$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa File: 170b8283-1c49-3af2-a654-4d686ca3d3fa.roa (raw, json) Hash identifier: tHbzEN8fjor07dx94tM76+jHErRJgMUe4S8urk5xzqw= Subject key identifier: 47:C7:A2:9C:68:65:6F:89:07:8B:65:D3:EE:24:A9:16:B4:CF:0C:41 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F4328584BABFD0B217A6C98AD37883880 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 198949 IP address blocks: 128.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0b:21:7a:6c:98:ad:37:88:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=d4cbe351-dc0e-43fb-b9ee-2f378228bc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:63:18:7b:6a:80:66:70:66:c4:df:14:28: 62:3c:2a:9b:da:1f:7a:54:1d:50:26:f7:d0:2b:cb: 0a:af:27:e8:43:b9:a2:e5:7f:7e:96:b6:de:7b:32: e9:7e:7a:0f:32:ae:82:23:5b:98:65:0c:3d:f3:66: 83:93:77:2a:8f:e1:d8:0d:a3:b4:c8:4b:96:3f:56: d6:cd:8b:96:3e:06:bb:fa:96:3d:a7:01:9a:3b:1c: d8:2c:77:f5:fb:03:85:e0:87:33:9a:9d:89:88:f2: 44:54:a5:4b:3a:a6:6a:74:75:bd:2f:71:cc:04:d3: d3:b0:ae:ba:89:32:d6:56:88:5f:e6:92:e7:6c:7f: c2:32:fa:b1:ee:57:8e:5c:b1:4a:ee:04:41:40:ba: 56:ee:6a:b3:b6:35:bb:54:3c:7f:8d:6e:f7:8f:9b: f5:62:bb:c2:14:1b:01:60:a9:0c:62:c2:2a:71:ae: ff:3d:16:cd:83:df:87:71:fa:4f:ff:18:42:23:a8: 65:24:76:f3:9c:10:a6:91:7a:39:66:99:a9:44:a6: 7d:df:ea:64:a3:3f:77:e5:85:46:3c:c6:3c:1b:0d: 0c:84:42:cc:51:db:62:9d:41:f6:da:da:77:bb:cc: 2d:75:29:15:8e:8e:13:55:7f:e1:99:5d:45:81:5c: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:A2:9C:68:65:6F:89:07:8B:65:D3:EE:24:A9:16:B4:CF:0C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 128.135.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:13:3b:4f:b2:34:dc:50:76:23:48:f4:79:66:20:e1:0a:ae: 91:02:99:73:6a:31:20:d6:54:63:a8:a4:6e:cf:4c:f1:6f:89: ea:9e:07:3e:6f:6e:b1:92:1c:21:ee:d7:29:6b:6e:da:b9:7b: 12:2f:ee:8f:4f:2c:50:37:42:1b:60:fc:49:87:c0:2b:b8:03: 87:47:37:56:23:76:cd:95:9d:55:66:c6:24:db:db:c3:ec:92: 2d:52:e0:c4:be:af:2b:a3:44:0d:eb:cb:45:c0:a7:12:25:47: eb:87:11:81:44:07:8e:87:c7:f0:6c:11:9d:6d:0c:80:cb:aa: 53:f6:71:8b:b1:0b:3e:9c:0e:a5:51:51:16:7f:92:9a:4e:6c: c5:1b:01:60:fc:26:1a:5f:14:5b:50:91:e1:8c:bf:b7:99:cc: af:84:74:d2:ff:7d:7e:42:b8:08:d9:be:26:ae:ea:f5:64:32: 3c:80:4d:e2:8a:f1:2a:8a:07:6a:9d:5f:95:7f:a9:cc:f2:98: e0:e5:26:96:65:39:d6:e9:bb:85:d8:89:29:d2:a0:17:b3:fa: 04:18:6e:45:19:f0:80:7c:61:f8:01:b3:f3:76:13:f9:91:49: 44:14:ff:f0:de:bc:5a:e7:e5:06:43:4d:1e:1c:e7:09:82:6b: c9:7d:c8:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEur/QshemyYrTeIOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZDRjYmUzNTEtZGMwZS00M2ZiLWI5ZWUtMmYzNzgyMjhiYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb9jGHtqgGZwZsTfFChiPCqb2h96VB1QJvfQ K8sKryfoQ7mi5X9+lrbeezLpfnoPMq6CI1uYZQw982aDk3cqj+HYDaO0yEuWP1bW zYuWPga7+pY9pwGaOxzYLHf1+wOF4Iczmp2JiPJEVKVLOqZqdHW9L3HMBNPTsK66 iTLWVohf5pLnbH/CMvqx7leOXLFK7gRBQLpW7mqztjW7VDx/jW73j5v1YrvCFBsB YKkMYsIqca7/PRbNg9+HcfpP/xhCI6hlJHbznBCmkXo5ZpmpRKZ93+pkoz935YVG PMY8Gw0MhELMUdtinUH22tp3u8wtdSkVjo4TVX/hmV1FgVzWDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEfHopxoZW+JB4tl0+4kqRa0zwxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvMTcwYjgyODMtMWM0OS0z YWYyLWE2NTQtNGQ2ODZjYTNkM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGxM7T7I03FB2I0j0eWYg4QqukQKZc2oxINZUY6ikbs9M8W+J6p4HPm9u sZIcIe7XKWtu2rl7Ei/uj08sUDdCG2D8SYfAK7gDh0c3ViN2zZWdVWbGJNvbw+yS LVLgxL6vK6NEDevLRcCnEiVH64cRgUQHjofH8GwRnW0MgMuqU/Zxi7ELPpwOpVFR Fn+Smk5sxRsBYPwmGl8UW1CR4Yy/t5nMr4R00v99fkK4CNm+Jq7q9WQyPIBN4orx KooHap1flX+pzPKY4OUmlmU51um7hdiJKdKgF7P6BBhuRRnwgHxh+AGz83YT+ZFJ RBT/8N68WuflBkNNHhznCYJryX3I0A== -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:08 2025 by rpki-client