$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: RZFEW8W3aKbZQMVMhWvc6atJ3MgXZu/GfzfxhQ99bU8= Subject key identifier: 8E:A0:DE:7F:2E:FE:1B:06:11:37:22:49:65:B9:0E:F2:0D:EA:BE:A0 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584BB88D0C019706D484A5FFF880 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0c:01:97:06:d4:84:a5:ff:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ad6a1368-a951-4f8d-8f35-dd97a8d797ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:73:42:4c:05:42:82:a0:ee:d8:d6:88:21: 38:cb:25:60:48:8a:14:77:4b:79:d4:7a:63:ea:b7: 83:4b:5c:48:d9:17:ef:4c:75:58:6a:83:a0:b1:dd: 96:55:ff:f3:10:6b:51:3b:47:8b:be:53:8f:ce:cf: ba:45:e1:55:f6:49:1f:07:07:4f:61:96:fa:87:ea: 1e:ba:81:ef:42:fc:24:52:44:02:cd:28:ee:b3:c7: 81:2f:01:f6:0d:2d:ca:65:4c:89:1c:5c:22:72:0e: 38:ce:e5:09:d9:3b:a3:46:fd:8c:5e:58:e6:a9:f8: c1:25:9c:4f:2c:71:b3:50:46:1e:a9:91:c9:dd:89: 8f:00:82:fd:d8:03:f2:db:c1:a6:83:96:0a:b4:b5: 03:fd:81:4b:9c:df:4e:a3:00:4b:d9:d3:4f:d2:5a: c5:77:b7:f1:b6:e7:8d:06:ca:0a:68:d8:ad:67:a0: 47:06:ba:96:1d:9f:95:60:35:cc:a8:5c:c0:70:bb: 0e:e6:14:ac:12:f8:56:2e:a9:9b:9f:4d:19:93:f5: b1:fc:1a:44:2c:d9:4c:26:28:6a:c2:10:a7:43:18: bf:95:40:dc:21:b0:be:cb:4f:84:9a:c8:cc:ad:91: c7:12:90:89:d5:c2:33:cc:24:48:5e:9b:12:33:b6: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:DE:7F:2E:FE:1B:06:11:37:22:49:65:B9:0E:F2:0D:EA:BE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:63:77:b9:b7:e7:75:cf:6f:6b:4d:dd:cc:6c:59:f9:4c:34: 84:63:ce:f9:76:27:96:8a:67:12:3c:1d:91:22:3a:33:2b:06: f5:f9:a4:ca:35:1e:cc:2f:c4:ad:bc:49:46:52:e4:54:b1:bf: f0:90:5d:e9:c3:ad:a3:f3:00:b8:2a:4c:cd:e7:d2:1a:7a:3d: 62:cb:db:2b:1a:2b:bb:c2:30:88:72:4a:38:94:a6:51:24:36: 39:35:10:87:40:6e:b8:03:d0:9a:8d:77:81:5e:79:63:1d:50: e7:4e:bb:03:50:bf:96:0b:b8:a5:61:38:51:45:64:ba:10:bf: 6e:2f:2b:ef:82:64:db:26:65:b6:aa:93:28:34:dc:63:c9:95: d3:d2:5f:fb:8e:12:a7:c3:23:9f:b8:0b:3f:0c:4b:95:1b:ea: 68:e4:94:56:c6:af:06:f2:75:6c:5f:f4:c6:00:8e:b3:f2:63: 73:98:f5:69:8d:6e:f4:c3:0c:b0:d7:b1:78:2b:f0:40:db:91: 56:99:ee:f1:f5:88:a2:e4:58:20:91:5c:d8:18:30:91:44:19: 7b:ef:9f:2b:60:8d:64:e7:9f:51:3b:06:db:5c:e7:bc:2b:ab: a2:03:76:2c:83:78:d1:3e:33:4c:b4:71:41:ce:e8:4e:48:97: 12:3d:a7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQwBlwbUhKX/+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWQ2YTEzNjgtYTk1MS00ZjhkLThmMzUtZGQ5N2E4ZDc5N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBlzQkwFQoKg7tjWiCE4yyVgSIoUd0t51Hpj 6reDS1xI2RfvTHVYaoOgsd2WVf/zEGtRO0eLvlOPzs+6ReFV9kkfBwdPYZb6h+oe uoHvQvwkUkQCzSjus8eBLwH2DS3KZUyJHFwicg44zuUJ2TujRv2MXljmqfjBJZxP LHGzUEYeqZHJ3YmPAIL92APy28Gmg5YKtLUD/YFLnN9OowBL2dNP0lrFd7fxtueN BsoKaNitZ6BHBrqWHZ+VYDXMqFzAcLsO5hSsEvhWLqmbn00Zk/Wx/BpELNlMJihq whCnQxi/lUDcIbC+y0+EmsjMrZHHEpCJ1cIzzCRIXpsSM7bFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6g3n8u/hsGETciSWW5DvIN6r6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJjd7m353XPb2tN3cxsWflMNIRjzvl2J5aKZxI8HZEiOjMrBvX5pMo1 HswvxK28SUZS5FSxv/CQXenDraPzALgqTM3n0hp6PWLL2ysaK7vCMIhySjiUplEk Njk1EIdAbrgD0JqNd4FeeWMdUOdOuwNQv5YLuKVhOFFFZLoQv24vK++CZNsmZbaq kyg03GPJldPSX/uOEqfDI5+4Cz8MS5Ub6mjklFbGrwbydWxf9MYAjrPyY3OY9WmN bvTDDLDXsXgr8EDbkVaZ7vH1iKLkWCCRXNgYMJFEGXvvnytgjWTnn1E7Bttc57wr q6IDdiyDeNE+M0y0cUHO6E5IlxI9p9c= -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:16 2025 by rpki-client