$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa File: d1882f25-f49a-3a62-ba6e-ad528bca164c.roa (raw, json) Hash identifier: tVxg2Oc+rdVmuhvvlyZTKbppZq63/Yq1qM8HUn4uSuQ= Subject key identifier: 79:CE:4D:28:7E:30:1B:BF:56:78:19:9F:D2:36:A4:E6:B6:95:1C:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628E3FF8DBA7D70A8B0580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 132.145.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8e:3f:f8:db:a7:d7:0a:8b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=6e44d07a-2d52-4213-b6d5-c47e47c96901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:88:66:b3:01:3c:64:fa:8e:f6:cb:9f:d3: a1:16:13:a6:dd:92:c2:01:36:83:d7:a0:4b:11:a3: 89:48:4d:12:98:26:69:f8:fe:f5:dc:0b:06:f7:11: 16:21:da:67:57:7b:18:07:7c:46:32:2c:dd:81:8d: 81:6d:e7:fc:b6:fa:78:f9:fc:13:31:63:59:22:8a: 7e:ad:bd:2d:c4:1d:73:53:7c:93:3b:ce:14:89:f1: da:e9:95:4f:72:eb:ce:a9:c3:a9:99:86:39:be:51: 3b:58:22:dc:6d:22:0c:b8:e9:db:14:9c:2d:cc:e0: af:5b:38:89:52:37:73:8a:5e:d8:15:18:a2:60:51: 00:85:b5:ef:7f:82:eb:56:37:d8:d7:a5:3b:8f:2f: 2a:9e:71:97:bd:35:40:2a:ed:0b:06:47:0e:42:7d: 88:e5:cd:2f:8b:2d:30:0b:b7:96:fa:4c:09:d3:cb: 8a:78:1a:39:8f:79:6c:03:52:20:c1:e3:d5:d0:14: 40:b8:ae:12:d3:2b:98:d7:7d:f0:8d:0c:c9:81:ab: 47:25:6f:6c:13:49:40:87:94:4c:47:76:28:60:61: 39:a6:d6:c0:3d:d2:cb:d7:b4:34:c1:b4:8f:a8:d9: 17:85:14:6c:c1:1e:3e:22:f5:7e:bb:47:6a:8a:0b: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CE:4D:28:7E:30:1B:BF:56:78:19:9F:D2:36:A4:E6:B6:95:1C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d1882f25-f49a-3a62-ba6e-ad528bca164c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:38:f5:ea:b2:3c:3a:80:e9:7e:2f:14:f4:d1:88:01:6b:07: 90:53:29:9c:62:a7:6a:50:e0:87:ee:d2:68:bf:9e:2e:98:dd: 1a:ec:83:07:25:34:91:7a:c1:57:f5:a7:89:36:28:37:16:d4: 4d:df:3d:68:2c:56:78:6f:30:13:40:4f:27:11:e0:c4:8d:37: be:ad:bd:07:3c:26:f1:d4:4e:11:05:f1:39:f6:14:50:fb:57: f8:8c:19:63:98:60:91:49:1a:05:14:ec:a7:17:14:b1:f4:40: 6b:54:d3:37:3b:ab:5a:c3:8f:70:1a:78:a2:2d:3a:1a:f9:97: 45:d3:2a:68:1b:ba:6a:56:31:c2:54:e7:2d:02:20:e5:63:1d: 93:d9:fb:e8:34:be:a5:f3:cf:3d:6e:49:1e:3a:87:9b:f7:33: 2e:91:23:17:25:25:14:36:75:0b:f8:74:0a:69:18:36:05:b6: ce:ac:87:31:ec:52:3c:7e:ce:ca:e3:f1:e7:4e:5a:a9:0b:5d: 1e:5c:3c:f4:37:06:dd:a4:d0:4e:97:bc:4f:67:82:0b:d2:db: 2a:bd:86:13:a4:47:0d:ee:fc:45:65:fe:a6:e6:8b:74:4c:34: 95:b9:39:b1:45:98:52:2b:6d:ca:bb:38:96:4e:7b:a0:b5:38: 7b:a1:04:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo4/+Nun1wqLBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NmU0NGQwN2EtMmQ1Mi00MjEzLWI2ZDUtYzQ3ZTQ3Yzk2OTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgyIZrMBPGT6jvbLn9OhFhOm3ZLCATaD16BL EaOJSE0SmCZp+P713AsG9xEWIdpnV3sYB3xGMizdgY2Bbef8tvp4+fwTMWNZIop+ rb0txB1zU3yTO84UifHa6ZVPcuvOqcOpmYY5vlE7WCLcbSIMuOnbFJwtzOCvWziJ Ujdzil7YFRiiYFEAhbXvf4LrVjfY16U7jy8qnnGXvTVAKu0LBkcOQn2I5c0viy0w C7eW+kwJ08uKeBo5j3lsA1IgwePV0BRAuK4S0yuY133wjQzJgatHJW9sE0lAh5RM R3YoYGE5ptbAPdLL17Q0wbSPqNkXhRRswR4+IvV+u0dqigtYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnOTSh+MBu/VngZn9I2pOa2lRyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDE4ODJmMjUtZjQ5YS0z YTYyLWJhNmUtYWQ1MjhiY2ExNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhJHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ49eqyPDqA6X4vFPTRiAFrB5BTKZxip2pQ4Ifu0mi/ni6Y3Rrsgwcl NJF6wVf1p4k2KDcW1E3fPWgsVnhvMBNATycR4MSNN76tvQc8JvHUThEF8Tn2FFD7 V/iMGWOYYJFJGgUU7KcXFLH0QGtU0zc7q1rDj3AaeKItOhr5l0XTKmgbumpWMcJU 5y0CIOVjHZPZ++g0vqXzzz1uSR46h5v3My6RIxclJRQ2dQv4dAppGDYFts6shzHs Ujx+zsrj8edOWqkLXR5cPPQ3Bt2k0E6XvE9nggvS2yq9hhOkRw3u/EVl/qbmi3RM NJW5ObFFmFIrbcq7OJZOe6C1OHuhBKU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:33 2025 by rpki-client