$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa File: 53190931-ea19-32bf-a915-8c6173b1fb90.roa (raw, json) Hash identifier: UCvrx5yrE++re4lK9qaCpw7oIMd+zRof3HVWeVfGeAs= Subject key identifier: 71:87:95:19:3C:8E:B5:5E:B9:F2:AE:C7:A9:B9:85:CB:B3:8F:82:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80BB9D8BDE7198980BB00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 129.44.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0b:b9:d8:bd:e7:19:89:80:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3eaecb82-bdf7-4ae4-86a5-5e14f4325102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:98:10:3d:46:be:dc:72:28:33:ba:5a:e3: 57:c6:0d:d1:df:26:1c:a5:7b:a0:ac:36:1e:a1:62: 65:ad:31:c6:da:6f:d4:0a:54:b9:26:61:54:aa:6d: 79:b0:62:94:80:05:f3:ac:34:6e:36:40:70:cc:ba: 3a:5b:df:e6:13:72:2c:a0:1b:66:e8:b7:e2:05:f4: d2:7c:44:9b:68:f3:a4:ce:3a:0b:c6:9c:e4:d0:4f: 6e:17:1d:96:f9:77:ba:52:37:78:af:b1:0c:25:43: 80:5b:24:30:59:3a:de:c0:13:86:2e:5c:0c:2f:d5: b6:7e:d5:15:01:35:62:03:e0:d1:24:56:5d:5b:30: 06:fe:be:ca:11:be:c9:f7:64:7f:eb:0a:22:d9:c8: 28:65:15:5e:9f:23:93:49:29:3d:bc:88:33:65:53: 24:eb:d4:f1:0e:02:b4:45:04:af:9a:bd:7f:35:af: 3f:47:ee:be:e7:55:b9:03:89:dd:32:0c:06:ce:4d: f3:a8:5b:5f:9d:53:3b:bc:17:3e:73:51:8f:f1:aa: 72:bb:14:d3:9b:54:1e:31:6c:f4:b5:76:b0:36:ac: cd:f8:84:6e:42:98:bb:03:27:19:43:b9:86:69:30: 77:40:41:a0:f4:3f:07:31:01:e3:0a:2a:2a:c7:24: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:95:19:3C:8E:B5:5E:B9:F2:AE:C7:A9:B9:85:CB:B3:8F:82:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 129.44.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:e8:14:d9:8c:8f:44:32:c7:c6:0e:06:4b:c6:8c:46:b8: 59:6b:a7:38:fa:bc:25:ae:09:38:b3:bf:2c:04:a3:20:cf:0a: 0b:c5:cf:fe:85:e4:d0:10:80:22:be:df:cd:6f:f7:20:54:37: 01:f3:12:5b:be:1f:4a:05:0d:1e:fc:f9:8a:9c:ce:a1:20:2f: c4:30:b6:03:8c:87:49:13:c2:5a:ed:c9:c1:85:cf:2e:a8:15: a0:4e:65:dc:ae:af:50:5f:a3:dd:9f:8a:ec:65:88:96:ad:13: e1:6f:65:63:77:44:e3:bb:1b:59:21:a7:18:f9:3f:ae:00:35: 5d:cf:dd:ef:df:85:a7:9c:4a:ab:71:af:fd:1d:f6:6f:e2:b2: 7c:c1:49:45:28:3e:fa:23:99:c4:90:37:d4:9d:9d:58:49:d9: 68:fd:38:e2:4a:97:eb:db:b4:4c:fd:14:6f:a9:a1:ed:67:d5: 63:de:00:f5:84:30:9d:b5:fc:24:0d:1b:54:79:e9:bc:83:44: b0:e2:4d:54:b9:4d:72:3a:d1:6a:ee:93:47:45:f1:97:ba:35: 09:95:10:35:06:03:c8:b9:c8:42:e2:84:f3:3a:f5:53:43:99: b8:e5:70:11:39:c5:48:9a:f8:c6:2a:43:89:f7:56:ea:0d:d2: ff:19:8c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+Au52L3nGYmAuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2VhZWNiODItYmRmNy00YWU0LTg2YTUtNWUxNGY0MzI1MTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqWYED1GvtxyKDO6WuNXxg3R3yYcpXugrDYe oWJlrTHG2m/UClS5JmFUqm15sGKUgAXzrDRuNkBwzLo6W9/mE3IsoBtm6LfiBfTS fESbaPOkzjoLxpzk0E9uFx2W+Xe6Ujd4r7EMJUOAWyQwWTrewBOGLlwML9W2ftUV ATViA+DRJFZdWzAG/r7KEb7J92R/6woi2cgoZRVenyOTSSk9vIgzZVMk69TxDgK0 RQSvmr1/Na8/R+6+51W5A4ndMgwGzk3zqFtfnVM7vBc+c1GP8apyuxTTm1QeMWz0 tXawNqzN+IRuQpi7AycZQ7mGaTB3QEGg9D8HMQHjCioqxyRKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGHlRk8jrVeufKux6m5hcuzj4IAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTMxOTA5MzEtZWExOS0z MmJmLWE5MTUtOGM2MTczYjFmYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm06BTZjI9EMsfGDgZLxoxGuFlrpzj6vCWuCTizvywEoyDPCgvFz/6F 5NAQgCK+381v9yBUNwHzElu+H0oFDR78+YqczqEgL8QwtgOMh0kTwlrtycGFzy6o FaBOZdyur1Bfo92fiuxliJatE+FvZWN3ROO7G1khpxj5P64ANV3P3e/fhaecSqtx r/0d9m/isnzBSUUoPvojmcSQN9SdnVhJ2Wj9OOJKl+vbtEz9FG+poe1n1WPeAPWE MJ21/CQNG1R56byDRLDiTVS5TXI60Wruk0dF8Ze6NQmVEDUGA8i5yELihPM69VND mbjlcBE5xUia+MYqQ4n3VuoN0v8ZjLI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:46 2025 by rpki-client