$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa File: 6c12fbd0-094c-338c-9772-809d7e4a7e15.roa (raw, json) Hash identifier: jACtzNc5thd/aWAa0FOKqx03gVqQhLoN2aWAYhL04cg= Subject key identifier: 94:D5:59:9D:63:73:2F:C0:93:49:AB:6D:3A:CE:28:67:D6:CC:92:4E Certificate issuer: /CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Certificate serial: 010D0C9F4328584B99D78C86F67C4FF688427680 Authority key identifier: AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 5723 IP address blocks: 128.220.0.0/16 maxlen: 24 192.12.13.0/24 maxlen: 24 192.12.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8c:86:f6:7c:4f:f6:88:42:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=2bfca828-36d9-45c3-b95f-16c03309eca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:0a:99:d5:92:2e:b4:85:40:18:74:82:b4: 10:fa:4f:d4:40:63:70:9d:68:69:5c:93:df:12:eb: de:9a:94:24:f4:ba:78:56:cf:2e:2f:4d:79:17:9b: 5a:ed:4c:c2:4c:8d:18:4a:72:66:db:c4:55:90:2c: f1:44:0e:24:8e:db:23:10:ef:6d:48:83:d3:e6:93: 5e:f9:53:dd:8b:36:62:f9:77:82:56:9d:a4:a4:56: 1f:c1:29:df:2f:57:23:ab:ff:1d:af:04:d7:86:52: 53:de:df:6c:22:e6:0e:e3:22:89:5a:7d:31:e9:fe: 41:59:32:b7:70:c4:33:11:99:bd:c5:aa:72:2e:bd: a0:1d:34:c0:3f:c2:59:37:fa:d9:b4:73:75:9f:e2: af:1c:8a:01:95:6d:17:0a:49:a0:6f:53:17:ef:b2: 26:00:8b:29:5c:a8:03:37:e4:c6:b9:a5:1f:43:ef: 5f:2f:74:2d:4e:e6:da:d5:fc:e8:6f:e7:b6:c6:60: a1:6a:40:00:1e:e5:36:6c:73:83:df:98:ce:17:b3: 84:60:3f:88:2a:e6:84:89:00:f5:bf:69:e8:f5:99: 1c:a8:a0:5b:09:7d:58:9c:5f:52:8a:ad:38:76:11: 34:a9:53:51:e0:1d:c8:0c:f4:16:cc:43:f7:2a:32: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:59:9D:63:73:2F:C0:93:49:AB:6D:3A:CE:28:67:D6:CC:92:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl X509v3 Authority Key Identifier: keyid:AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer sbgp-ipAddrBlock: critical IPv4: 128.220.0.0/16 192.12.13.0-192.12.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:78:5e:d9:a2:57:d0:97:e8:70:bc:5b:0e:24:7c:13:a7:43: a1:8e:cd:5b:73:50:8d:d3:05:c0:fb:98:a8:0e:f6:ec:56:17: 7c:35:b4:c2:20:30:7f:cc:b9:ff:83:19:d4:ab:a9:01:e1:89: f3:9b:40:83:a3:4a:f4:c5:75:2a:d7:90:a6:f5:62:54:fd:dc: 33:fc:f3:7b:a4:f9:d6:30:47:8c:07:c0:0d:4b:7f:09:c0:08: 63:6d:18:af:09:c6:fb:d5:75:3f:ef:04:60:e0:b8:c9:e2:68: 4c:3d:70:61:80:2b:fb:15:8d:02:94:d5:b2:e5:f9:4a:37:7b: d7:c6:73:b3:fd:7c:ad:14:c9:64:e4:58:f5:ab:89:db:8d:d1: e8:2a:a7:c9:dc:a6:c3:0e:85:7c:25:56:d0:13:1f:b8:24:52: cb:20:a7:34:ea:f7:55:b0:b9:b2:82:5a:45:6b:21:f5:6d:a4: 00:f9:d8:a4:f1:8e:02:e8:90:80:8d:14:b4:f4:ca:23:e3:90: 98:31:a0:93:03:bf:12:1b:c0:9a:79:b7:5a:cc:4b:6b:66:c8: 11:4d:5f:8a:d0:77:2c:ff:2e:c0:9b:c4:3d:f2:fe:63:a8:9d: f3:a0:8e:2e:7d:16:34:34:b0:01:38:45:1c:e8:13:7f:93:01: dc:23:87:e9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ14yG9nxP9ohCdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5NmY2NGYtNjUwNi00Zjk5LWE2ZWYtNWU4YTI2NGIy ODQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MmJmY2E4MjgtMzZkOS00NWMzLWI5NWYtMTZjMDMzMDllY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM0KmdWSLrSFQBh0grQQ+k/UQGNwnWhpXJPf EuvempQk9Lp4Vs8uL015F5ta7UzCTI0YSnJm28RVkCzxRA4kjtsjEO9tSIPT5pNe +VPdizZi+XeCVp2kpFYfwSnfL1cjq/8drwTXhlJT3t9sIuYO4yKJWn0x6f5BWTK3 cMQzEZm9xapyLr2gHTTAP8JZN/rZtHN1n+KvHIoBlW0XCkmgb1MX77ImAIspXKgD N+TGuaUfQ+9fL3QtTuba1fzob+e2xmChakAAHuU2bHOD35jOF7OEYD+IKuaEiQD1 v2no9ZkcqKBbCX1YnF9Siq04dhE0qVNR4B3IDPQWzEP3KjLjjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJTVWZ1jcy/Ak0mrbTrOKGfWzJJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2 ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThhMjY0YjI4NDUvNmMxMmZiZDAtMDk0Yy0z MzhjLTk3NzItODA5ZDdlNGE3ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmM5NmY2NGYtNjUwNi00Zjk5LWE2 ZWYtNWU4YTI2NGIyODQ1LzJjOTZmNjRmLTY1MDYtNGY5OS1hNmVmLTVlOGEyNjRi Mjg0NS5jcmwwHwYDVR0jBBgwFoAUqib04Je2hcbOVS+jsmBjTVmqKQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThh MjY0YjI4NDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgNwwDAME AMAMDQMEAMAMDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIeF7ZolfQl+hwvFsOJHwTp0Ohjs1bc1CN0wXA +5ioDvbsVhd8NbTCIDB/zLn/gxnUq6kB4Ynzm0CDo0r0xXUq15Cm9WJU/dwz/PN7 pPnWMEeMB8ANS38JwAhjbRivCcb71XU/7wRg4LjJ4mhMPXBhgCv7FY0ClNWy5flK N3vXxnOz/XytFMlk5Fj1q4nbjdHoKqfJ3KbDDoV8JVbQEx+4JFLLIKc06vdVsLmy glpFayH1baQA+dik8Y4C6JCAjRS09Moj45CYMaCTA78SG8CaebdazEtrZsgRTV+K 0Hcs/y7Am8Q98v5jqJ3zoI4ufRY0NLABOEUc6BN/kwHcI4fp -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:27 2025 by rpki-client