$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa File: f4eee786-dbd9-307a-9a11-b190b93526d8.roa (raw, json) Hash identifier: iBQ6onpHO9aAea5ePbhzioGTHzerUUgToSukjbxONZ8= Subject key identifier: D1:65:F9:0D:02:AA:3E:75:03:D4:E3:98:14:00:AC:8C:78:35:1F:3F Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584BA93263245A4EA48840BB1680 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14340 IP address blocks: 128.17.0.0/16 maxlen: 24 128.245.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:63:24:5a:4e:a4:88:40:bb:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=bdbeafaf-79ed-4a24-a8c4-648fbd65ae85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:99:28:5c:ce:6d:19:45:82:ea:24:c7:34: 42:90:a5:23:61:d3:ee:f3:11:47:7d:0f:b2:e4:09: 88:28:4e:db:5e:4c:9c:36:9b:3f:46:c1:2f:bb:09: fa:00:90:50:96:f9:f5:9c:6f:3a:ae:1a:f2:30:68: 30:f7:76:c1:38:c9:0d:5f:e3:ee:74:c6:2d:e0:6d: 35:a5:10:a7:fb:a8:72:ac:cb:11:19:36:20:28:d1: 43:00:26:f9:5c:9f:38:71:97:07:bf:d4:9a:80:9a: c1:cf:0f:50:d1:9c:7f:37:53:80:c0:d7:24:61:87: 39:d9:65:75:f7:49:6d:0c:df:d6:5e:c5:0f:75:b0: a4:0a:28:98:6d:50:8c:47:46:4e:f9:dd:a5:e2:c3: ca:44:06:c9:cb:47:f9:5d:c4:10:54:d6:02:fc:be: 91:e2:52:40:c7:94:e2:ac:fe:31:76:7a:e7:5d:ab: 38:a1:c3:01:c9:f6:4e:eb:2f:dd:38:c4:c7:dd:5a: 58:ef:5e:3a:ac:03:af:f7:f7:54:be:a0:e9:1c:d8: cf:81:d1:9f:a0:1d:75:1c:ee:d3:93:03:09:a3:66: 88:47:d1:9f:96:da:6a:fd:31:a6:c9:8c:9a:86:41: 5a:cb:3f:fe:1c:69:51:1d:a7:07:f7:f1:c0:cc:e5: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:65:F9:0D:02:AA:3E:75:03:D4:E3:98:14:00:AC:8C:78:35:1F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/f4eee786-dbd9-307a-9a11-b190b93526d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 128.17.0.0/16 128.245.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:c0:aa:2b:6b:90:75:f2:c4:7b:30:bb:1a:38:b8:70:bc:37: c6:d7:bc:7c:b9:36:1d:c3:29:2e:c9:a2:7c:f3:fb:90:1d:34: 5f:81:26:6c:26:a0:13:03:41:6e:d2:5d:18:ff:06:2c:e4:3f: 99:f7:1e:1a:4b:02:22:9b:44:47:38:87:27:03:4c:62:e8:3d: bd:01:00:c8:51:8e:85:20:3d:71:12:9e:26:ed:40:f1:c2:f9: 8c:ca:62:ce:f9:41:df:33:2e:de:7c:12:f8:c5:2d:41:04:ab: ab:10:89:9e:9d:07:a4:79:7b:cd:73:14:9e:d7:e7:49:de:74: b2:07:57:a2:66:eb:58:27:08:c2:51:79:b1:51:18:01:d0:63: 53:06:86:15:b9:ac:ba:e1:b5:56:9c:1c:36:71:fa:d2:f9:6f: 0b:4a:5e:8f:66:80:cb:59:bf:89:dd:6d:ed:35:93:66:c4:df: a4:a9:c0:e2:24:9d:20:03:bd:6b:22:2f:fb:d5:f3:43:dd:b8: e4:09:f9:8b:42:d6:41:ae:3a:68:95:b0:f1:b0:a7:ff:5c:be: 89:2a:a0:0a:65:ff:ce:40:27:17:3f:da:e8:dc:26:a2:26:b5: 26:a4:bb:89:e6:ea:c9:55:6c:6d:0a:73:59:95:7b:5f:0c:df: 49:80:20:12 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEupMmMkWk6kiEC7FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YmRiZWFmYWYtNzllZC00YTI0LWE4YzQtNjQ4ZmJkNjVhZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtSZKFzObRlFguokxzRCkKUjYdPu8xFHfQ+y 5AmIKE7bXkycNps/RsEvuwn6AJBQlvn1nG86rhryMGgw93bBOMkNX+PudMYt4G01 pRCn+6hyrMsRGTYgKNFDACb5XJ84cZcHv9SagJrBzw9Q0Zx/N1OAwNckYYc52WV1 90ltDN/WXsUPdbCkCiiYbVCMR0ZO+d2l4sPKRAbJy0f5XcQQVNYC/L6R4lJAx5Ti rP4xdnrnXas4ocMByfZO6y/dOMTH3VpY7146rAOv9/dUvqDpHNjPgdGfoB11HO7T kwMJo2aIR9Gfltpq/TGmyYyahkFayz/+HGlRHacH9/HAzOVhLwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFNFl+Q0Cqj51A9TjmBQArIx4NR8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZjRlZWU3ODYtZGJkOS0z MDdhLTlhMTEtYjE5MGI5MzUyNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgBEDAwCA 9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQDfwKora5B18sR7MLsaOLhwvDfG17x8uTYdwykuyaJ88/uQHTRf gSZsJqATA0Fu0l0Y/wYs5D+Z9x4aSwIim0RHOIcnA0xi6D29AQDIUY6FID1xEp4m 7UDxwvmMymLO+UHfMy7efBL4xS1BBKurEImenQekeXvNcxSe1+dJ3nSyB1eiZutY JwjCUXmxURgB0GNTBoYVuay64bVWnBw2cfrS+W8LSl6PZoDLWb+J3W3tNZNmxN+k qcDiJJ0gA71rIi/71fND3bjkCfmLQtZBrjpolbDxsKf/XL6JKqAKZf/OQCcXP9ro 3CaiJrUmpLuJ5urJVWxtCnNZlXtfDN9JgCAS -----END CERTIFICATE-----Generated at Tue Nov 4 23:38:29 2025 by rpki-client