$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/274a8a6b-645b-35ab-bdca-e7441ebdeec0.roa File: 274a8a6b-645b-35ab-bdca-e7441ebdeec0.roa (raw, json) Hash identifier: FKZFW9mWL9CGcvH2KM1IpfK+phvHihPsGhlP2yaulHI= Subject key identifier: 5B:0E:44:1B:D0:A6:E0:CF:16:CA:1E:F6:2C:31:27:98:88:32:27:BD Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Certificate serial: 010D0C9F4328584B987240760A45E0C4C01BD100 Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/274a8a6b-645b-35ab-bdca-e7441ebdeec0.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 2496 IP address blocks: 129.237.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:40:76:0a:45:e0:c4:c0:1b:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=456296c3-e8d0-465e-8325-7d1679a9a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:01:5e:3d:6f:b2:c3:93:45:4d:ee:c1:9a: ac:49:53:1b:ed:04:72:8a:b5:35:ba:05:16:7e:e7: d3:b8:e7:51:95:ee:c9:79:89:f1:86:bd:11:34:0f: 2b:b1:1b:7c:c5:10:03:15:70:6a:34:fb:eb:69:d1: bf:46:37:66:a6:e3:26:18:e0:56:72:1c:21:e1:23: a9:5c:1b:f9:b4:71:53:c9:a4:94:fe:3e:73:0b:e3: ee:b0:0d:fc:25:54:da:82:fe:9d:fa:3d:6a:2c:f6: 3d:8b:e5:d1:59:39:99:0a:d9:70:c5:44:06:58:25: e7:73:5b:1a:c7:56:fc:a8:b2:e1:f7:4f:c3:13:89: d5:46:74:98:a4:81:c7:c3:e3:5e:07:fb:10:00:46: 08:c3:53:cb:2f:49:cf:5a:d3:ef:92:ae:ff:75:a0: a1:6a:3a:47:b2:72:8f:8e:bf:9f:e7:05:fd:a5:d3: c0:02:ee:8f:a4:e8:e5:29:79:d2:1d:c2:a4:23:2a: 6d:83:53:65:09:98:be:c9:9c:8d:ac:b6:a1:29:cb: e6:79:e5:83:4d:74:5b:a3:dd:a9:39:ca:d1:9d:02: a1:0b:30:49:4c:30:27:d9:c6:db:3a:3e:34:36:b4: 8b:3e:85:32:c3:d6:f5:54:d7:92:f6:d2:e6:c8:6e: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:44:1B:D0:A6:E0:CF:16:CA:1E:F6:2C:31:27:98:88:32:27:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/274a8a6b-645b-35ab-bdca-e7441ebdeec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl X509v3 Authority Key Identifier: keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer sbgp-ipAddrBlock: critical IPv4: 129.237.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a4:96:17:7f:3e:87:21:f2:42:08:65:2b:43:b1:73:b5:23: 92:bf:a6:ad:98:8c:4a:c8:8e:53:54:4c:0e:6b:d7:54:0e:67: 9e:48:10:d1:5f:a4:65:ec:68:17:15:1a:4b:70:79:3e:d4:f4: 56:ab:89:44:9d:4b:44:14:d4:a1:80:95:19:7a:b9:a2:0d:fd: c5:76:40:da:a7:97:d7:10:ae:de:2c:dd:f2:78:ed:5a:9a:d2: f9:c4:dc:28:12:28:ae:2d:18:b1:98:c7:14:56:08:86:6b:f1: 03:da:60:e7:29:bd:fb:1f:04:99:bc:5d:20:79:c1:19:88:20: 93:81:4b:66:30:a2:f1:60:a3:0a:c2:32:50:8f:59:db:89:8c: cb:46:56:20:4f:90:cf:7c:57:ab:54:09:fe:74:3b:6c:e5:ee: 79:ba:65:a9:68:c7:f0:7c:bf:87:58:e4:47:68:51:03:2a:d7: 31:58:70:6e:a5:d7:3e:7c:47:02:f8:8a:fd:93:c6:ef:0b:90: d5:7d:bc:fc:07:7c:f2:4f:e8:28:76:2d:d9:59:51:90:d4:c1: 63:47:c2:76:04:a0:5e:a7:db:9a:7d:40:b9:c4:77:4b:ef:fe: 52:d8:43:42:1d:7d:3f:4a:a6:c8:de:df:43:dd:e7:62:2e:db: 5a:d2:8b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckB2CkXgxMAb0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy MDIxMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NDU2Mjk2YzMtZThkMC00NjVlLTgzMjUtN2QxNjc5YTlhNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUQBXj1vssOTRU3uwZqsSVMb7QRyirU1ugUW fufTuOdRle7JeYnxhr0RNA8rsRt8xRADFXBqNPvradG/RjdmpuMmGOBWchwh4SOp XBv5tHFTyaSU/j5zC+PusA38JVTagv6d+j1qLPY9i+XRWTmZCtlwxUQGWCXnc1sa x1b8qLLh90/DE4nVRnSYpIHHw+NeB/sQAEYIw1PLL0nPWtPvkq7/daChajpHsnKP jr+f5wX9pdPAAu6PpOjlKXnSHcKkIyptg1NlCZi+yZyNrLahKcvmeeWDTXRbo92p OcrRnQKhCzBJTDAn2cbbOj40NrSLPoUyw9b1VNeS9tLmyG6XkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsORBvQpuDPFsoe9iwxJ5iIMie9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvMjc0YThhNmItNjQ1Yi0z NWFiLWJkY2EtZTc0NDFlYmRlZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh NmIxYzIwMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAge3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6klhd/Poch8kIIZStDsXO1I5K/pq2YjErIjlNUTA5r11QOZ55IENFf pGXsaBcVGktweT7U9FariUSdS0QU1KGAlRl6uaIN/cV2QNqnl9cQrt4s3fJ47Vqa 0vnE3CgSKK4tGLGYxxRWCIZr8QPaYOcpvfsfBJm8XSB5wRmIIJOBS2YwovFgowrC MlCPWduJjMtGViBPkM98V6tUCf50O2zl7nm6Zalox/B8v4dY5EdoUQMq1zFYcG6l 1z58RwL4iv2Txu8LkNV9vPwHfPJP6Ch2LdlZUZDUwWNHwnYEoF6n25p9QLnEd0vv /lLYQ0IdfT9Kpsje30Pd52Iu21rSi1I= -----END CERTIFICATE-----Generated at Wed Nov 5 10:49:10 2025 by rpki-client