$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa File: 6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa (raw, json) Hash identifier: VctUSQPuyTXOp3qjUziNT1dhNXkBZ7oD/QwJ6EuDZPs= Subject key identifier: A1:06:19:DC:DA:5F:5A:81:5B:36:51:D1:FD:01:1A:1E:C6:A3:DE:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF01277AD3BE1FB44B03DF1F8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa Signing time: Fri 22 Aug 2025 05:31:59 +0000 ROA not before: Fri 22 Aug 2025 05:31:59 +0000 ROA not after: Thu 20 Nov 2025 06:31:59 +0000 asID: 31898 IP address blocks: 129.146.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:77:ad:3b:e1:fb:44:b0:3d:f1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:31:59 2025 GMT Not After : Nov 20 06:31:59 2025 GMT Subject: CN=6919c2a6-f024-4d60-8bdb-03d95f111e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:ef:73:8f:73:c1:0e:1b:cf:bd:22:49:23: f6:00:6b:02:f0:5f:0d:e9:e3:f0:98:12:37:ad:38: 47:4c:9d:02:9c:b7:16:d3:48:c7:9e:05:1a:ab:ab: f4:79:51:ae:df:d7:72:4a:ca:c2:ad:d0:5d:d1:b8: 0d:6d:70:70:db:59:36:34:95:8a:d7:7d:12:ee:0c: 4e:e3:83:a9:9c:78:54:67:85:35:f4:46:07:d1:f8: c4:4d:17:6e:79:34:2d:63:93:65:91:ff:cc:25:ed: 9b:e6:51:da:57:85:51:9b:91:a7:0a:89:f9:3d:2c: e1:5d:6f:60:7d:28:c4:8e:93:86:01:29:2f:82:da: 5c:af:24:45:de:9d:91:76:2a:dc:4e:07:d1:95:68: 71:14:63:19:f0:11:09:a4:59:01:7a:ae:e2:33:fd: d6:85:0f:1c:06:9b:7c:e7:13:d3:85:87:e9:35:09: 21:ad:a5:d4:af:fe:68:36:0d:68:0c:1a:75:dd:29: aa:f3:c8:cf:b6:cb:3a:fc:c5:36:f0:1f:06:d3:35: 02:14:1e:7c:2f:43:75:0e:2c:aa:80:89:ef:cb:69: 9a:7b:90:31:06:14:6b:af:23:51:11:ff:f6:95:54: 5e:e4:fc:6a:91:63:ab:97:5b:d0:3e:5b:f5:b0:99: f1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:19:DC:DA:5F:5A:81:5B:36:51:D1:FD:01:1A:1E:C6:A3:DE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6df81085-d209-3b75-a5fd-e0d4b7b7378e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:93:66:91:74:00:0b:ad:ed:60:1f:f9:13:0f:24:f5:f6:df: ab:ce:e5:cf:90:48:fa:f6:60:86:6a:e9:dc:dc:90:20:29:ed: e0:c1:a1:42:17:99:5f:a8:7f:b3:65:c3:f0:59:ef:50:25:bb: 0a:84:76:2d:63:10:54:5b:f3:8c:80:97:39:6a:01:8f:6c:c4: 51:18:81:a5:35:65:54:b0:d9:a8:b6:eb:dc:19:e7:5d:fc:50: 0a:13:ce:6c:3e:aa:fe:2f:16:8c:98:44:9c:61:10:7d:e1:2b: b0:35:4d:ee:6d:b7:90:4b:b6:27:e3:61:38:2a:6e:e3:f8:50: d2:0b:5c:d3:87:7d:fc:77:ec:de:9e:f9:26:fc:ad:aa:d3:65: 67:6e:c0:12:fe:ef:9d:1c:d8:c0:43:cf:c1:1b:43:b0:5f:80: c4:3b:55:d4:83:cc:57:e8:d7:89:38:14:48:39:76:99:2e:e2: 16:b5:07:55:9e:2b:34:ab:c1:7a:83:c4:23:cb:d4:29:35:82: 90:80:c2:05:8b:c8:86:ce:e9:dd:98:6f:74:00:ce:e0:a5:d8: e6:e4:c3:b8:2b:10:10:45:1c:c2:9a:8c:c0:8b:3b:ad:2c:54: ff:35:aa:24:dc:29:7c:1f:f5:10:00:0e:2f:b0:02:7b:de:4c: 97:7b:ad:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEnetO+H7RLA98fgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzE1OVoXDTI1MTEyMDA2MzE1OVowLzEtMCsGA1UEAxMk NjkxOWMyYTYtZjAyNC00ZDYwLThiZGItMDNkOTVmMTExZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWXvc49zwQ4bz70iSSP2AGsC8F8N6ePwmBI3 rThHTJ0CnLcW00jHngUaq6v0eVGu39dySsrCrdBd0bgNbXBw21k2NJWK130S7gxO 44OpnHhUZ4U19EYH0fjETRdueTQtY5Nlkf/MJe2b5lHaV4VRm5GnCon5PSzhXW9g fSjEjpOGASkvgtpcryRF3p2RdircTgfRlWhxFGMZ8BEJpFkBeq7iM/3WhQ8cBpt8 5xPThYfpNQkhraXUr/5oNg1oDBp13Smq88jPtss6/MU28B8G0zUCFB58L0N1Diyq gInvy2mae5AxBhRrryNREf/2lVRe5PxqkWOrl1vQPlv1sJnxiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEGGdzaX1qBWzZR0f0BGh7Go94AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmRmODEwODUtZDIwOS0z Yjc1LWE1ZmQtZTBkNGI3YjczNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqTZpF0AAut7WAf+RMPJPX236vO5c+QSPr2YIZq6dzckCAp7eDBoUIX mV+of7Nlw/BZ71AluwqEdi1jEFRb84yAlzlqAY9sxFEYgaU1ZVSw2ai269wZ5138 UAoTzmw+qv4vFoyYRJxhEH3hK7A1Te5tt5BLtifjYTgqbuP4UNILXNOHffx37N6e +Sb8rarTZWduwBL+750c2MBDz8EbQ7BfgMQ7VdSDzFfo14k4FEg5dpku4ha1B1We KzSrwXqDxCPL1Ck1gpCAwgWLyIbO6d2Yb3QAzuCl2Obkw7grEBBFHMKajMCLO60s VP81qiTcKXwf9RAADi+wAnveTJd7rcc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:29 2025 by rpki-client