$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa File: 2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa (raw, json) Hash identifier: pIzZBZHoGYVm4ok1MD1d+SKAeUnmg3AS2qZ3iXrV+iA= Subject key identifier: 83:61:45:C0:2B:66:C5:8A:97:30:3D:4E:6D:1A:B3:99:51:1B:EE:5F Certificate issuer: /CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Certificate serial: 010D0C9F4328584B99D784266A8D082EC92D3A00 Authority key identifier: AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 198949 IP address blocks: 128.220.0.0/16 maxlen: 24 192.12.13.0/24 maxlen: 24 192.12.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:84:26:6a:8d:08:2e:c9:2d:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=467f20ed-9a86-4681-b906-659e394f51b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:9b:fa:cf:3e:18:d6:fc:36:b0:73:64:b3: 4f:34:ec:e8:94:da:b6:10:2f:d6:ff:80:9d:1e:fc: 2b:cd:d8:dd:47:7a:82:a3:85:0f:aa:9a:b4:75:07: 3c:34:12:1a:ae:d5:0e:17:c2:8f:d5:cd:e8:53:35: 87:76:d7:e0:06:b3:50:88:8b:0a:69:9f:5f:d7:af: 1c:97:a2:9c:9c:6b:f9:1e:ff:11:d3:e9:b5:d9:54: 9e:d9:a5:53:f8:60:f7:fa:ab:85:b8:62:06:77:68: aa:d2:ce:aa:1e:62:59:ad:44:8f:cd:53:38:0a:16: fb:68:4f:71:8f:1b:f0:b2:6f:85:a3:e9:be:f1:c6: b0:35:61:c9:9c:1b:65:45:b8:6e:c2:85:de:6d:a2: 02:82:e7:d0:2e:75:61:83:a9:d2:5b:97:4a:07:e3: 1e:88:90:c1:c8:3e:69:8d:32:62:dd:e9:45:bb:4a: 1e:50:d0:5b:60:b3:a7:68:06:df:61:15:39:f4:47: b9:2d:e2:6d:86:05:e9:74:dc:35:38:e5:56:f3:28: bd:db:50:a2:b8:56:4f:88:12:ef:3d:31:7d:72:b1: 87:71:c2:c5:ee:3b:83:38:34:0e:0e:01:d9:53:6d: 30:76:d5:b8:3b:b5:9f:7f:e0:ef:89:4a:a3:2d:32: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:61:45:C0:2B:66:C5:8A:97:30:3D:4E:6D:1A:B3:99:51:1B:EE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl X509v3 Authority Key Identifier: keyid:AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer sbgp-ipAddrBlock: critical IPv4: 128.220.0.0/16 192.12.13.0-192.12.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:25:be:83:79:38:25:e0:9d:d1:5a:93:4e:3d:a6:4e:30:50: ef:12:6a:ea:a0:49:23:72:b8:91:ca:6c:03:6e:86:7a:c9:62: e4:35:5e:13:20:16:3b:bf:1d:e5:48:38:ef:e7:20:df:29:b3: 3d:fc:3b:5d:fa:3d:3a:b2:e2:1f:6b:44:2f:52:bf:8f:4d:36: 5e:38:73:52:5e:19:a1:92:ac:b1:9a:c2:9c:9f:e9:3c:1b:6c: 14:6a:f7:e3:9b:38:ab:0b:3a:1e:2e:80:a6:8a:2a:d6:8c:80: 25:48:69:c2:9d:bd:37:ec:36:9c:58:57:df:0a:fe:09:37:65: 35:76:31:5b:62:ef:77:d3:ce:90:86:25:66:50:7b:78:f1:7c: 7f:9f:9d:23:0c:e4:4b:26:43:6d:54:4f:e2:28:e2:b5:17:5a: fc:be:4a:d6:5f:12:a6:57:48:5f:d8:27:5e:4d:b8:19:3b:56: 68:91:17:1f:4c:99:62:e3:ae:a0:5b:45:20:81:92:b5:0e:8f: c9:da:67:cc:5d:78:dd:82:63:78:b7:f1:db:66:a7:8f:ce:8d: 32:df:7b:e0:4f:b3:24:a2:35:32:e0:01:12:0c:87:b5:51:7e: f7:0b:da:0d:ca:9f:a3:fd:63:8e:03:0d:f9:73:2a:5c:54:24: ad:52:f7:9a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ14Qmao0ILsktOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5NmY2NGYtNjUwNi00Zjk5LWE2ZWYtNWU4YTI2NGIy ODQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDY3ZjIwZWQtOWE4Ni00NjgxLWI5MDYtNjU5ZTM5NGY1MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCOb+s8+GNb8NrBzZLNPNOzolNq2EC/W/4Cd HvwrzdjdR3qCo4UPqpq0dQc8NBIartUOF8KP1c3oUzWHdtfgBrNQiIsKaZ9f168c l6KcnGv5Hv8R0+m12VSe2aVT+GD3+quFuGIGd2iq0s6qHmJZrUSPzVM4Chb7aE9x jxvwsm+Fo+m+8cawNWHJnBtlRbhuwoXebaICgufQLnVhg6nSW5dKB+MeiJDByD5p jTJi3elFu0oeUNBbYLOnaAbfYRU59Ee5LeJthgXpdNw1OOVW8yi921CiuFZPiBLv PTF9crGHccLF7juDODQODgHZU20wdtW4O7Wff+DviUqjLTLUVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFINhRcArZsWKlzA9Tm0as5lRG+5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2 ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThhMjY0YjI4NDUvMmRlNjllZDktMmFjZS0z YTdkLWExNzktZWM1NThkNjI0ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmM5NmY2NGYtNjUwNi00Zjk5LWE2 ZWYtNWU4YTI2NGIyODQ1LzJjOTZmNjRmLTY1MDYtNGY5OS1hNmVmLTVlOGEyNjRi Mjg0NS5jcmwwHwYDVR0jBBgwFoAUqib04Je2hcbOVS+jsmBjTVmqKQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThh MjY0YjI4NDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgNwwDAME AMAMDQMEAMAMDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+Jb6DeTgl4J3RWpNOPaZOMFDvEmrqoEkjcriR ymwDboZ6yWLkNV4TIBY7vx3lSDjv5yDfKbM9/Dtd+j06suIfa0QvUr+PTTZeOHNS XhmhkqyxmsKcn+k8G2wUavfjmzirCzoeLoCmiirWjIAlSGnCnb037DacWFffCv4J N2U1djFbYu93086QhiVmUHt48Xx/n50jDORLJkNtVE/iKOK1F1r8vkrWXxKmV0hf 2CdeTbgZO1ZokRcfTJli466gW0UggZK1Do/J2mfMXXjdgmN4t/HbZqePzo0y33vg T7MkojUy4AESDIe1UX73C9oNyp+j/WOOAw35cypcVCStUvea -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:09 2025 by rpki-client