$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa File: b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa (raw, json) Hash identifier: aOuaxPbMjlULXvf0hv0JhC/AH6PPuOj/OYpqH3b4gO0= Subject key identifier: 30:C3:5C:0C:F4:D0:0D:F0:7D:1F:3D:9D:E4:3C:7E:A8:5D:DC:5B:FB Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584BBFA5915EA3A9A029D6B4E2E0 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 397865 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:91:5e:a3:a9:a0:29:d6:b4:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=761d26f7-19fc-4375-815a-4a34e7185cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d1:14:45:b7:cb:fd:20:c2:2a:6e:54:a5:e2: 8d:83:ca:df:d5:8f:d3:cd:54:70:53:04:3d:2e:80: 93:22:f7:f3:18:49:d8:46:43:1f:9b:c2:90:7e:60: 05:63:76:40:0d:6a:2d:9f:84:74:c7:e2:46:0a:eb: 3f:65:29:09:b9:58:90:dc:31:77:db:34:96:63:0c: b0:9a:c8:31:7a:07:ff:2e:9d:bc:c8:7d:5c:fb:8e: 5c:9b:d7:87:49:d3:78:19:ab:b1:c8:a5:6a:ea:6a: 84:e0:86:6f:bc:c3:6f:e6:16:82:ea:9d:b2:c1:da: d7:81:2c:07:ef:54:f5:ec:b9:a8:01:61:d2:3d:cc: 7e:37:4f:43:3a:1b:9a:ee:6c:c1:0b:20:b5:d4:b4: 38:6b:38:d7:49:6d:8b:38:81:71:d0:eb:2b:d9:27: bf:27:bd:82:7e:5d:3e:eb:7a:8e:c4:bc:7f:c7:d1: cf:c2:35:28:f3:2c:dd:07:d7:e2:7b:09:f7:e7:69: bd:e3:66:9d:25:e8:0d:16:0f:b1:bf:fc:9a:8a:55: ea:69:b9:95:58:cb:5a:59:d7:73:ec:06:f5:08:9f: 79:9e:52:39:16:73:49:14:40:0c:a9:08:e9:41:d9: 6e:e3:bc:db:b6:a8:16:4d:6f:e5:44:60:10:d7:48: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:5C:0C:F4:D0:0D:F0:7D:1F:3D:9D:E4:3C:7E:A8:5D:DC:5B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b255f4ee-0d21-3aa5-b8b2-270d6299253b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:bb:f1:56:6c:41:90:34:da:df:35:8e:8d:b3:02:da:c5:de: dc:54:81:9d:94:7e:2a:22:c6:8e:4e:b7:d5:b7:4d:5c:40:71: 25:60:65:30:93:6a:5e:0f:13:1e:91:8d:ae:10:f0:6f:2f:3d: 13:a9:4c:21:64:e5:26:0f:7a:d3:fa:b7:b1:ef:15:1a:c1:7b: 8a:b9:fa:82:b2:04:a2:10:98:77:ce:5f:ca:a1:ab:f1:9a:60: 21:29:ed:e0:e0:23:8d:1a:f5:d3:4c:ca:bb:6f:a3:a2:22:1a: 23:47:bb:70:f8:8e:a3:74:a1:cf:5f:e8:46:36:f1:a0:c8:7a: 9d:b3:61:09:94:2a:7e:0f:00:63:51:0c:fc:e8:d4:82:72:eb: 9b:b8:fa:6b:fd:54:dc:78:43:44:8d:c9:68:33:c3:b7:b6:84: 92:81:23:8c:0e:8b:98:18:e0:40:f7:35:39:5d:5a:ce:7e:1d: 02:6e:10:dc:c6:c2:8c:7e:b9:2f:e9:67:02:f2:fb:38:16:94: 9a:e7:76:8e:f5:6e:83:01:92:01:18:fe:94:21:b0:9b:91:5c: 40:25:b2:6d:3b:69:4c:16:a8:af:91:47:95:fa:11:73:48:f5: a7:8e:ff:ae:8a:53:09:ee:b0:54:ee:21:3c:02:b5:e6:72:70: ad:a4:f7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZFeo6mgKda04uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NzYxZDI2ZjctMTlmYy00Mzc1LTgxNWEtNGEzNGU3MTg1Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNEURbfL/SDCKm5UpeKNg8rf1Y/TzVRwUwQ9 LoCTIvfzGEnYRkMfm8KQfmAFY3ZADWotn4R0x+JGCus/ZSkJuViQ3DF32zSWYwyw msgxegf/Lp28yH1c+45cm9eHSdN4GauxyKVq6mqE4IZvvMNv5haC6p2ywdrXgSwH 71T17LmoAWHSPcx+N09DOhua7mzBCyC11LQ4azjXSW2LOIFx0Osr2Se/J72Cfl0+ 63qOxLx/x9HPwjUo8yzdB9fiewn352m942adJegNFg+xv/yailXqabmVWMtaWddz 7Ab1CJ95nlI5FnNJFEAMqQjpQdlu47zbtqgWTW/lRGAQ10gV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDDXAz00A3wfR89neQ8fqhd3Fv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvYjI1NWY0ZWUtMGQyMS0z YWE1LWI4YjItMjcwZDYyOTkyNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm78VZsQZA02t81jo2zAtrF3txUgZ2Ufioixo5Ot9W3TVxAcSVgZTCT al4PEx6Rja4Q8G8vPROpTCFk5SYPetP6t7HvFRrBe4q5+oKyBKIQmHfOX8qhq/Ga YCEp7eDgI40a9dNMyrtvo6IiGiNHu3D4jqN0oc9f6EY28aDIep2zYQmUKn4PAGNR DPzo1IJy65u4+mv9VNx4Q0SNyWgzw7e2hJKBI4wOi5gY4ED3NTldWs5+HQJuENzG wox+uS/pZwLy+zgWlJrndo71boMBkgEY/pQhsJuRXEAlsm07aUwWqK+RR5X6EXNI 9aeO/66KUwnusFTuITwCteZycK2k90M= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:28 2025 by rpki-client