$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa File: 95202044-ca70-36fe-9abd-667200710a5d.roa (raw, json) Hash identifier: LzDIqmwi6fN1zBtq8uokmCf7gOjHd0V53RwrMWpGOTA= Subject key identifier: BF:A4:DD:5D:81:D6:CC:56:93:80:D3:29:44:4F:92:A0:C4:7B:67:A6 Certificate issuer: /CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Certificate serial: 010D0C9F4328584B01B14A2A4D16399857E9D900 Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa Signing time: Thu 28 Aug 2025 13:00:41 +0000 ROA not before: Thu 28 Aug 2025 13:00:41 +0000 ROA not after: Wed 26 Nov 2025 14:00:41 +0000 asID: 15830 IP address blocks: 129.176.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:b1:4a:2a:4d:16:39:98:57:e9:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Validity Not Before: Aug 28 13:00:41 2025 GMT Not After : Nov 26 14:00:41 2025 GMT Subject: CN=d4c2b63a-4cd4-49d0-a934-eeb105c79612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:ac:4a:23:f4:32:00:77:1d:18:de:f8:f0: 54:ed:ff:bb:95:4c:51:0a:61:ca:3c:d5:32:5d:77: 89:fa:cf:df:00:d0:fc:f7:6b:97:89:34:cf:54:c5: 85:9a:49:03:30:b6:6d:c5:4a:3a:35:12:01:c5:90: 08:0d:9a:16:17:00:a3:56:99:2b:14:7e:f3:e0:f0: d7:9e:6b:d1:a6:28:60:71:09:ef:aa:44:67:32:6a: 88:c3:dd:7f:40:cb:dc:df:87:c9:c4:68:8d:ca:16: 76:bf:d9:86:b5:4b:68:c5:5a:4a:71:1f:e6:5f:bf: f5:50:42:16:4c:b9:50:28:91:f5:e2:fa:3d:14:84: 5f:30:e0:e8:c9:96:f0:d4:c8:04:6c:34:42:c8:60: 9c:af:26:cd:fb:64:67:cd:09:c3:29:ba:b6:00:73: 51:3e:ed:fe:a7:f7:68:3f:db:c9:16:5d:c0:9d:a0: e5:5b:a8:d2:ff:7e:ca:00:36:21:e6:70:7f:27:bf: 5b:85:38:eb:56:e4:c5:8d:dd:27:0d:96:2d:66:d3: c7:1c:d7:35:72:be:d6:8e:fa:d3:8a:28:08:0e:59: b8:97:db:39:48:a3:f8:38:92:fe:4c:88:d4:c2:b4: c4:48:fd:a2:9c:a4:e2:1e:a7:7c:75:6d:d1:6e:01: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:DD:5D:81:D6:CC:56:93:80:D3:29:44:4F:92:A0:C4:7B:67:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl X509v3 Authority Key Identifier: keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer sbgp-ipAddrBlock: critical IPv4: 129.176.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0c:f6:9b:b1:73:36:02:7a:b5:5c:34:3c:0a:f7:d2:11:89: 18:2e:cb:b0:11:b5:64:f7:aa:b8:8c:c8:53:92:c2:a3:0b:0d: b1:22:f3:b8:bb:6c:d8:7d:6d:35:6a:a7:6c:27:50:73:e4:90: f1:6e:d9:47:17:e5:7c:e3:d5:81:93:da:87:e0:23:39:a7:b8: d7:e5:0b:f6:67:d4:af:95:16:d5:b3:e4:f3:c1:20:0a:8b:85: b4:89:06:16:88:0d:50:33:8a:15:2d:b9:87:12:e7:db:71:83: b7:d3:30:50:fe:f8:91:d3:6e:53:c6:7c:0b:b7:d2:00:7f:c6: 34:a0:d4:0e:00:ae:b7:84:f9:8a:c5:4c:93:e0:83:21:f0:59: b6:6c:6e:88:3e:07:0b:79:d1:b2:62:f7:80:08:4c:db:7a:34: 13:58:f8:40:b4:b8:23:69:27:38:f7:68:b8:9b:a2:5c:42:b0: 69:c1:25:9c:b9:c1:c6:50:29:2e:fd:a7:8a:1e:52:a1:ff:a8: be:06:ca:dd:30:6a:79:9a:c9:c0:5b:27:f0:65:ef:04:d8:df: 79:e6:ad:51:e5:b0:9e:bc:69:90:a5:6c:52:79:32:00:0f:e7: 52:18:ac:27:ce:0d:51:11:a3:84:98:39:0b:da:0e:43:94:28: fe:25:d7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBsUoqTRY5mFfp2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJmNjYzODQtZmE1My00N2ZiLTkzOGEtZjFlNTA2NDAy M2U1MB4XDTI1MDgyODEzMDA0MVoXDTI1MTEyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDRjMmI2M2EtNGNkNC00OWQwLWE5MzQtZWViMTA1Yzc5NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14SsSiP0MgB3HRje+PBU7f+7lUxRCmHKPNUy XXeJ+s/fAND892uXiTTPVMWFmkkDMLZtxUo6NRIBxZAIDZoWFwCjVpkrFH7z4PDX nmvRpihgcQnvqkRnMmqIw91/QMvc34fJxGiNyhZ2v9mGtUtoxVpKcR/mX7/1UEIW TLlQKJH14vo9FIRfMODoyZbw1MgEbDRCyGCcrybN+2RnzQnDKbq2AHNRPu3+p/do P9vJFl3AnaDlW6jS/37KADYh5nB/J79bhTjrVuTFjd0nDZYtZtPHHNc1cr7WjvrT iigIDlm4l9s5SKP4OJL+TIjUwrTESP2inKTiHqd8dW3RbgHNjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+k3V2B1sxWk4DTKURPkqDEe2emMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2 NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1MDY0MDIzZTUvOTUyMDIwNDQtY2E3MC0z NmZlLTlhYmQtNjY3MjAwNzEwYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGJmNjYzODQtZmE1My00N2ZiLTkz OGEtZjFlNTA2NDAyM2U1L2RiZjY2Mzg0LWZhNTMtNDdmYi05MzhhLWYxZTUwNjQw MjNlNS5jcmwwHwYDVR0jBBgwFoAU2cAvW7cA5P+Rm/sAOGgrg1/jqskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1 MDY0MDIzZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgbDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwM9puxczYCerVcNDwK99IRiRguy7ARtWT3qriMyFOSwqMLDbEi87i7 bNh9bTVqp2wnUHPkkPFu2UcX5Xzj1YGT2ofgIzmnuNflC/Zn1K+VFtWz5PPBIAqL hbSJBhaIDVAzihUtuYcS59txg7fTMFD++JHTblPGfAu30gB/xjSg1A4ArreE+YrF TJPggyHwWbZsbog+Bwt50bJi94AITNt6NBNY+EC0uCNpJzj3aLibolxCsGnBJZy5 wcZQKS79p4oeUqH/qL4Gyt0wanmaycBbJ/Bl7wTY33nmrVHlsJ68aZClbFJ5MgAP 51IYrCfODVERo4SYOQvaDkOUKP4l1yg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:43 2025 by rpki-client