$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa File: b47f4a91-d1d5-37c8-b661-b064d98eb393.roa (raw, json) Hash identifier: 3zbJRLvUA1ZQk89+rDxPwea1i9UsPAJirZSKPkk07/Q= Subject key identifier: 39:AD:BF:0A:E8:85:2A:C5:8F:26:AA:8E:B7:12:3F:75:BF:1F:A1:E7 Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Certificate serial: 010D0C9F4328584B99D77F9FF8F496BE64A63880 Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 135.84.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:7f:9f:f8:f4:96:be:64:a6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d3867fc9-bccc-42db-8af6-f0339aa672d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:77:79:0c:9d:bf:f5:5a:8f:59:a5:a5:7a: 5b:58:bd:7e:ff:01:5e:cd:5b:3d:83:12:53:ca:85: ee:9e:ea:58:48:d6:31:b4:b3:ac:f1:a4:c9:51:11: 80:6d:08:d8:cc:a3:f0:23:9a:fe:e1:e3:d0:35:bc: 24:75:b2:db:fd:3c:6b:05:fe:c8:35:3a:d6:b0:61: 96:d4:9a:41:2d:a9:21:f5:53:72:b8:9e:13:26:ad: cb:b0:53:7e:65:c4:ef:a9:18:09:b9:18:c1:9a:39: 18:24:e0:95:2b:22:45:81:94:21:79:62:23:b0:c3: bf:84:f0:4e:27:e6:39:c9:30:60:23:8e:b9:03:0e: 09:93:9e:13:0b:93:34:91:f4:9c:3a:56:67:d7:44: d9:c5:bf:fa:4c:10:4a:58:3b:4d:4f:18:66:82:a2: 2f:d0:98:a7:c5:f5:8c:d7:ed:b8:9d:eb:de:b1:90: 95:fc:30:f2:bd:9d:0a:56:f4:ed:66:53:d3:8c:62: 95:08:eb:40:81:0b:1a:62:1a:6e:fb:f5:e4:36:55: 4d:8c:97:82:26:12:a6:ba:84:3c:9e:41:99:ed:91: 95:1d:5b:75:f8:30:e9:bf:3c:42:ab:9f:90:a2:77: e1:a8:cf:c2:f0:56:c1:e8:cb:e0:4e:1d:78:ce:f3: 9a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:BF:0A:E8:85:2A:C5:8F:26:AA:8E:B7:12:3F:75:BF:1F:A1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl X509v3 Authority Key Identifier: keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer sbgp-ipAddrBlock: critical IPv4: 135.84.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4a:b8:76:f3:e8:7e:2e:27:62:65:7a:72:3f:6c:a4:f2:39: 7a:13:5c:a1:4f:c7:08:34:82:fd:53:cf:9a:06:ee:26:cb:5a: 4e:ee:e9:91:d6:30:3e:f6:39:ac:ff:85:59:05:0a:fc:eb:98: 7e:17:27:ad:39:75:79:52:4a:ed:c0:92:35:4d:c3:82:3f:d6: 9e:ca:0a:67:03:8c:20:ae:f7:07:81:92:65:49:94:62:e6:ee: 93:37:ad:d3:8b:05:62:42:f8:27:6f:c1:78:a4:f9:cc:ff:8b: a6:f9:fc:4e:b7:b3:a9:c8:5e:fd:26:e1:47:cb:df:da:21:2f: 1a:3e:b6:14:38:4b:f9:a9:a5:b1:20:24:e1:55:d3:20:00:e3: ea:6b:d4:8a:86:1b:46:78:0f:37:f7:11:32:26:33:6f:1a:56: 04:8f:9e:5f:a3:6b:67:6f:57:7c:33:55:b1:4b:a4:85:f5:0a: 93:15:2c:a6:df:14:dc:32:17:18:e9:61:94:ad:7d:ac:1e:df: 73:68:c2:ef:2a:f7:a3:58:69:db:3e:e2:61:db:39:ea:08:4d: 13:1a:dc:2d:9b:b6:47:12:32:30:8e:fd:82:9a:d2:8a:2e:56: 2d:a1:d0:09:da:34:c9:36:42:bb:92:54:95:6a:64:b7:09:e8: 9c:ac:e8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13+f+PSWvmSmOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5 ZTlhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDM4NjdmYzktYmNjYy00MmRiLThhZjYtZjAzMzlhYTY3MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hR3eQydv/Vaj1mlpXpbWL1+/wFezVs9gxJT yoXunupYSNYxtLOs8aTJURGAbQjYzKPwI5r+4ePQNbwkdbLb/TxrBf7INTrWsGGW 1JpBLakh9VNyuJ4TJq3LsFN+ZcTvqRgJuRjBmjkYJOCVKyJFgZQheWIjsMO/hPBO J+Y5yTBgI465Aw4Jk54TC5M0kfScOlZn10TZxb/6TBBKWDtNTxhmgqIv0JinxfWM 1+24nevesZCV/DDyvZ0KVvTtZlPTjGKVCOtAgQsaYhpu+/XkNlVNjJeCJhKmuoQ8 nkGZ7ZGVHVt1+DDpvzxCq5+QonfhqM/C8FbB6MvgTh14zvOaiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmtvwrohSrFjyaqjrcSP3W/H6HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvYjQ3ZjRhOTEtZDFkNS0z N2M4LWI2NjEtYjA2NGQ5OGViMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh1R8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJKuHbz6H4uJ2JlenI/bKTyOXoTXKFPxwg0gv1Tz5oG7ibLWk7u6ZHW MD72Oaz/hVkFCvzrmH4XJ605dXlSSu3AkjVNw4I/1p7KCmcDjCCu9weBkmVJlGLm 7pM3rdOLBWJC+CdvwXik+cz/i6b5/E63s6nIXv0m4UfL39ohLxo+thQ4S/mppbEg JOFV0yAA4+pr1IqGG0Z4Dzf3ETImM28aVgSPnl+ja2dvV3wzVbFLpIX1CpMVLKbf FNwyFxjpYZStfawe33Nowu8q96NYads+4mHbOeoITRMa3C2btkcSMjCO/YKa0oou Vi2h0AnaNMk2QruSVJVqZLcJ6Jys6Gs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:22 2025 by rpki-client