$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa File: 5a078424-61f2-3260-b0fc-cb1113530fdf.roa (raw, json) Hash identifier: PB8WpQJJKTKPTm6Dwuwd9WPAhZoR+k87627+xaA1aTs= Subject key identifier: 30:0D:EE:4A:60:D6:15:F1:CF:D6:3F:60:29:88:69:DF:D4:C5:2E:0E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628EFEC103D01C8A71B018 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.213.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:fe:c1:03:d0:1c:8a:71:b0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5636837c-374a-444d-b86b-9d1bfec93543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:de:64:73:7e:bd:4a:a6:20:fc:2e:73:e4: 8e:e1:ee:26:4c:09:b9:d8:ae:8f:0a:cc:c9:9f:76: e3:73:ee:f0:2d:ba:a3:f8:1a:e5:3a:2b:eb:41:19: 9e:5a:a6:7b:a5:4e:54:83:09:47:68:77:83:fc:09: 71:b6:26:2d:c2:25:45:80:2b:63:3b:b7:cf:29:18: 7c:f5:99:41:c1:88:65:08:4e:44:2c:45:53:d0:56: 97:e2:4c:e5:84:2c:f5:d2:5b:de:18:15:c1:2e:49: 46:74:a5:3c:97:3c:bf:ba:a4:0e:3e:dd:67:ab:f1: 84:fe:25:72:68:6f:9c:5c:a7:8f:18:3d:f5:65:12: 01:c6:0c:fc:0e:73:93:96:c3:4d:b8:a4:f6:70:9a: 4e:75:11:0e:cd:51:ba:ae:7f:3b:09:71:fd:11:01: c1:9c:d2:4e:99:41:8a:22:5c:b9:7b:99:09:b7:47: 26:75:f1:1c:32:88:7c:cb:ec:20:3a:36:fd:d6:46: ec:f4:d1:4c:2f:f0:02:b9:d3:7d:b7:ca:1f:42:dc: 63:b9:0b:56:e8:bc:52:ae:c8:4a:1c:49:5a:4d:82: ae:a4:4e:fd:e8:91:11:03:79:a7:47:7c:ac:0d:f7: 74:88:a6:24:2c:f5:c7:c8:1a:a7:e7:2a:73:df:cc: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0D:EE:4A:60:D6:15:F1:CF:D6:3F:60:29:88:69:DF:D4:C5:2E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7c:b6:46:16:95:63:5d:58:04:25:45:8e:9a:ba:76:12:40: cf:e1:3e:6b:9f:91:47:cf:59:d5:f5:18:75:f4:67:3c:d9:1b: 42:7f:fd:2c:01:1a:45:84:21:5a:5a:9e:38:5a:b7:a9:90:37: bc:b7:7c:16:20:c5:6f:83:fc:33:17:fb:28:fd:2c:89:4f:5f: 03:f1:bf:d7:cb:7a:53:52:a9:af:ed:8f:0c:06:d3:bb:e3:36: 74:d7:50:18:be:66:7f:3d:9e:b7:2a:80:13:36:56:cc:60:10: b8:a3:43:1a:69:5d:7b:68:79:1a:80:c8:f4:ad:c8:14:b3:51: 56:36:ad:7f:d5:29:a9:52:eb:4b:5d:d1:43:c1:fd:ba:19:f0: 82:e4:ba:7a:6c:e5:24:97:40:0d:9e:59:88:48:11:85:a1:06: 02:a9:69:03:5d:42:8d:0d:98:60:0f:99:4a:f7:b8:4e:7d:f1: bd:0e:a7:4a:54:a4:8b:d5:15:35:3b:94:63:0c:48:c0:95:24: 35:c3:92:12:cb:a4:cb:7c:42:d0:9f:4e:09:e3:71:dd:67:76: 3f:cd:01:12:7c:88:1b:db:c8:cb:7a:fe:fa:f7:cb:44:72:5f: b0:54:0b:c2:08:5f:4c:36:53:97:d5:ae:13:59:0e:37:45:38: 90:40:71:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo7+wQPQHIpxsBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NTYzNjgzN2MtMzc0YS00NDRkLWI4NmItOWQxYmZlYzkzNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbveZHN+vUqmIPwuc+SO4e4mTAm52K6PCszJ n3bjc+7wLbqj+BrlOivrQRmeWqZ7pU5UgwlHaHeD/AlxtiYtwiVFgCtjO7fPKRh8 9ZlBwYhlCE5ELEVT0FaX4kzlhCz10lveGBXBLklGdKU8lzy/uqQOPt1nq/GE/iVy aG+cXKePGD31ZRIBxgz8DnOTlsNNuKT2cJpOdREOzVG6rn87CXH9EQHBnNJOmUGK Ily5e5kJt0cmdfEcMoh8y+wgOjb91kbs9NFML/ACudN9t8ofQtxjuQtW6LxSrshK HElaTYKupE796JERA3mnR3ysDfd0iKYkLPXHyBqn5ypz38yfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAN7kpg1hXxz9Y/YCmIad/UxS4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWEwNzg0MjQtNjFmMi0z MjYwLWIwZmMtY2IxMTEzNTMwZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx8tkYWlWNdWAQlRY6aunYSQM/hPmufkUfPWdX1GHX0ZzzZG0J//SwB GkWEIVpanjhat6mQN7y3fBYgxW+D/DMX+yj9LIlPXwPxv9fLelNSqa/tjwwG07vj NnTXUBi+Zn89nrcqgBM2VsxgELijQxppXXtoeRqAyPStyBSzUVY2rX/VKalS60td 0UPB/boZ8ILkunps5SSXQA2eWYhIEYWhBgKpaQNdQo0NmGAPmUr3uE598b0Op0pU pIvVFTU7lGMMSMCVJDXDkhLLpMt8QtCfTgnjcd1ndj/NARJ8iBvbyMt6/vr3y0Ry X7BUC8IIX0w2U5fVrhNZDjdFOJBAcWc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:05 2025 by rpki-client