$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa File: 7da0bbf2-854f-312a-a5ff-6ab760be9635.roa (raw, json) Hash identifier: MRhvs1X2fxIMm+iwEQYJJFVXyymv86yKm0KaQQhgEJU= Subject key identifier: 21:ED:59:37:8E:AF:58:FD:86:5E:D0:DC:C5:30:7B:0C:C5:65:C5:17 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B41E70E0CFA8E7271BA1B8900 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 25649 IP address blocks: 129.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0e:0c:fa:8e:72:71:ba:1b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=8c45e8ce-0dce-40c7-88f4-dae74fbbcac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:e0:33:34:13:81:84:e0:c9:75:1a:5b:a4: 16:7d:61:51:98:04:76:2c:b7:b7:9a:d2:91:51:73: 2d:c7:53:1b:83:20:ed:e9:d3:b0:e7:98:89:84:78: 4b:5a:f9:24:61:ca:3f:7b:8f:2c:17:7c:37:3a:dd: 27:a2:41:c7:f0:b3:0f:cb:e2:10:61:20:3e:a0:83: 8a:a5:db:2d:f6:46:13:a5:29:bf:f4:3d:97:c4:4b: 0c:90:f7:54:e1:b5:23:bd:2f:44:da:ec:63:4a:09: ed:99:b1:41:7c:68:74:36:71:b9:a7:0e:aa:9b:9c: ea:52:0d:3a:21:82:53:21:0d:09:57:32:1d:30:c8: 7f:b0:e2:39:23:1a:cc:92:86:49:28:fa:ec:8b:dc: 79:77:04:f7:42:03:39:fc:c3:9a:98:42:1f:8b:49: 1d:22:62:bd:a7:69:b2:6a:e0:d6:8e:0e:95:d5:2b: 2d:17:f3:34:22:e9:1d:6c:55:4e:89:52:43:a8:cc: 9f:21:80:4e:75:3a:93:b0:48:cd:aa:49:d6:8e:ee: 44:41:cb:da:25:7b:05:07:2b:ef:82:f7:7e:ab:2d: e3:a3:1b:c3:f5:0b:5a:2c:ed:d9:b5:ed:4d:bf:46: 12:e7:9a:63:4b:0c:44:ce:a3:53:9e:2d:09:8f:ea: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:59:37:8E:AF:58:FD:86:5E:D0:DC:C5:30:7B:0C:C5:65:C5:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 129.220.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a2:dd:5d:db:84:c9:b7:79:7f:2c:17:b9:c3:c5:2d:e0:9e: 8d:84:e8:3d:bc:e8:ae:32:a4:18:20:a4:23:4b:fe:03:0b:75: df:0f:d6:24:7c:f3:0b:1c:28:ae:21:a4:5a:f9:b5:bb:cc:a4: c9:da:61:88:2a:84:1e:ef:f4:64:b0:5c:bb:5b:cf:65:d8:91: ef:81:a7:d2:dc:6a:f3:aa:07:14:b7:74:91:5f:0d:3d:cf:ef: 28:98:48:25:ed:ae:ee:6a:de:0a:3b:18:f9:f3:f0:be:b1:f9: 01:cf:9e:aa:4b:4c:51:fd:c1:0c:ef:6e:37:99:4a:9f:64:26: 9e:7a:20:59:77:ab:3e:08:63:a7:87:ae:5b:d5:ba:7f:ee:71: 52:50:71:66:55:dc:65:1b:d2:5b:a6:26:e8:2e:cd:c8:dd:34: 65:9c:3e:50:f8:12:8f:3d:eb:be:67:a3:56:5a:4a:bc:29:be: f5:78:6b:7e:4d:47:ba:d0:87:88:0f:40:5b:64:2d:1c:6b:fc: 23:1c:82:88:f5:4b:b4:10:5e:d6:94:34:49:97:3e:06:f0:2f: aa:95:47:57:05:8a:ae:15:a1:01:f1:f3:4a:0d:6a:9e:ac:1d: 01:63:34:ac:d5:fe:eb:b5:32:e5:34:e8:ef:7a:ad:44:74:48: 26:64:10:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5w4M+o5ycbobiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OGM0NWU4Y2UtMGRjZS00MGM3LTg4ZjQtZGFlNzRmYmJjYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTfgMzQTgYTgyXUaW6QWfWFRmAR2LLe3mtKR UXMtx1MbgyDt6dOw55iJhHhLWvkkYco/e48sF3w3Ot0nokHH8LMPy+IQYSA+oIOK pdst9kYTpSm/9D2XxEsMkPdU4bUjvS9E2uxjSgntmbFBfGh0NnG5pw6qm5zqUg06 IYJTIQ0JVzIdMMh/sOI5IxrMkoZJKPrsi9x5dwT3QgM5/MOamEIfi0kdImK9p2my auDWjg6V1SstF/M0IukdbFVOiVJDqMyfIYBOdTqTsEjNqknWju5EQcvaJXsFByvv gvd+qy3joxvD9QtaLO3Zte1Nv0YS55pjSwxEzqNTni0Jj+rQdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHtWTeOr1j9hl7Q3MUwewzFZcUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvN2RhMGJiZjItODU0Zi0z MTJhLWE1ZmYtNmFiNzYwYmU5NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgdzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqi3V3bhMm3eX8sF7nDxS3gno2E6D286K4ypBggpCNL/gMLdd8P1iR8 8wscKK4hpFr5tbvMpMnaYYgqhB7v9GSwXLtbz2XYke+Bp9LcavOqBxS3dJFfDT3P 7yiYSCXtru5q3go7GPnz8L6x+QHPnqpLTFH9wQzvbjeZSp9kJp56IFl3qz4IY6eH rlvVun/ucVJQcWZV3GUb0lumJuguzcjdNGWcPlD4Eo89675no1ZaSrwpvvV4a35N R7rQh4gPQFtkLRxr/CMcgoj1S7QQXtaUNEmXPgbwL6qVR1cFiq4VoQHx80oNap6s HQFjNKzV/uu1MuU06O96rUR0SCZkEME= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:48 2025 by rpki-client