$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa File: a6379d20-6f01-316b-89b3-5a589ab59002.roa (raw, json) Hash identifier: VoewJw3ZGSBOjlLU+LauBiwRz56O5LPGMZwsiup3CVI= Subject key identifier: C5:AF:F7:FE:B0:D6:F0:24:3F:99:0D:F5:BB:A7:15:4F:E2:8A:8B:77 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97BA5689B6D5FC9444EDD0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.146.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ba:56:89:b6:d5:fc:94:44:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=bb3a7dd5-2f18-45b9-ab67-c56fe1a7308a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:81:d5:b5:52:03:79:d2:84:9d:b0:99:9c: 31:57:82:c2:2a:03:df:bb:e7:40:29:c5:f0:a6:d5: 97:55:b2:c2:ef:86:25:05:91:20:1f:1a:79:70:45: e9:ff:44:07:5f:68:73:7e:07:51:2b:6b:26:1c:6a: 9e:fa:49:ba:ea:91:97:c3:d7:b9:a1:b9:3a:eb:52: f9:d5:2e:ae:e2:dd:e6:a7:91:34:1a:bd:90:2c:7f: ca:10:f5:fd:30:bc:c2:94:98:3f:ff:39:e0:9c:ed: 5a:75:af:29:dd:d7:80:0e:77:f1:dd:30:b4:c6:83: b1:48:6b:14:55:34:c4:88:da:55:1a:32:47:90:25: 89:18:cc:ca:b5:31:08:a3:67:6d:09:1d:bf:63:99: db:35:b1:49:2f:2f:69:b7:86:49:1d:1b:98:36:30: f6:5f:36:16:60:8d:09:4a:a4:ab:43:9c:e4:04:71: e7:6d:9a:e1:f4:43:06:e2:f9:bd:a6:8d:8a:81:fb: 74:79:0d:c0:32:b0:16:7c:54:50:67:64:c1:93:9c: e1:58:e7:ac:b7:9b:62:3e:34:51:fa:77:a2:dc:32: 54:5d:42:ee:65:c4:73:fb:1d:ec:6d:82:1b:9d:15: f9:56:c4:3e:c6:24:0b:fd:d1:35:a2:a7:74:a7:c4: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:F7:FE:B0:D6:F0:24:3F:99:0D:F5:BB:A7:15:4F:E2:8A:8B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:34:c2:33:93:65:5c:c8:4d:00:09:28:ab:6f:d7:88:1e:bb: 45:a5:e4:cf:3f:44:d9:a5:26:f3:17:9d:05:85:76:94:60:a9: e2:23:a7:13:af:9e:02:db:4a:32:d1:05:20:31:cf:a0:5d:1b: 2d:9d:50:81:af:be:44:00:d6:47:60:f3:60:fb:73:bc:b1:ca: c9:b0:ee:be:72:84:49:e7:97:f9:d4:d6:1f:cc:38:a3:04:c5: 70:ba:2b:2a:f2:09:df:9d:9f:8e:a3:41:0f:28:f8:fd:d8:7d: ed:ad:44:50:3c:9a:4c:8a:2e:69:f5:6d:bd:ec:c6:6c:5a:0a: ef:c8:c6:f4:70:67:0f:90:ed:3a:87:77:28:fd:7a:67:59:d7: 82:96:df:5d:71:a1:55:fd:38:a5:4b:16:9b:2d:5d:2c:b4:8f: d8:2b:8e:89:c2:26:36:ee:e0:04:16:73:36:55:5b:01:6f:e1: 07:5f:67:b3:0c:cd:25:8f:49:8a:c9:85:05:c5:16:7e:fc:25: 33:14:8c:16:1b:d2:94:01:e6:71:ec:7b:eb:ae:97:a0:b8:39: cf:37:89:a9:2d:66:0f:7d:21:4f:9a:49:ed:84:66:7a:07:f9: b6:c9:53:ec:2d:d9:20:29:b0:f8:b5:a7:4a:4f:e7:65:45:8f: b0:8f:dc:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7pWibbV/JRE7dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YmIzYTdkZDUtMmYxOC00NWI5LWFiNjctYzU2ZmUxYTczMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNmB1bVSA3nShJ2wmZwxV4LCKgPfu+dAKcXw ptWXVbLC74YlBZEgHxp5cEXp/0QHX2hzfgdRK2smHGqe+km66pGXw9e5obk661L5 1S6u4t3mp5E0Gr2QLH/KEPX9MLzClJg//zngnO1ada8p3deADnfx3TC0xoOxSGsU VTTEiNpVGjJHkCWJGMzKtTEIo2dtCR2/Y5nbNbFJLy9pt4ZJHRuYNjD2XzYWYI0J SqSrQ5zkBHHnbZrh9EMG4vm9po2Kgft0eQ3AMrAWfFRQZ2TBk5zhWOest5tiPjRR +nei3DJUXULuZcRz+x3sbYIbnRX5VsQ+xiQL/dE1oqd0p8TZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWv9/6w1vAkP5kN9bunFU/iiot3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTYzNzlkMjAtNmYwMS0z MTZiLTg5YjMtNWE1ODlhYjU5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB80wjOTZVzITQAJKKtv14geu0Wl5M8/RNmlJvMXnQWFdpRgqeIjpxOv ngLbSjLRBSAxz6BdGy2dUIGvvkQA1kdg82D7c7yxysmw7r5yhEnnl/nU1h/MOKME xXC6KyryCd+dn46jQQ8o+P3Yfe2tRFA8mkyKLmn1bb3sxmxaCu/IxvRwZw+Q7TqH dyj9emdZ14KW311xoVX9OKVLFpstXSy0j9grjonCJjbu4AQWczZVWwFv4QdfZ7MM zSWPSYrJhQXFFn78JTMUjBYb0pQB5nHse+uul6C4Oc83iaktZg99IU+aSe2EZnoH +bbJU+wt2SApsPi1p0pP52VFj7CP3N8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:09 2025 by rpki-client