$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa File: 40be300f-53cf-3207-a2f8-f0db5cddc9de.roa (raw, json) Hash identifier: r6U64ezmVSRT5bcwZ9WWMnqtF6KwLe9RhS5XrBSyyY4= Subject key identifier: A5:66:7D:57:E4:CA:94:BC:5F:E6:B2:AF:D4:7C:97:E8:D1:06:57:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97B98BCE9340F1B3794540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.213.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b9:8b:ce:93:40:f1:b3:79:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=b6676500-3ce2-4b4c-a626-58e96c841c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:a1:7a:aa:a5:06:87:a1:de:32:76:39:cb: 9b:2b:94:cb:cc:eb:38:4f:f9:73:d1:1b:f2:5a:c5: f9:19:38:32:9e:0c:4d:92:76:ff:17:ac:2d:39:d4: dc:8f:9a:36:6c:3d:83:a0:a0:e8:bd:54:5b:74:03: 97:7e:ca:f8:20:81:25:bf:c0:62:1b:c1:ba:77:1b: 85:1c:8f:7d:4a:ef:88:14:c4:06:72:35:21:1e:fc: d3:23:6f:a1:94:72:38:57:b0:28:b4:40:a9:21:c7: 97:4d:27:32:14:30:de:42:3f:79:28:67:da:82:54: 42:fd:f3:17:13:72:ff:d8:30:15:b7:c1:d1:64:44: e7:d7:17:81:80:bd:08:e2:44:0f:d9:03:f6:5e:e6: fc:7a:54:28:3c:bc:02:a4:c2:bb:6d:0d:35:6a:d5: 4a:21:1e:0d:60:23:c5:84:5a:b1:85:05:4a:d7:b8: a4:3a:3c:9a:4f:c1:48:e9:5b:db:3c:e0:88:d7:24: cb:4f:3a:73:01:bb:0e:f2:97:f9:40:50:99:5b:cd: 5c:19:2c:7b:91:11:d9:d7:1a:58:83:40:54:64:df: c9:0a:5b:4f:39:f9:7d:c6:5e:8f:c8:6c:27:33:f8: 2a:94:66:13:9d:0e:e2:25:30:30:e3:ed:3e:4f:4a: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:66:7D:57:E4:CA:94:BC:5F:E6:B2:AF:D4:7C:97:E8:D1:06:57:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40be300f-53cf-3207-a2f8-f0db5cddc9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a1:07:7c:b9:48:eb:37:0c:d4:20:e0:f2:c6:bc:8e:39:df: 16:47:97:08:d3:19:72:95:c0:7d:bc:f4:06:86:e4:d4:4f:5c: 85:d6:ea:97:1b:61:64:f1:97:d3:d0:8b:43:6b:8a:ec:d9:45: f2:bd:7f:cd:72:f2:ca:93:9d:21:d0:4d:04:4b:e6:2b:ac:73: db:bc:43:7e:08:65:0b:9b:7f:cc:fd:ac:28:cc:f9:b0:dc:48: 3a:a9:82:72:65:4d:10:a4:0d:e6:c4:b7:69:39:cf:de:26:bc: 65:13:04:33:89:29:40:be:85:c4:59:50:32:b7:63:a1:5a:f9: 18:d9:0a:a8:c9:85:b2:5c:60:ff:ea:03:fd:82:63:81:25:e8: 21:cd:42:43:0d:24:4f:84:f2:91:9a:5d:9e:b0:c5:13:01:73: e9:1e:43:c2:c4:21:8f:d6:50:e5:79:86:49:72:76:f7:14:5a: 70:db:41:af:2a:e7:af:3b:4c:37:c4:62:f0:c4:e5:44:d7:de: b9:e2:68:aa:9e:19:38:6b:1b:fb:3d:39:81:44:3c:80:d4:22: c9:e6:30:2f:a3:ed:66:25:9b:47:cd:e2:d8:47:05:6a:05:ff: a8:b1:b6:d7:96:23:46:ea:17:bc:7b:64:dc:21:5d:a8:0f:0f: 47:8c:07:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7mLzpNA8bN5RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YjY2NzY1MDAtM2NlMi00YjRjLWE2MjYtNThlOTZjODQxYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/aheqqlBoeh3jJ2OcubK5TLzOs4T/lz0Rvy WsX5GTgyngxNknb/F6wtOdTcj5o2bD2DoKDovVRbdAOXfsr4IIElv8BiG8G6dxuF HI99Su+IFMQGcjUhHvzTI2+hlHI4V7AotECpIceXTScyFDDeQj95KGfaglRC/fMX E3L/2DAVt8HRZETn1xeBgL0I4kQP2QP2Xub8elQoPLwCpMK7bQ01atVKIR4NYCPF hFqxhQVK17ikOjyaT8FI6VvbPOCI1yTLTzpzAbsO8pf5QFCZW81cGSx7kRHZ1xpY g0BUZN/JCltPOfl9xl6PyGwnM/gqlGYTnQ7iJTAw4+0+T0rbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVmfVfkypS8X+ayr9R8l+jRBldAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDBiZTMwMGYtNTNjZi0z MjA3LWEyZjgtZjBkYjVjZGRjOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmhB3y5SOs3DNQg4PLGvI453xZHlwjTGXKVwH289AaG5NRPXIXW6pcb YWTxl9PQi0NriuzZRfK9f81y8sqTnSHQTQRL5iusc9u8Q34IZQubf8z9rCjM+bDc SDqpgnJlTRCkDebEt2k5z94mvGUTBDOJKUC+hcRZUDK3Y6Fa+RjZCqjJhbJcYP/q A/2CY4El6CHNQkMNJE+E8pGaXZ6wxRMBc+keQ8LEIY/WUOV5hklydvcUWnDbQa8q 5687TDfEYvDE5UTX3rniaKqeGThrG/s9OYFEPIDUIsnmMC+j7WYlm0fN4thHBWoF /6ixtteWI0bqF7x7ZNwhXagPD0eMBz0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:59 2025 by rpki-client