx7i64SPxHdoLnyRqM24UgeNut1qjD+7PmKueDs2sUmTnxUNrqxBr/ vgQ9U3kqKKvxgq9/bUMzibYPMm7aSJqKEAEs54P9AKKGEJdBAAUhpz2AzfIp0op2 6cuStNF+LjxDENlGmO5+QIPm68cymMI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:47 2025 by rpki-client