$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa File: 21676b13-d821-3210-afaf-f5fd2bd412bc.roa (raw, json) Hash identifier: xiQSkCmnFNYAAeQJA8CU3MT0TTU2Oj/zW1etg9ZHdYA= Subject key identifier: A1:69:5A:51:5B:C8:AF:DF:69:80:D2:EA:7C:90:66:99:BA:BE:D9:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628ECAB9C107DEA0B843C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.213.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:ca:b9:c1:07:de:a0:b8:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=392b12ad-3e09-46b2-85a4-9a9281a23b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:16:17:48:36:a3:5f:61:72:05:c0:f4:4f:70: bf:ca:d5:86:c3:19:bb:a4:95:2e:d4:0f:2c:2b:0a: 5d:6f:01:21:ce:f2:d6:bb:c0:b7:24:30:42:ad:0e: 7a:5e:a6:84:cd:f0:d9:7d:97:b1:53:54:2a:4e:8d: 85:eb:93:5a:13:cd:ad:ab:d3:c2:96:9b:88:e3:34: 38:56:2c:3d:ec:40:7c:98:57:07:ed:65:49:09:37: 79:76:80:b8:9f:2e:e9:ee:2b:b2:96:53:31:c2:5b: 64:6a:ed:0a:a7:bb:bd:db:e5:68:5c:a3:aa:de:66: f0:7e:ad:77:e9:e4:16:f1:d9:04:b8:a2:4d:6c:76: cb:d8:1f:50:46:de:a6:da:f5:29:db:8f:75:ba:68: a7:78:59:3a:8a:45:aa:c1:23:76:97:76:02:14:1f: f1:2b:62:00:d3:02:8c:4c:ba:df:a2:db:91:33:8f: 83:be:3f:64:5b:05:66:36:e4:37:b0:2a:81:f8:9a: 15:18:3f:94:7b:6b:03:14:5d:df:3c:a6:a4:85:2e: 04:36:76:c3:0a:57:d3:62:9d:6c:61:be:7e:e6:b4: 76:93:e8:84:dd:17:8b:5b:c1:d9:9b:c8:c5:f4:7c: 3c:ba:a9:79:39:6c:02:53:77:31:f1:db:a3:2a:0f: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:5A:51:5B:C8:AF:DF:69:80:D2:EA:7C:90:66:99:BA:BE:D9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:5f:0b:7a:b7:6c:f0:66:6f:1e:20:fe:cd:02:4a:fb:c3:a8: 91:86:33:06:4a:3a:c0:93:bc:16:fe:f6:5a:6c:e9:0e:21:13: c7:5a:e4:7c:f5:94:35:50:8e:53:e6:bb:21:ee:2b:5e:7d:7c: d5:6b:c0:3f:37:b6:d5:02:2f:3f:8a:a7:02:db:18:9a:6b:d6: db:8b:8b:40:47:71:93:8f:4c:ec:57:69:b5:a0:e1:57:5c:8d: 8b:90:61:6e:98:54:95:fe:0d:26:12:7c:02:d3:c5:b2:54:8f: 65:c7:9d:79:fb:42:91:79:ed:b7:5c:23:e4:ce:0b:40:d6:5a: b6:e8:95:58:da:6a:93:bd:97:13:f2:63:8d:33:5a:1d:f1:a4: 4f:54:0c:41:d1:a2:28:54:09:1c:64:45:f5:6b:a1:e9:39:b6: e5:02:3a:9e:58:73:b1:68:63:56:28:cc:79:d6:90:71:9f:87: 70:18:b7:7c:1e:5a:a6:3c:c1:d9:a1:aa:54:4f:de:a0:17:db: c9:66:3f:29:11:d0:bf:ca:2b:20:6f:8b:14:22:70:08:ea:57: 4c:21:c4:27:f4:96:43:61:56:c1:d5:11:27:6e:52:08:78:59: bc:da:56:5f:ed:36:8b:69:a5:7a:61:21:6d:3e:3c:9e:43:0c: 99:67:f1:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo7KucEH3qC4Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MzkyYjEyYWQtM2UwOS00NmIyLTg1YTQtOWE5MjgxYTIzYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhYXSDajX2FyBcD0T3C/ytWGwxm7pJUu1A8s KwpdbwEhzvLWu8C3JDBCrQ56XqaEzfDZfZexU1QqTo2F65NaE82tq9PClpuI4zQ4 Viw97EB8mFcH7WVJCTd5doC4ny7p7iuyllMxwltkau0Kp7u92+VoXKOq3mbwfq13 6eQW8dkEuKJNbHbL2B9QRt6m2vUp2491umineFk6ikWqwSN2l3YCFB/xK2IA0wKM TLrfotuRM4+Dvj9kWwVmNuQ3sCqB+JoVGD+Ue2sDFF3fPKakhS4ENnbDClfTYp1s Yb5+5rR2k+iE3ReLW8HZm8jF9Hw8uql5OWwCU3cx8dujKg9sSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFpWlFbyK/faYDS6nyQZpm6vtkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjE2NzZiMTMtZDgyMS0z MjEwLWFmYWYtZjVmZDJiZDQxMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNfC3q3bPBmbx4g/s0CSvvDqJGGMwZKOsCTvBb+9lps6Q4hE8da5Hz1 lDVQjlPmuyHuK159fNVrwD83ttUCLz+KpwLbGJpr1tuLi0BHcZOPTOxXabWg4Vdc jYuQYW6YVJX+DSYSfALTxbJUj2XHnXn7QpF57bdcI+TOC0DWWrbolVjaapO9lxPy Y40zWh3xpE9UDEHRoihUCRxkRfVroek5tuUCOp5Yc7FoY1YozHnWkHGfh3AYt3we WqY8wdmhqlRP3qAX28lmPykR0L/KKyBvixQicAjqV0whxCf0lkNhVsHVESduUgh4 WbzaVl/tNotppXphIW0+PJ5DDJln8ZU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:03 2025 by rpki-client