$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fbff376-3fa3-35ab-864b-b3297fd2499e.roa File: 4fbff376-3fa3-35ab-864b-b3297fd2499e.roa (raw, json) Hash identifier: 88qBfquIs4REuagnt9kIShTDTkF2RL5jC5JzVWLoCRw= Subject key identifier: 1A:E0:5C:24:05:A1:2F:08:FF:45:96:A7:AE:ED:5B:57:47:B7:2C:8C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628E503C39FDAEDA62B400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fbff376-3fa3-35ab-864b-b3297fd2499e.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.213.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:50:3c:39:fd:ae:da:62:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=3279e017-8785-47df-b952-d8cf1d77fa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:67:c4:a9:db:52:39:fb:10:2a:05:6a:49: ac:07:58:7c:29:da:d7:96:f4:e7:3b:57:a2:ce:18: 51:d9:a3:05:3e:6f:a8:b1:cf:65:83:e8:3d:73:e2: 7f:20:da:aa:34:5e:6f:2d:eb:6e:bf:a1:3d:49:63: 94:5b:fc:ef:96:63:65:f0:46:22:27:f5:ad:9a:54: 91:23:58:e9:62:0a:1f:3b:17:3c:b8:f5:b1:9c:14: b9:27:39:e4:3f:d0:dd:cd:c4:97:75:90:76:18:34: 8f:11:95:81:c6:da:0a:6a:05:d6:8b:c7:d8:f2:56: 1c:89:83:6d:8d:71:e1:d7:b9:2c:2d:d9:cd:2d:21: 81:50:0e:ff:7e:52:de:0e:ae:ed:3b:23:17:47:e3: 4b:c1:9c:05:fc:04:56:97:a7:db:2f:83:e6:41:e7: 24:b0:e6:bf:2d:77:fd:bd:70:8e:7e:b0:30:9f:7e: 26:da:05:33:de:bc:eb:ec:d5:ee:db:6e:1b:7d:c2: 9d:d2:94:3e:5f:6b:85:76:58:73:b5:a6:40:41:19: 5f:ed:db:79:02:10:ba:03:7e:73:9a:7b:67:2f:dc: f7:00:e5:50:7c:f6:26:c3:db:e4:d9:e6:ee:d0:fa: be:2c:11:bd:07:a9:81:56:10:6a:64:32:97:0f:e6: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E0:5C:24:05:A1:2F:08:FF:45:96:A7:AE:ED:5B:57:47:B7:2C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4fbff376-3fa3-35ab-864b-b3297fd2499e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:72:a8:a8:b7:b7:d5:56:17:42:ec:be:cf:e0:36:00:d2:ad: 94:c8:4f:d7:67:52:36:58:b9:16:51:ab:a4:96:e6:58:95:c5: 3f:68:9b:84:5a:ce:8f:69:9d:47:ce:26:02:4d:16:e0:1f:3c: c4:f3:13:e2:b4:09:a3:98:aa:06:84:17:58:eb:80:7d:d4:d2: 03:c7:21:08:2c:b6:d6:4b:22:5b:00:0d:81:bd:ff:73:b3:a7: 11:8b:7a:2b:fb:57:b0:6e:9a:d0:8d:b9:f3:82:f5:69:24:8a: 15:60:62:8a:71:9c:78:8c:45:95:ac:da:be:7a:c4:d6:ea:7e: 61:e3:a9:a2:0d:c4:0e:d4:98:96:d7:99:a5:2d:cb:4b:89:47: a8:c3:cd:05:e4:58:b3:09:88:b4:a1:75:a8:fd:d1:4b:17:89: b5:20:f4:9b:7f:71:d6:c1:9b:0f:ec:bf:f9:a1:0b:59:7c:a3: 3c:38:7b:bf:dd:80:e3:a5:94:f3:47:90:0a:65:61:f4:f8:bb: 1d:9b:b6:4b:61:8e:12:29:d1:27:79:6a:4a:32:a1:c1:fe:86: 69:ca:1a:02:71:10:37:19:60:98:7c:2b:79:cc:e3:d4:52:79: ef:db:5d:8f:24:29:00:a4:36:4a:4a:a2:4e:20:69:ca:12:ef: a0:c2:6b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo5QPDn9rtpitAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MzI3OWUwMTctODc4NS00N2RmLWI5NTItZDhjZjFkNzdmYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinlnxKnbUjn7ECoFakmsB1h8KdrXlvTnO1ei zhhR2aMFPm+osc9lg+g9c+J/INqqNF5vLetuv6E9SWOUW/zvlmNl8EYiJ/WtmlSR I1jpYgofOxc8uPWxnBS5JznkP9DdzcSXdZB2GDSPEZWBxtoKagXWi8fY8lYciYNt jXHh17ksLdnNLSGBUA7/flLeDq7tOyMXR+NLwZwF/ARWl6fbL4PmQecksOa/LXf9 vXCOfrAwn34m2gUz3rzr7NXu224bfcKd0pQ+X2uFdlhztaZAQRlf7dt5AhC6A35z mntnL9z3AOVQfPYmw9vk2ebu0Pq+LBG9B6mBVhBqZDKXD+bQGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrgXCQFoS8I/0WWp67tW1dHtyyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGZiZmYzNzYtM2ZhMy0z NWFiLTg2NGItYjMyOTdmZDI0OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFyqKi3t9VWF0Lsvs/gNgDSrZTIT9dnUjZYuRZRq6SW5liVxT9om4Ra zo9pnUfOJgJNFuAfPMTzE+K0CaOYqgaEF1jrgH3U0gPHIQgsttZLIlsADYG9/3Oz pxGLeiv7V7BumtCNufOC9WkkihVgYopxnHiMRZWs2r56xNbqfmHjqaINxA7UmJbX maUty0uJR6jDzQXkWLMJiLShdaj90UsXibUg9Jt/cdbBmw/sv/mhC1l8ozw4e7/d gOOllPNHkAplYfT4ux2btkthjhIp0Sd5akoyocH+hmnKGgJxEDcZYJh8K3nM49RS ee/bXY8kKQCkNkpKok4gacoS76DCa6g= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:21 2025 by rpki-client