$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa File: 76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa (raw, json) Hash identifier: V7oVIr8JBs1h43UVpAVOr5ebfDXNLTU29qkdBDV8c0g= Subject key identifier: 3E:02:F2:41:F1:B5:11:89:B1:DB:AE:40:C8:9B:C2:A8:20:28:80:AC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013654C917FBE0E2F39B9A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa Signing time: Fri 22 Aug 2025 05:33:51 +0000 ROA not before: Fri 22 Aug 2025 05:33:51 +0000 ROA not after: Thu 20 Nov 2025 06:33:51 +0000 asID: 31898 IP address blocks: 129.146.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:65:4c:91:7f:be:0e:2f:39:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:33:51 2025 GMT Not After : Nov 20 06:33:51 2025 GMT Subject: CN=4bf6732a-f417-4ccb-b6df-55a52746e632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:35:c6:e4:cb:a8:ef:5a:ae:8b:6d:8e:55: a9:18:ba:dd:47:0d:4c:76:9e:f0:e3:18:e7:e7:ac: f1:dc:62:3a:c6:68:e6:1e:84:33:bb:aa:d6:70:42: 24:e9:98:45:c6:19:d0:b2:ab:b1:e5:2e:33:83:db: 37:ac:c1:97:d2:aa:63:33:9f:68:1f:29:17:2a:be: 59:ee:49:95:0e:fa:e7:13:26:98:35:42:3e:1a:04: 58:05:14:8f:2a:95:76:ab:9d:52:e9:85:e7:13:7b: ac:dd:ef:a3:9f:92:7e:da:1c:7a:c2:08:fd:ab:1c: d9:80:57:1d:86:65:80:54:af:5e:7f:cb:d6:36:e4: ba:41:ce:de:14:36:88:c1:d2:bc:80:85:8b:1f:ca: ae:27:13:ba:26:ff:a8:68:4d:f9:b4:33:b7:d5:78: 02:46:fc:39:3d:62:67:67:c2:ad:f5:a0:e9:3e:69: 61:b1:6e:a4:34:8d:38:3b:68:ce:0d:70:6a:07:71: 75:84:65:d8:fa:24:9f:a0:5a:3d:86:70:bf:dd:b9: 15:18:b8:75:5b:f8:10:11:c8:ec:bf:15:0b:bf:0d: 40:16:12:e2:61:11:af:99:46:4c:a2:76:8c:a2:56: 07:59:26:9c:09:06:ec:f5:83:aa:35:63:86:1c:c4: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:F2:41:F1:B5:11:89:B1:DB:AE:40:C8:9B:C2:A8:20:28:80:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/76f299d5-60cc-3294-ba42-4c7c70c2f1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:05:30:73:d7:d0:de:0d:35:47:83:36:2d:bc:b6:e3:21:d0: 67:dc:a0:89:70:82:28:e1:f2:18:99:a2:b8:e2:6e:d0:4b:e7: 6f:d1:fd:c5:af:53:28:b1:e0:ec:cc:21:8c:35:a1:1b:9b:23: e3:df:9e:91:bf:c0:d4:c0:33:18:34:32:50:f4:fd:0f:19:a9: 09:ae:e8:86:60:13:fd:b4:1f:d5:95:d6:21:56:a1:57:3a:af: ff:11:2a:cc:ab:01:b6:50:1e:03:88:2c:99:8d:6d:bd:01:56: dc:ae:d9:f6:11:e0:64:6d:e9:20:a1:44:2a:35:f8:cd:d8:12: 61:d3:a4:da:01:13:ea:9e:75:9f:7e:cc:ff:bc:54:ca:53:20: 29:a9:5c:1c:d6:ef:91:90:fc:ac:e9:78:33:93:12:82:12:81: ec:37:04:88:6e:7f:00:4e:f9:25:86:76:1f:b2:4a:2e:b8:15: 43:b4:ec:25:29:3e:63:75:0c:38:94:79:52:01:0f:59:39:a4: a3:6a:94:48:f6:94:57:35:ee:e4:1e:84:6a:9f:f9:21:52:4d: dd:87:2d:1a:7c:a9:99:a2:bb:02:79:8b:8b:55:a6:53:36:dc: df:e5:a1:b5:aa:f3:1b:c2:fe:50:b6:33:f9:74:77:7f:6d:c2: 33:d8:e8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE2VMkX++Di85uaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzM1MVoXDTI1MTEyMDA2MzM1MVowLzEtMCsGA1UEAxMk NGJmNjczMmEtZjQxNy00Y2NiLWI2ZGYtNTVhNTI3NDZlNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiho1xuTLqO9arottjlWpGLrdRw1Mdp7w4xjn 56zx3GI6xmjmHoQzu6rWcEIk6ZhFxhnQsqux5S4zg9s3rMGX0qpjM59oHykXKr5Z 7kmVDvrnEyaYNUI+GgRYBRSPKpV2q51S6YXnE3us3e+jn5J+2hx6wgj9qxzZgFcd hmWAVK9ef8vWNuS6Qc7eFDaIwdK8gIWLH8quJxO6Jv+oaE35tDO31XgCRvw5PWJn Z8Kt9aDpPmlhsW6kNI04O2jODXBqB3F1hGXY+iSfoFo9hnC/3bkVGLh1W/gQEcjs vxULvw1AFhLiYRGvmUZMonaMolYHWSacCQbs9YOqNWOGHMRiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4C8kHxtRGJsduuQMibwqggKICsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzZmMjk5ZDUtNjBjYy0z Mjk0LWJhNDItNGM3YzcwYzJmMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4FMHPX0N4NNUeDNi28tuMh0GfcoIlwgijh8hiZorjibtBL52/R/cWv Uyix4OzMIYw1oRubI+PfnpG/wNTAMxg0MlD0/Q8ZqQmu6IZgE/20H9WV1iFWoVc6 r/8RKsyrAbZQHgOILJmNbb0BVtyu2fYR4GRt6SChRCo1+M3YEmHTpNoBE+qedZ9+ zP+8VMpTICmpXBzW75GQ/KzpeDOTEoISgew3BIhufwBO+SWGdh+ySi64FUO07CUp PmN1DDiUeVIBD1k5pKNqlEj2lFc17uQehGqf+SFSTd2HLRp8qZmiuwJ5i4tVplM2 3N/lobWq8xvC/lC2M/l0d39twjPY6F4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:57:31 2025 by rpki-client