$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa File: c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa (raw, json) Hash identifier: Fj3tOrkPBZ22+9ubLc6vdL8ApefP+/wMQXo+NkF1xNg= Subject key identifier: 85:D4:1C:26:12:D4:D5:F6:95:61:EE:1A:A9:63:97:CE:5A:26:02:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BBE4063387ECC71324EEA12C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.159.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:63:38:7e:cc:71:32:4e:ea:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=02ad8ddc-91a9-4dcd-8163-53f440e2ba3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:be:45:22:62:72:09:ff:b7:6e:05:66:65: 25:fa:d3:d0:67:8f:7c:2f:a5:aa:54:0e:76:5e:eb: 81:16:4d:d1:25:82:3a:ed:0e:60:07:81:ff:07:a5: a3:dd:21:ab:d4:ee:2d:71:f4:8d:c2:78:5e:8a:11: f8:94:88:40:cd:08:c0:51:9e:d5:8c:45:c9:fa:38: 65:59:d1:c3:2f:8f:8c:28:3e:80:40:10:3e:d8:d7: 21:62:c4:25:38:6a:2a:67:e0:6a:34:c1:82:db:03: 4d:23:70:e1:fc:fd:db:b7:92:3d:da:f9:eb:fc:3a: a2:1c:2a:52:5a:3c:0a:78:c9:49:45:bd:e9:d4:7a: 12:69:3d:1f:80:ce:62:8c:2d:4c:7e:06:97:d7:15: 86:55:7b:4d:76:89:87:93:a1:e0:2c:95:eb:66:b3: 07:5f:dd:59:c3:64:80:91:97:69:ad:a4:a0:db:f1: c6:0a:0b:b3:91:37:40:fe:3e:e8:82:b6:d5:ff:e5: 3f:a1:77:a5:69:ea:52:9a:fa:8c:48:e5:dc:3a:4a: 21:0d:39:b0:c3:ce:b6:04:9d:fa:61:a5:4b:76:b8: 45:f7:43:a7:69:d8:78:1c:36:54:87:eb:43:31:3d: 1a:9f:3c:1c:e1:8e:01:ba:de:c5:55:07:3a:c5:1e: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:1C:26:12:D4:D5:F6:95:61:EE:1A:A9:63:97:CE:5A:26:02:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c148938c-9fd2-3bf4-9820-c517f8cfd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fe:aa:ed:0b:cc:c5:13:e0:39:19:50:f3:a0:a0:1f:ce:52: 5c:cc:7c:2e:a7:72:4b:ea:4e:ec:4b:d9:d9:b7:bf:00:a6:58: 08:51:c7:2b:f3:36:6c:1b:3b:26:03:e3:60:82:82:19:8d:4a: 89:74:a3:0d:98:c0:df:4a:0f:07:85:c1:d1:68:31:3d:ed:bb: 82:7a:57:bb:4f:39:1c:ee:c9:81:ee:70:75:46:85:a6:35:8d: 55:a0:d5:01:45:29:7a:d8:25:29:75:17:b5:2c:c6:92:cb:96: 88:23:78:33:70:e3:18:83:e6:7a:e3:2c:5c:56:45:5a:e9:78: d2:2f:e9:38:c1:dd:71:85:79:5a:5d:b0:86:b2:54:ba:e1:92: 54:8d:d6:9c:a7:23:58:27:78:69:6b:86:f2:85:b6:e6:78:94: b4:8f:19:94:12:14:1c:a3:6f:23:59:46:fd:70:33:83:27:84: 71:31:49:28:71:a8:31:87:a5:af:88:08:e8:52:ed:c7:e3:84: a4:67:9d:86:a9:31:cb:06:48:25:48:86:1d:11:16:8a:a8:a0: 34:27:7e:bb:7b:50:75:a8:fb:f5:ba:3d:c0:3c:7c:e8:f5:dc: 3a:25:4f:a6:ef:47:58:12:39:47:1e:b1:c4:ed:2b:4d:1e:b4: a8:d9:8e:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGM4fsxxMk7qEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MDJhZDhkZGMtOTFhOS00ZGNkLTgxNjMtNTNmNDQwZTJiYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQi+RSJicgn/t24FZmUl+tPQZ498L6WqVA52 XuuBFk3RJYI67Q5gB4H/B6Wj3SGr1O4tcfSNwnheihH4lIhAzQjAUZ7VjEXJ+jhl WdHDL4+MKD6AQBA+2NchYsQlOGoqZ+BqNMGC2wNNI3Dh/P3bt5I92vnr/DqiHCpS WjwKeMlJRb3p1HoSaT0fgM5ijC1MfgaX1xWGVXtNdomHk6HgLJXrZrMHX91Zw2SA kZdpraSg2/HGCguzkTdA/j7ogrbV/+U/oXelaepSmvqMSOXcOkohDTmww862BJ36 YaVLdrhF90Onadh4HDZUh+tDMT0anzwc4Y4But7FVQc6xR6gTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXUHCYS1NX2lWHuGqljl85aJgJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzE0ODkzOGMtOWZkMi0z YmY0LTk4MjAtYzUxN2Y4Y2ZkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7+qu0LzMUT4DkZUPOgoB/OUlzMfC6nckvqTuxL2dm3vwCmWAhRxyvz NmwbOyYD42CCghmNSol0ow2YwN9KDweFwdFoMT3tu4J6V7tPORzuyYHucHVGhaY1 jVWg1QFFKXrYJSl1F7UsxpLLlogjeDNw4xiD5nrjLFxWRVrpeNIv6TjB3XGFeVpd sIayVLrhklSN1pynI1gneGlrhvKFtuZ4lLSPGZQSFByjbyNZRv1wM4MnhHExSShx qDGHpa+ICOhS7cfjhKRnnYapMcsGSCVIhh0RFoqooDQnfrt7UHWo+/W6PcA8fOj1 3DolT6bvR1gSOUcescTtK00etKjZjp8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:05:54 2025 by rpki-client