$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa File: 66dd902d-1643-3da7-8d26-aa9de0264773.roa (raw, json) Hash identifier: jzXfaiez8XJIiAvIHnmyB3355Ir+kYVD4Ti8QR+gCX4= Subject key identifier: 2C:0C:C6:ED:2D:CF:A3:C3:80:7F:62:82:92:38:B3:C9:C9:CB:D0:FC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97B9689359FA58D14D3FC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.153.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b9:68:93:59:fa:58:d1:4d:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=47a3f2f8-c68e-4ce9-88c4-94b6fb16a0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:32:32:7f:f8:0a:f3:8a:50:d9:e5:25:11: c8:98:c5:1b:16:4c:2d:b8:43:fa:e2:9d:1a:2b:99: 7d:29:b1:e3:c7:56:4b:61:c6:57:eb:2c:ee:e9:68: f0:de:19:f3:21:0e:6f:c6:49:35:c1:3b:db:3c:ec: 2f:2a:6d:6c:08:c0:c2:f6:86:32:9f:e1:67:99:a6: 21:50:40:54:44:73:b4:7d:ab:7c:37:ea:7d:8f:72: e1:92:c9:bd:85:3c:74:3d:62:78:16:4f:05:20:6a: 8e:3f:a0:cd:ed:bd:6a:52:bd:63:4c:b4:d0:d5:0b: 50:24:cf:1e:85:0a:1c:07:95:ec:e6:7b:b9:c1:ba: 35:f5:1b:b1:9a:b7:d9:db:ae:14:64:b6:d3:80:09: db:0a:89:c9:ac:ac:0b:18:e2:d9:05:eb:bf:a3:c2: 8c:72:dc:e3:a4:00:32:b7:9b:f2:ca:7d:5e:96:e9: 17:30:de:5e:dd:85:ee:77:d2:75:79:89:89:ab:5c: 2d:04:48:21:9e:ff:94:6e:1d:aa:58:0b:a6:1e:8b: dc:83:c3:7c:e6:95:4b:63:0d:76:9f:2a:5c:cf:4b: bd:ef:bb:68:75:54:45:3d:10:2c:90:ca:24:2f:fa: 58:b3:be:9c:88:90:81:a5:15:7f:5a:3d:55:11:38: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:C6:ED:2D:CF:A3:C3:80:7F:62:82:92:38:B3:C9:C9:CB:D0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:62:11:e8:7f:3b:85:6d:89:eb:90:bf:16:67:19:43:02: a5:df:f3:cf:ab:aa:e0:c6:66:48:1c:c0:6f:c1:fb:10:8f:e1: b1:59:22:4a:9e:97:e4:99:a7:07:b3:0f:89:23:78:a6:70:19: d8:ad:ba:99:b3:f6:b0:ad:0e:ec:e0:aa:18:ea:7d:f1:fb:ce: c5:25:36:4d:cd:2f:38:6f:66:3c:35:54:9d:18:67:79:2f:cb: 0b:c3:e3:34:a7:a9:63:e4:58:54:4b:e4:9c:f4:c1:96:6e:07: db:c5:b0:38:6e:b9:14:38:35:10:4e:c3:fc:5c:f8:25:b6:d7: 6f:54:00:39:8b:2b:9f:82:a8:80:0c:ba:f4:7d:fa:ef:1b:7a: f0:03:bd:56:36:43:ba:84:0d:0e:13:dc:a4:2b:ae:3a:b1:a7: ef:11:4b:2a:52:e8:ac:63:ef:95:0d:0e:a6:14:0b:42:6f:7d: 4f:d5:f7:45:35:35:40:37:3c:99:3d:f8:f7:6a:75:11:0d:6a: 29:70:14:15:63:0e:bb:5b:8a:97:ae:93:e8:f9:b9:3b:96:d8: 4b:fe:17:55:11:b2:f0:c8:15:69:e5:08:28:6f:0d:23:2b:f7: 6b:26:44:0c:6f:db:78:b6:ca:f6:b5:3e:22:70:d9:09:97:89: ae:21:a0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7lok1n6WNFNP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NDdhM2YyZjgtYzY4ZS00Y2U5LTg4YzQtOTRiNmZiMTZhMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TwyMn/4CvOKUNnlJRHImMUbFkwtuEP64p0a K5l9KbHjx1ZLYcZX6yzu6Wjw3hnzIQ5vxkk1wTvbPOwvKm1sCMDC9oYyn+FnmaYh UEBURHO0fat8N+p9j3Lhksm9hTx0PWJ4Fk8FIGqOP6DN7b1qUr1jTLTQ1QtQJM8e hQocB5Xs5nu5wbo19RuxmrfZ264UZLbTgAnbConJrKwLGOLZBeu/o8KMctzjpAAy t5vyyn1elukXMN5e3YXud9J1eYmJq1wtBEghnv+Ubh2qWAumHovcg8N85pVLYw12 nypcz0u977todVRFPRAskMokL/pYs76ciJCBpRV/Wj1VETiWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwMxu0tz6PDgH9igpI4s8nJy9D8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjZkZDkwMmQtMTY0My0z ZGE3LThkMjYtYWE5ZGUwMjY0NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGtYhHofzuFbYnrkL8WZxlDAqXf88+rquDGZkgcwG/B+xCP4bFZIkqe l+SZpwezD4kjeKZwGditupmz9rCtDuzgqhjqffH7zsUlNk3NLzhvZjw1VJ0YZ3kv ywvD4zSnqWPkWFRL5Jz0wZZuB9vFsDhuuRQ4NRBOw/xc+CW2129UADmLK5+CqIAM uvR9+u8bevADvVY2Q7qEDQ4T3KQrrjqxp+8RSypS6Kxj75UNDqYUC0JvfU/V90U1 NUA3PJk9+PdqdRENailwFBVjDrtbipeuk+j5uTuW2Ev+F1URsvDIFWnlCChvDSMr 92smRAxv23i2yva1PiJw2QmXia4hoAA= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:49 2025 by rpki-client