$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa File: 6420c580-fa73-384a-87f8-f301e863e9de.roa (raw, json) Hash identifier: UUfCQT82+N33YwdqSAvcUbm8L1j74q/Db8/aI64exrU= Subject key identifier: C1:1B:BE:BC:D9:B9:3F:F1:EA:FE:A5:FC:87:05:7F:F9:20:56:44:E4 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F4328584BAD624AE2A7058EEF279DBB00 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 198949 IP address blocks: 130.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4a:e2:a7:05:8e:ef:27:9d:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=0a6ffed3-3eb6-4f12-949c-bd9b69a8e7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:14:79:3f:93:89:b3:74:c9:e5:10:2d:ba: 76:94:f5:c8:ec:89:76:ec:d1:29:be:4c:a8:65:b5: 0b:21:dc:9e:b8:de:fe:83:95:c5:3e:69:73:d5:81: 40:60:eb:d4:2d:86:b6:3f:d7:61:df:0a:22:d5:a1: f2:b2:ea:76:26:e8:5e:73:0e:b9:43:d0:d6:3e:3b: d3:88:cf:9e:f2:d9:da:75:76:ab:df:61:ef:0b:14: 9c:fb:b8:a7:2c:45:90:e3:ba:37:03:a1:ae:74:03: c1:0a:2e:59:aa:fd:94:65:d7:36:62:5c:8f:c9:76: a8:31:35:8d:57:3f:55:76:23:27:e8:2c:de:53:8f: b7:83:22:40:b2:41:78:4f:33:55:14:9a:82:11:8d: 2f:6b:31:77:b5:e1:c2:37:9a:dc:75:df:d2:c3:00: c3:35:0c:98:51:c7:ce:ec:26:3a:a5:b9:8a:87:4b: 66:09:dd:86:70:d9:46:e2:c1:20:79:d9:e9:4a:e7: 59:49:c2:d1:ea:9c:25:b8:30:a9:8e:01:ac:ae:e0: 9d:ef:39:0f:9e:8e:3e:cc:14:f0:d9:86:0a:6e:dd: a8:39:4d:de:a2:3c:2f:b0:e3:80:7a:43:57:7f:03: b7:af:21:fe:31:b5:ca:33:6c:22:2d:0b:fb:09:24: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:BE:BC:D9:B9:3F:F1:EA:FE:A5:FC:87:05:7F:F9:20:56:44:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 130.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f5:d8:f9:94:20:d8:1b:da:3b:60:3c:64:d5:42:c4:b7:c2: 70:e9:fc:dd:c7:95:f6:1e:57:52:fc:e9:36:8b:07:2c:46:b6: 63:d1:01:f4:42:f0:b6:01:0e:b6:61:b3:70:93:d7:1c:f4:0b: c5:dc:10:53:da:95:94:38:9f:0a:94:55:cd:c8:57:13:0d:be: d5:29:cb:0c:22:e0:60:01:2b:f2:96:b5:db:97:72:cd:c7:35: d5:81:e6:58:16:93:bf:2c:de:42:d5:28:18:19:54:54:b7:17: 36:13:72:5e:aa:a5:dd:f3:51:99:9c:2b:9d:f1:a3:fe:42:85: 4a:19:ec:a7:40:94:23:0b:fe:86:c8:26:46:8e:b0:88:9e:7d: a8:17:c0:70:80:48:c2:93:29:a2:cb:3a:b1:34:26:29:b9:10: 5e:c1:c4:55:d4:2c:93:ea:7f:da:ce:3e:22:11:9e:9f:f6:1c: b4:3e:db:55:71:ef:1c:cc:3a:6d:63:1a:29:01:b0:1e:ea:75: f4:b5:9e:85:15:24:92:08:06:19:6c:c9:f9:48:30:3c:3d:83: e6:0b:2e:7d:36:3a:dd:69:11:0e:ea:ae:f9:1f:02:a5:bd:5d: cb:ce:10:1f:72:ec:43:73:90:37:2b:0e:ba:77:10:ed:a8:eb: e4:65:ef:23 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEutYkripwWO7yeduwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MGE2ZmZlZDMtM2ViNi00ZjEyLTk0OWMtYmQ5YjY5YThlN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtMUeT+TibN0yeUQLbp2lPXI7Il27NEpvkyo ZbULIdyeuN7+g5XFPmlz1YFAYOvULYa2P9dh3woi1aHysup2Juhecw65Q9DWPjvT iM+e8tnadXar32HvCxSc+7inLEWQ47o3A6GudAPBCi5Zqv2UZdc2YlyPyXaoMTWN Vz9VdiMn6CzeU4+3gyJAskF4TzNVFJqCEY0vazF3teHCN5rcdd/SwwDDNQyYUcfO 7CY6pbmKh0tmCd2GcNlG4sEgednpSudZScLR6pwluDCpjgGsruCd7zkPno4+zBTw 2YYKbt2oOU3eojwvsOOAekNXfwO3ryH+MbXKM2wiLQv7CSTX2QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMEbvrzZuT/x6v6l/IcFf/kgVkTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvNjQyMGM1ODAtZmE3My0z ODRhLTg3ZjgtZjMwMWU4NjNlOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgoQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAt/XY+ZQg2BvaO2A8ZNVCxLfCcOn83ceV9h5XUvzpNosHLEa2Y9EB9ELw tgEOtmGzcJPXHPQLxdwQU9qVlDifCpRVzchXEw2+1SnLDCLgYAEr8pa125dyzcc1 1YHmWBaTvyzeQtUoGBlUVLcXNhNyXqql3fNRmZwrnfGj/kKFShnsp0CUIwv+hsgm Ro6wiJ59qBfAcIBIwpMposs6sTQmKbkQXsHEVdQsk+p/2s4+IhGen/YctD7bVXHv HMw6bWMaKQGwHup19LWehRUkkggGGWzJ+UgwPD2D5gsufTY63WkRDuqu+R8Cpb1d y84QH3LsQ3OQNysOuncQ7ajr5GXvIw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:49 2025 by rpki-client