$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa File: c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa (raw, json) Hash identifier: 3R1VYAeA9SjNyzn4t55tqbXJp42BwBIL0hGT71JTN7s= Subject key identifier: BF:F8:1B:A8:DC:8E:C7:BD:B9:AC:0C:50:61:E4:90:AB:DF:8A:AB:A2 Certificate issuer: /CN=5fa520a3-7c82-4745-8817-8dd86a2e0796 Certificate serial: 010D0C9F4328584BB45D0E261BCF606747976400 Authority key identifier: 59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 1832 IP address blocks: 129.119.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0e:26:1b:cf:60:67:47:97:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa520a3-7c82-4745-8817-8dd86a2e0796 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c508f553-4cae-4da1-8f6d-e995009a0af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:28:06:0e:0c:50:90:f1:22:ef:36:94:b4: ee:f7:79:6d:73:ef:a6:ff:7e:6d:18:ec:06:f1:bd: 46:48:ea:4b:71:ea:21:2e:e4:b3:50:74:6c:60:78: 8b:ce:d4:a0:c9:f7:c8:e6:4d:ce:6c:48:a3:f3:f7: 35:86:9e:db:2d:af:0e:39:cd:8c:30:a6:a8:66:52: 85:88:2f:e7:79:b0:a9:60:76:a3:66:18:88:ed:a2: ef:11:34:07:e8:d8:96:b5:61:8f:54:71:1c:93:74: 61:4d:6e:fe:f7:aa:08:b9:20:fc:81:15:99:d2:4b: fa:e3:72:70:3b:7f:e4:d4:4a:6a:ed:0a:0c:f7:b3: 6e:c3:bd:16:66:0e:65:a0:f9:97:2a:4e:28:06:64: 2c:43:ec:c6:d1:3e:57:f2:e0:5e:3a:23:94:33:53: c6:9e:0d:53:ac:ca:75:31:e8:c6:78:a9:15:0a:79: d6:5e:a3:c5:5a:e3:d0:1d:63:2e:bb:1f:5c:d5:f5: 8c:fe:67:2e:6a:03:06:21:78:cf:d5:77:eb:ec:7a: a7:c6:69:1e:37:d5:12:7a:ff:e7:b0:22:21:91:26: 86:91:b8:8a:4c:51:dd:5a:4f:ca:54:2f:87:b8:0d: f1:72:bc:4b:27:69:2e:89:f6:e9:bf:a1:3c:44:ca: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:1B:A8:DC:8E:C7:BD:B9:AC:0C:50:61:E4:90:AB:DF:8A:AB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.crl X509v3 Authority Key Identifier: keyid:59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer sbgp-ipAddrBlock: critical IPv4: 129.119.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:6c:09:46:2b:91:c2:23:e5:11:45:aa:fe:14:db:c5:7e:84: 50:99:7d:25:d8:49:da:42:21:d8:93:d0:c5:42:3c:9b:a4:5e: e6:5d:5c:0c:8a:73:1c:e3:4e:b0:ca:63:2c:c6:54:02:12:6c: ca:bc:c4:58:fe:cc:a6:ad:6c:27:4e:d4:d9:c8:32:90:44:0c: 02:3d:8b:a6:f1:00:70:b7:4e:d4:15:a6:6d:4c:b2:09:90:d3: 5d:a5:09:9f:fd:e0:c7:a8:f6:44:3c:5e:9b:7b:fb:62:03:65: 8f:9f:4a:1b:54:e9:d6:a9:26:a1:c4:95:5c:7b:6e:c2:fe:47: 18:2c:0f:fd:58:5f:26:97:a9:f5:88:06:24:65:c1:c5:47:c2: d3:25:7b:39:a3:db:c2:fa:5a:29:c0:87:c5:5c:7f:b5:44:b8: 56:24:6a:8e:81:fd:38:55:93:b8:5d:61:0f:4d:f2:18:b7:b0: 23:3c:66:2b:0c:b7:33:d2:c2:e2:14:2e:40:cd:e5:9f:26:ed: fd:87:97:59:65:43:a2:1c:be:9e:ac:66:3f:73:7f:0f:9a:7a: 97:3e:df:e9:ca:34:00:5e:ae:89:ac:de:b5:e2:b8:c8:25:3a: 6d:8d:7a:59:35:e3:42:c3:4d:c8:3c:9a:d1:8c:2a:59:e6:e1: 7b:71:0d:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ4mG89gZ0eXZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhNTIwYTMtN2M4Mi00NzQ1LTg4MTctOGRkODZhMmUw Nzk2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YzUwOGY1NTMtNGNhZS00ZGExLThmNmQtZTk5NTAwOWEwYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp14oBg4MUJDxIu82lLTu93ltc++m/35tGOwG 8b1GSOpLceohLuSzUHRsYHiLztSgyffI5k3ObEij8/c1hp7bLa8OOc2MMKaoZlKF iC/nebCpYHajZhiI7aLvETQH6NiWtWGPVHEck3RhTW7+96oIuSD8gRWZ0kv643Jw O3/k1Epq7QoM97Nuw70WZg5loPmXKk4oBmQsQ+zG0T5X8uBeOiOUM1PGng1TrMp1 MejGeKkVCnnWXqPFWuPQHWMuux9c1fWM/mcuagMGIXjP1Xfr7HqnxmkeN9USev/n sCIhkSaGkbiKTFHdWk/KVC+HuA3xcrxLJ2kuifbpv6E8RMriywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/4G6jcjse9uawMUGHkkKvfiquiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZmE1 MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4NmEyZTA3OTYvYzVjYzc3Y2MtYjZjNi0z ZGRlLTg0ZjAtMzMyZjQwOWI3MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWZhNTIwYTMtN2M4Mi00NzQ1LTg4 MTctOGRkODZhMmUwNzk2LzVmYTUyMGEzLTdjODItNDc0NS04ODE3LThkZDg2YTJl MDc5Ni5jcmwwHwYDVR0jBBgwFoAUWW2osBy22uf57DpYSNFWQA5BlDYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZmE1MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4 NmEyZTA3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgXcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBsCUYrkcIj5RFFqv4U28V+hFCZfSXYSdpCIdiT0MVCPJukXuZdXAyK cxzjTrDKYyzGVAISbMq8xFj+zKatbCdO1NnIMpBEDAI9i6bxAHC3TtQVpm1MsgmQ 012lCZ/94Meo9kQ8Xpt7+2IDZY+fShtU6dapJqHElVx7bsL+RxgsD/1YXyaXqfWI BiRlwcVHwtMlezmj28L6WinAh8Vcf7VEuFYkao6B/ThVk7hdYQ9N8hi3sCM8ZisM tzPSwuIULkDN5Z8m7f2Hl1llQ6Icvp6sZj9zfw+aepc+3+nKNABeroms3rXiuMgl Om2Nelk140LDTcg8mtGMKlnm4XtxDdY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:12:58 2025 by rpki-client