$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa File: c79b8866-260e-3927-bb66-7857e0a46fe2.roa (raw, json) Hash identifier: sjJ70C8ia/QJKji8bBLKJ+R8D3aLzNHSWODbAM00KxE= Subject key identifier: 80:92:6C:1E:34:93:3B:E9:DA:F8:11:35:05:EB:B5:47:99:0C:0E:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628EEC5C55DB581F94B700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.213.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:ec:5c:55:db:58:1f:94:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=dff5226a-c978-4f33-a20e-e555f9f379b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:18:86:c6:60:cd:77:8f:bd:c3:b9:90:b0: c5:cb:c4:c7:f6:ec:c6:08:f8:a6:a4:0f:93:c9:11: 89:ba:32:1d:4e:44:de:38:68:dc:88:b7:bb:e8:9c: 4e:de:84:f4:a0:78:46:e4:e0:2d:6e:43:d5:f0:bf: 83:5e:09:6d:a3:7e:46:44:fd:fb:a3:f7:18:e9:64: 1c:7e:93:eb:26:29:5d:38:0e:f3:6a:e5:14:c9:33: cc:e0:e0:44:25:80:07:89:4e:52:25:63:ed:38:96: eb:31:1f:12:15:e6:c8:65:58:44:eb:ac:17:ee:f2: 36:f7:f2:6a:ca:2f:2c:e7:79:03:25:1d:cd:8b:de: 62:4d:89:b9:1c:1a:e0:77:f1:3b:3b:ab:d3:65:9a: a9:b9:6f:e9:e5:68:a0:09:1e:11:27:21:01:cc:5c: 41:95:0c:16:04:0d:f7:b4:f0:58:a1:1e:10:78:a4: b4:82:2c:38:4b:31:3d:ce:b2:df:1e:95:a4:74:af: dc:72:c8:c5:b6:df:e8:9d:41:0f:46:d5:68:9a:f8: 50:95:46:c4:d5:5d:b0:e9:aa:b6:af:aa:13:9b:1d: 9c:69:16:6c:38:20:9a:36:ae:89:64:03:43:e2:96: 30:a1:5e:d7:9b:06:72:22:d1:92:ae:2c:9d:db:c7: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:92:6C:1E:34:93:3B:E9:DA:F8:11:35:05:EB:B5:47:99:0C:0E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:79:40:ae:29:21:f1:33:fd:10:4e:34:45:36:29:82:c3:90: 95:f5:b2:40:68:15:72:7f:c8:75:52:88:64:d6:ee:5e:c2:a5: 8f:98:40:e6:86:cb:f1:e9:c4:6a:71:01:94:6f:a1:3c:01:54: a5:76:63:7c:f0:c0:09:ae:73:0e:78:78:6a:e9:29:0f:e7:3c: c6:ee:f6:7a:96:a6:a0:47:65:83:27:55:59:08:6f:7a:5d:ce: 01:49:f0:16:25:79:42:1a:a8:78:80:ed:15:33:99:10:36:dc: 35:68:89:0f:51:8d:d1:36:1c:f2:3f:da:ed:72:8d:10:9d:a4: 5b:05:3b:7d:cd:31:33:dd:3a:f0:bb:90:91:c2:44:5e:8f:c8: 64:81:b8:5c:28:e8:df:6b:26:c7:cf:22:c0:e3:fa:90:95:55: 56:f0:a1:c9:02:b7:a1:86:f8:32:50:8b:bd:b3:07:73:5d:30: c1:03:6a:21:0f:77:75:0c:19:89:b8:4d:07:15:59:cd:b2:69: d9:c2:63:dc:60:a8:fa:e3:12:a9:7a:28:47:36:98:45:55:96: 75:c4:d8:cf:e7:fd:6c:07:dc:55:db:77:3b:ae:e6:a5:18:c4: bd:f8:69:bf:1c:5b:8c:44:31:af:d4:84:74:a3:3e:6a:ab:3e: 6f:41:5b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo7sXFXbWB+UtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZGZmNTIyNmEtYzk3OC00ZjMzLWEyMGUtZTU1NWY5ZjM3OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ0YhsZgzXePvcO5kLDFy8TH9uzGCPimpA+T yRGJujIdTkTeOGjciLe76JxO3oT0oHhG5OAtbkPV8L+DXglto35GRP37o/cY6WQc fpPrJildOA7zauUUyTPM4OBEJYAHiU5SJWPtOJbrMR8SFebIZVhE66wX7vI29/Jq yi8s53kDJR3Ni95iTYm5HBrgd/E7O6vTZZqpuW/p5WigCR4RJyEBzFxBlQwWBA33 tPBYoR4QeKS0giw4SzE9zrLfHpWkdK/ccsjFtt/onUEPRtVomvhQlUbE1V2w6aq2 r6oTmx2caRZsOCCaNq6JZAND4pYwoV7XmwZyItGSriyd28cQJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICSbB40kzvp2vgRNQXrtUeZDA6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzc5Yjg4NjYtMjYwZS0z OTI3LWJiNjYtNzg1N2UwYTQ2ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN5QK4pIfEz/RBONEU2KYLDkJX1skBoFXJ/yHVSiGTW7l7CpY+YQOaG y/HpxGpxAZRvoTwBVKV2Y3zwwAmucw54eGrpKQ/nPMbu9nqWpqBHZYMnVVkIb3pd zgFJ8BYleUIaqHiA7RUzmRA23DVoiQ9RjdE2HPI/2u1yjRCdpFsFO33NMTPdOvC7 kJHCRF6PyGSBuFwo6N9rJsfPIsDj+pCVVVbwockCt6GG+DJQi72zB3NdMMEDaiEP d3UMGYm4TQcVWc2yadnCY9xgqPrjEql6KEc2mEVVlnXE2M/n/WwH3FXbdzuu5qUY xL34ab8cW4xEMa/UhHSjPmqrPm9BW1E= -----END CERTIFICATE-----Generated at Wed Nov 5 18:12:15 2025 by rpki-client