$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa File: 7dab8bae-4738-3508-81b7-a25749bccb14.roa (raw, json) Hash identifier: DhBuhy7PiacLm1IIYy1mA4vUYbiJMEHEi0GveeNlncQ= Subject key identifier: 8F:BA:E8:6C:04:35:B3:A4:EF:75:D5:B1:22:3C:AE:01:1A:70:66:6C Certificate issuer: /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Certificate serial: 010D0C9F4328584B99D78C9D303CB5C48614BFDC Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 5723 IP address blocks: 162.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8c:9d:30:3c:b5:c4:86:14:bf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=df7d62ed-bb01-4f55-b28a-5085c068b284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:42:f5:94:44:02:9a:5f:71:fc:25:49:b7: 47:90:ac:35:5e:b8:86:cc:d2:cd:f8:11:4e:37:cb: 75:a9:e8:cc:49:91:5f:2c:47:67:b9:4e:1e:b8:27: 00:b1:4e:87:19:0a:d3:6f:56:e0:62:bd:0c:36:08: 0f:67:3f:09:fa:02:9a:ac:50:07:fa:75:0e:78:f2: dd:31:70:0e:4d:97:13:88:bd:9d:a4:d6:c6:18:96: bb:23:c3:da:74:dc:f9:61:b4:88:1a:3c:6e:d6:ef: 9c:5d:72:7f:74:6d:16:9f:69:57:96:80:94:99:97: 6e:47:d9:dc:e4:be:87:56:de:68:8b:02:15:da:4a: db:2f:5f:d4:5f:83:d4:78:34:88:a8:86:44:8a:dc: ec:46:3c:97:94:98:b7:cf:f0:a7:eb:ef:46:43:33: 00:db:b7:78:c3:d3:65:a1:07:09:fe:b1:7f:a0:0a: 89:69:3f:e4:4b:40:ea:04:78:29:af:d8:c1:63:90: b4:df:d0:6c:58:fe:64:50:f4:ac:46:a7:ec:b2:f9: 4f:31:11:ff:96:14:50:62:4a:86:68:a4:80:70:89: 6f:37:21:65:bd:f0:d0:07:55:5f:4d:c3:b7:49:8d: e8:e2:65:af:75:9b:f0:a3:f1:55:e1:46:89:31:21: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BA:E8:6C:04:35:B3:A4:EF:75:D5:B1:22:3C:AE:01:1A:70:66:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl X509v3 Authority Key Identifier: keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer sbgp-ipAddrBlock: critical IPv4: 162.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:37:47:f9:4a:ce:45:09:73:9a:ef:f5:a0:ae:23:54:22:9b: 88:8d:5e:87:28:78:50:9c:3e:7c:a0:a3:ef:01:97:62:89:9d: 9b:2f:4b:32:98:8b:27:33:f0:ee:3d:83:d9:40:4b:17:cb:72: 9f:18:87:95:ce:27:77:13:63:52:70:c8:18:97:47:9a:b8:4c: 83:c6:39:82:5b:cc:91:2f:a0:0e:31:e3:fe:15:d3:dd:d7:83: 5f:0a:31:72:4f:74:f3:36:58:f9:fd:14:ed:33:33:be:a4:e0: a0:bc:ee:2c:2d:99:c0:e8:b7:4f:e9:b5:e0:e7:57:e6:77:89: 78:d7:d9:8f:66:9a:83:be:4d:6a:c5:53:e0:06:f0:b4:7c:22: d8:18:7d:c1:a1:9b:09:b5:44:cc:9a:f4:47:95:9e:80:ef:93: 99:f1:9e:41:54:f8:c2:26:62:8f:29:ff:e4:4c:9a:93:e6:ec: 4f:bc:50:22:8e:fc:c2:c5:2e:ad:a5:7c:98:cc:1b:1b:50:b0: 44:8e:75:b1:d6:e0:7b:01:f4:7b:93:c1:7c:0a:d9:ad:df:78: 15:a0:b5:01:cf:44:b8:d8:6e:fa:e3:30:11:20:65:1e:96:75: c1:08:2a:c4:e9:6d:de:31:36:47:ad:14:ed:ee:8b:85:93:dc: f4:f9:48:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuZ14ydMDy1xIYUv9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky ZjIwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGY3ZDYyZWQtYmIwMS00ZjU1LWIyOGEtNTA4NWMwNjhiMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXNC9ZREAppfcfwlSbdHkKw1XriGzNLN+BFO N8t1qejMSZFfLEdnuU4euCcAsU6HGQrTb1bgYr0MNggPZz8J+gKarFAH+nUOePLd MXAOTZcTiL2dpNbGGJa7I8PadNz5YbSIGjxu1u+cXXJ/dG0Wn2lXloCUmZduR9nc 5L6HVt5oiwIV2krbL1/UX4PUeDSIqIZEitzsRjyXlJi3z/Cn6+9GQzMA27d4w9Nl oQcJ/rF/oAqJaT/kS0DqBHgpr9jBY5C039BsWP5kUPSsRqfssvlPMRH/lhRQYkqG aKSAcIlvNyFlvfDQB1VfTcO3SY3o4mWvdZvwo/FV4UaJMSGSUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI+66GwENbOk73XVsSI8rgEacGZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvN2RhYjhiYWUtNDczOC0z NTA4LTgxYjctYTI1NzQ5YmNjYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5 MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3 MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlTdH+UrORQlzmu/1oK4jVCKbiI1ehyh4UJw+fKCj7wGXYomdmy9LMpiL JzPw7j2D2UBLF8tynxiHlc4ndxNjUnDIGJdHmrhMg8Y5glvMkS+gDjHj/hXT3deD Xwoxck908zZY+f0U7TMzvqTgoLzuLC2ZwOi3T+m14OdX5neJeNfZj2aag75NasVT 4AbwtHwi2Bh9waGbCbVEzJr0R5WegO+TmfGeQVT4wiZijyn/5Eyak+bsT7xQIo78 wsUuraV8mMwbG1CwRI51sdbgewH0e5PBfArZrd94FaC1Ac9EuNhu+uMwESBlHpZ1 wQgqxOlt3jE2R60U7e6LhZPc9PlIeA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:30 2025 by rpki-client