$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/506209b0-822e-3551-8f42-73f4ba6a8d88.roa File: 506209b0-822e-3551-8f42-73f4ba6a8d88.roa (raw, json) Hash identifier: amMViDHp3Yg85nJr7p2VhwulxMQFmi5NS18bxNyZk6k= Subject key identifier: E3:C4:93:64:34:C0:A6:27:E4:AC:CC:E1:A2:24:C6:91:40:9A:75:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97BB1AC72E1AF0FD34E230 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/506209b0-822e-3551-8f42-73f4ba6a8d88.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.159.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bb:1a:c7:2e:1a:f0:fd:34:e2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4c79f894-0882-47e1-b549-0b8030f5eda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:f6:af:51:8a:f3:aa:e4:4c:c7:a5:31:14: 2e:f9:81:44:cd:b3:63:c4:56:14:d2:32:fd:56:d3: 33:4e:47:29:40:61:87:02:15:09:b4:86:fb:b9:0c: 12:d1:05:f4:b1:6b:f1:f9:58:bf:fc:78:a8:cf:7b: de:25:dd:01:35:69:14:33:e5:64:f3:65:9b:5b:17: 03:df:5a:ca:97:65:40:d4:95:b1:e1:28:86:37:fc: 4d:ea:ff:59:9c:69:30:69:5f:ff:c9:b3:71:4b:f6: 6b:0a:1d:26:37:02:87:9f:a0:67:39:fd:f7:3a:51: 0c:56:ed:36:05:41:2e:ed:31:ee:70:a0:c3:13:a0: cd:2e:fd:2a:44:c0:fb:2f:0d:3f:76:cf:c4:56:35: 91:79:c0:f6:f6:1f:77:5f:aa:1b:91:3c:cd:2a:1f: 55:05:ca:c3:ae:3b:fd:f2:3d:fc:4a:e4:bf:f8:68: dd:12:56:28:60:fb:a1:2f:a3:56:b8:30:fb:85:94: c1:a6:f6:83:b8:3c:ce:f1:1f:6a:3d:9c:0a:12:55: 14:c6:5c:56:1d:9b:f5:74:98:d2:1f:bf:d8:67:85: ca:23:36:87:08:b5:6c:a8:42:c3:b0:a1:89:a7:db: c6:57:49:85:4f:9c:5b:ba:6b:57:a9:c6:70:62:c7: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:93:64:34:C0:A6:27:E4:AC:CC:E1:A2:24:C6:91:40:9A:75:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/506209b0-822e-3551-8f42-73f4ba6a8d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fb:63:16:08:dd:53:6a:f6:a9:86:a0:de:43:de:fa:0f:d7: df:a0:2c:59:c7:25:28:24:47:e9:4d:2f:17:ca:20:3c:63:53: d6:d8:56:a2:68:2a:5b:19:92:12:c4:8a:2c:1b:17:14:0d:c5: 98:86:f7:d6:82:26:bd:6c:a8:04:81:94:3f:ad:c4:e9:9a:d4: 1a:7a:16:18:a4:d3:0e:a1:fc:db:9e:a6:37:84:65:2c:f8:e7: a0:ca:a4:e7:bd:43:46:ac:03:9b:1a:b7:84:b5:e9:57:43:01: 99:46:de:67:93:76:84:a3:68:ed:dd:ac:10:46:c5:89:34:26: d2:e5:e9:b7:8f:9c:d4:a4:3b:9e:c9:2f:bc:fe:4c:62:6c:c5: 28:58:74:d0:ce:65:d6:6b:80:90:95:65:90:62:62:ad:15:b1: 48:a3:de:a2:f3:ef:48:54:e3:3c:79:54:11:45:be:43:a8:58: d9:f3:e7:ba:51:a9:46:54:97:37:31:92:9e:b5:23:06:ce:3e: 5a:82:2e:21:b3:90:88:6b:7b:45:76:13:34:a1:78:8f:47:49: ab:5d:2a:96:b9:31:f5:52:51:91:cb:d5:b3:83:b7:75:18:2d: c8:9c:fe:3f:05:7b:f7:83:05:fc:4a:22:74:5a:0f:7e:5c:a1: 4c:7b:b1:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7saxy4a8P004jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NGM3OWY4OTQtMDg4Mi00N2UxLWI1NDktMGI4MDMwZjVlZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/2r1GK86rkTMelMRQu+YFEzbNjxFYU0jL9 VtMzTkcpQGGHAhUJtIb7uQwS0QX0sWvx+Vi//Hioz3veJd0BNWkUM+Vk82WbWxcD 31rKl2VA1JWx4SiGN/xN6v9ZnGkwaV//ybNxS/ZrCh0mNwKHn6BnOf33OlEMVu02 BUEu7THucKDDE6DNLv0qRMD7Lw0/ds/EVjWRecD29h93X6obkTzNKh9VBcrDrjv9 8j38SuS/+GjdElYoYPuhL6NWuDD7hZTBpvaDuDzO8R9qPZwKElUUxlxWHZv1dJjS H7/YZ4XKIzaHCLVsqELDsKGJp9vGV0mFT5xbumtXqcZwYscTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPEk2Q0wKYn5KzM4aIkxpFAmnXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTA2MjA5YjAtODIyZS0z NTUxLThmNDItNzNmNGJhNmE4ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr7YxYI3VNq9qmGoN5D3voP19+gLFnHJSgkR+lNLxfKIDxjU9bYVqJo KlsZkhLEiiwbFxQNxZiG99aCJr1sqASBlD+txOma1Bp6Fhik0w6h/NuepjeEZSz4 56DKpOe9Q0asA5sat4S16VdDAZlG3meTdoSjaO3drBBGxYk0JtLl6bePnNSkO57J L7z+TGJsxShYdNDOZdZrgJCVZZBiYq0VsUij3qLz70hU4zx5VBFFvkOoWNnz57pR qUZUlzcxkp61IwbOPlqCLiGzkIhre0V2EzSheI9HSatdKpa5MfVSUZHL1bODt3UY Lcic/j8Fe/eDBfxKInRaD35coUx7sao= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:12 2025 by rpki-client