$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569d42e4-f557-3858-9773-51a05826a143.roa File: 569d42e4-f557-3858-9773-51a05826a143.roa (raw, json) Hash identifier: 3nT6unQXzJnTeseWSWeDt/KU5Yg9Bqi9jOT1xH4+4k4= Subject key identifier: 69:D3:A4:15:1F:F2:FE:32:87:62:B5:C0:F5:B2:81:1B:35:F1:A5:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97BA372227C626963F8000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569d42e4-f557-3858-9773-51a05826a143.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.146.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ba:37:22:27:c6:26:96:3f:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=9d9e8ded-372a-4280-a31a-94f12ad3cfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:86:52:d5:24:5b:68:a8:a3:80:27:62:c6: ca:63:b5:09:54:0a:6c:46:7c:d9:11:e3:e4:98:ea: 37:a3:5f:00:33:09:a1:ee:dd:e8:d4:fb:f7:62:77: ea:38:3b:ad:d2:9d:86:d5:bd:70:52:00:93:37:73: a1:bc:5f:bc:a8:d0:52:2c:05:db:d1:6d:00:46:47: 1f:04:9b:9f:36:e9:12:84:f0:0e:9f:5f:88:b0:af: fe:46:d3:43:ea:0b:06:63:f9:4b:2f:2b:1b:9a:66: c1:31:3d:b5:8c:ab:3a:03:9a:f3:d5:9f:66:18:5b: 16:ab:c4:d6:c6:08:36:53:92:79:b5:be:5c:37:80: f1:50:2a:df:1f:56:39:26:b2:8f:8e:35:82:9f:b8: 84:13:9b:53:a7:36:83:f7:f9:07:28:4e:b3:d5:58: c8:cb:07:88:33:97:85:8e:4e:ae:95:7c:00:d5:67: 85:c1:aa:e3:72:22:e0:9e:a0:54:c4:37:02:47:14: 10:a4:0a:a9:02:c7:e6:4b:84:b1:f9:d7:81:0e:cb: ba:38:72:34:7f:13:cf:ee:89:73:83:53:85:4b:28: 03:4c:ca:18:1e:86:68:0c:1f:17:ff:c2:0f:e8:4e: 5d:df:9f:5c:5f:c4:0b:1f:6a:eb:e7:7d:3b:9d:23: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D3:A4:15:1F:F2:FE:32:87:62:B5:C0:F5:B2:81:1B:35:F1:A5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/569d42e4-f557-3858-9773-51a05826a143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c5:08:a8:eb:69:17:71:7d:83:12:81:c1:04:44:99:5f:90: 32:c1:df:ea:e4:5a:26:fa:05:d3:07:37:47:3c:25:6c:10:43: 58:5f:7d:50:32:5a:54:52:27:a0:97:b4:f3:e0:eb:2a:5c:a9: 0a:52:72:16:0b:0a:c4:d0:7b:40:4c:86:d9:60:29:77:56:e2: bc:89:ba:aa:c5:0c:f2:23:b2:6a:62:c8:b2:97:5f:ab:3f:df: 7c:7b:d7:af:b7:67:1a:bb:f9:f1:85:98:a5:d5:35:b0:9e:cf: 9a:05:06:be:9f:29:b4:a7:9b:aa:14:68:97:d7:9f:d0:95:29: cc:d4:c7:b9:2a:d4:ab:8e:98:6d:69:96:f5:9c:a7:33:9e:d6: 93:f7:5f:7c:16:93:8e:0a:30:1a:3c:1e:0c:0f:f0:f6:30:77: 69:00:73:68:f4:b6:27:bd:d4:54:38:13:f7:83:82:bf:3f:ab: f5:f5:4b:b8:b4:4c:a1:bc:2a:11:a8:dd:08:f6:e5:be:6a:31: 7d:7c:37:e8:72:f7:96:5a:7b:f6:99:f0:23:c7:68:6e:9c:16: 4e:61:7b:d5:b6:b8:b5:01:29:0c:8e:68:5e:e1:05:55:8c:be: bf:f9:d8:c8:9a:f5:98:4b:c8:96:11:8b:0e:57:3b:07:8b:a0: e9:7a:89:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7o3IifGJpY/gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk OWQ5ZThkZWQtMzcyYS00MjgwLWEzMWEtOTRmMTJhZDNjZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBOGUtUkW2ioo4AnYsbKY7UJVApsRnzZEePk mOo3o18AMwmh7t3o1Pv3YnfqODut0p2G1b1wUgCTN3OhvF+8qNBSLAXb0W0ARkcf BJufNukShPAOn1+IsK/+RtND6gsGY/lLLysbmmbBMT21jKs6A5rz1Z9mGFsWq8TW xgg2U5J5tb5cN4DxUCrfH1Y5JrKPjjWCn7iEE5tTpzaD9/kHKE6z1VjIyweIM5eF jk6ulXwA1WeFwarjciLgnqBUxDcCRxQQpAqpAsfmS4Sx+deBDsu6OHI0fxPP7olz g1OFSygDTMoYHoZoDB8X/8IP6E5d359cX8QLH2rr5307nSOziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnTpBUf8v4yh2K1wPWygRs18aVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTY5ZDQyZTQtZjU1Ny0z ODU4LTk3NzMtNTFhMDU4MjZhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDFCKjraRdxfYMSgcEERJlfkDLB3+rkWib6BdMHN0c8JWwQQ1hffVAy WlRSJ6CXtPPg6ypcqQpSchYLCsTQe0BMhtlgKXdW4ryJuqrFDPIjsmpiyLKXX6s/ 33x716+3Zxq7+fGFmKXVNbCez5oFBr6fKbSnm6oUaJfXn9CVKczUx7kq1KuOmG1p lvWcpzOe1pP3X3wWk44KMBo8HgwP8PYwd2kAc2j0tie91FQ4E/eDgr8/q/X1S7i0 TKG8KhGo3Qj25b5qMX18N+hy95Zae/aZ8CPHaG6cFk5he9W2uLUBKQyOaF7hBVWM vr/52Mia9ZhLyJYRiw5XOweLoOl6icw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:12 2025 by rpki-client