$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa File: 68ee1f7e-77c2-382c-be5e-750448718bd9.roa (raw, json) Hash identifier: PCqnC+wpzRWS12ViyC3M6u61B1JPZmk2L8ftD3bcAwU= Subject key identifier: 60:ED:90:78:98:11:5C:10:20:AC:57:38:EC:48:5D:76:A1:E9:CD:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE406316E48B0F043676CD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.154.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:63:16:e4:8b:0f:04:36:76:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0e0bee86-4f3d-4acc-9d24-bde2aa44beb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6c:42:d8:22:29:5b:3c:86:ff:98:b1:57:11: a9:d0:0b:0d:f3:e9:45:8f:40:2e:9e:b4:84:75:11: a0:3d:8e:5d:ea:c0:ff:69:20:83:f4:6f:a8:76:55: 7e:13:f0:fe:55:21:7e:01:17:fe:0f:fe:55:97:3f: 25:42:fb:e2:fc:22:12:36:ac:d5:e8:ff:e7:e8:64: 8e:f5:33:34:bb:98:b3:ad:ce:53:de:48:98:af:ec: 5f:7e:ca:70:7c:99:22:02:0b:46:43:b7:3b:62:90: 85:51:96:7f:62:d7:e0:7f:31:78:98:03:fe:b3:f9: 19:6a:30:df:8a:62:97:b3:fe:59:9f:aa:f3:6f:6b: 6d:f9:1a:76:c4:6a:61:12:e5:d9:62:85:48:f8:4c: 52:69:7f:03:60:0a:da:7a:90:f6:a3:4d:fc:d0:68: 2a:1a:4a:9f:50:32:b5:66:a9:0a:41:85:94:10:78: ec:b4:6e:4d:cf:56:da:c0:79:ea:2b:3c:b4:a8:35: af:81:a2:d2:90:d8:b7:34:9e:11:19:9a:dd:0d:c0: ac:27:e1:1e:ed:1f:34:1b:c3:88:86:92:1d:a2:8d: 40:b2:8a:b7:1d:78:85:30:0a:52:c9:01:49:82:29: 99:8b:df:20:28:88:03:6e:c7:7d:f2:97:ad:63:59: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:90:78:98:11:5C:10:20:AC:57:38:EC:48:5D:76:A1:E9:CD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68ee1f7e-77c2-382c-be5e-750448718bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:69:04:ac:10:14:83:75:c5:3c:50:f5:e2:cf:42:c0:98:c5: dd:ca:59:11:46:83:4e:82:3c:07:f3:14:6f:f4:46:4b:87:aa: 1b:77:93:e1:b5:78:2e:80:d6:84:fb:b5:3a:9f:d9:df:e4:db: b1:8c:c2:74:b8:1a:fa:57:63:97:b6:ab:7e:be:d7:42:b7:75: 35:6c:2b:ef:53:ac:80:e6:e6:55:06:21:95:e6:db:e4:85:3d: 5c:ef:d9:98:4c:85:3a:e7:7a:a3:79:d7:0a:6c:fb:6c:47:12: c4:77:bf:be:a5:0e:d8:23:b0:1b:91:e0:d9:dd:f4:12:d1:55: 9e:59:2f:7a:75:cf:b6:8b:c6:74:a2:3c:8e:c3:de:33:53:17: d5:95:cf:ab:f3:e3:bc:e2:12:52:bf:9f:c2:8d:c6:88:c4:e0: 8d:c1:92:2d:f0:32:60:03:24:ba:dd:2c:f5:1d:7c:b5:57:89: 00:57:6b:b8:22:ef:81:44:97:7f:79:86:ab:68:c4:e0:9f:19: 24:b0:c6:81:cd:0a:51:e4:65:9c:fb:54:c0:5f:cb:5c:ce:c3: 6b:b3:85:ec:f9:8e:4a:0e:07:89:5e:62:e8:99:ba:eb:5e:0d: 6f:6f:fc:c8:02:c9:d3:ea:f0:15:4c:b2:fd:63:0d:48:45:38: e4:18:2f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGMW5IsPBDZ2zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGUwYmVlODYtNGYzZC00YWNjLTlkMjQtYmRlMmFhNDRiZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2xC2CIpWzyG/5ixVxGp0AsN8+lFj0AunrSE dRGgPY5d6sD/aSCD9G+odlV+E/D+VSF+ARf+D/5Vlz8lQvvi/CISNqzV6P/n6GSO 9TM0u5izrc5T3kiYr+xffspwfJkiAgtGQ7c7YpCFUZZ/YtfgfzF4mAP+s/kZajDf imKXs/5Zn6rzb2tt+Rp2xGphEuXZYoVI+ExSaX8DYAraepD2o0380GgqGkqfUDK1 ZqkKQYWUEHjstG5Nz1bawHnqKzy0qDWvgaLSkNi3NJ4RGZrdDcCsJ+Ee7R80G8OI hpIdoo1Asoq3HXiFMApSyQFJgimZi98gKIgDbsd98petY1mudwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDtkHiYEVwQIKxXOOxIXXah6c1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjhlZTFmN2UtNzdjMi0z ODJjLWJlNWUtNzUwNDQ4NzE4YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJpBKwQFIN1xTxQ9eLPQsCYxd3KWRFGg06CPAfzFG/0RkuHqht3k+G1 eC6A1oT7tTqf2d/k27GMwnS4GvpXY5e2q36+10K3dTVsK+9TrIDm5lUGIZXm2+SF PVzv2ZhMhTrneqN51wps+2xHEsR3v76lDtgjsBuR4Nnd9BLRVZ5ZL3p1z7aLxnSi PI7D3jNTF9WVz6vz47ziElK/n8KNxojE4I3Bki3wMmADJLrdLPUdfLVXiQBXa7gi 74FEl395hqtoxOCfGSSwxoHNClHkZZz7VMBfy1zOw2uzhez5jkoOB4leYuiZuute DW9v/MgCydPq8BVMsv1jDUhFOOQYLzQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:29 2025 by rpki-client