$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa File: d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa (raw, json) Hash identifier: RQ/F4OWpfMbsDVoz/gtC38tCKhEXsD3P0hr6qcvPZPA= Subject key identifier: 3F:6F:A9:62:B5:5F:70:95:E8:85:6C:A1:CD:18:DE:5E:11:FC:6B:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97BA8DD95ADD3BAAC39EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.146.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ba:8d:d9:5a:dd:3b:aa:c3:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=f412b87d-6a6c-4170-9482-1d7b8aaa372a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:49:73:60:84:94:bf:b3:c7:3c:27:ad:c6: a4:f7:91:76:7b:4f:e7:02:be:cf:a1:56:ac:d5:64: 65:e7:4d:49:2e:48:96:0b:ff:b1:59:46:f2:43:6c: a8:e2:68:2c:ed:6f:c4:9a:50:e3:e8:d0:b7:6f:05: cf:26:86:12:df:89:8c:78:b5:32:0d:f0:c0:f3:fe: 4b:db:b9:56:86:1b:2d:47:ff:45:86:0f:c2:ac:a7: 93:e2:78:9e:fe:aa:68:c5:67:57:74:98:3c:2b:3d: 28:e9:36:86:26:89:49:8f:8d:77:ec:bf:22:22:50: c1:89:45:94:13:98:42:22:85:20:01:ad:ab:75:a7: e9:49:51:f6:d6:27:21:00:1c:24:1b:43:1d:fe:7e: ed:76:0e:76:b6:0e:53:8a:8e:9b:f7:ac:92:4f:dd: d3:0a:b6:f2:5b:96:4b:ee:66:b5:b3:28:72:05:d2: 2a:a8:f9:9d:31:55:9e:16:15:4a:51:f3:8f:9d:ef: c0:37:75:30:44:ff:a6:28:9a:51:c3:02:c0:1d:21: 06:ad:4f:24:ea:78:a4:67:3e:89:4a:c3:72:ee:a4: e1:18:f5:67:76:33:3f:ff:b2:7f:fc:15:97:6f:e5: 08:3f:21:db:1f:9c:d3:64:d7:26:29:2e:d3:78:8d: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:A9:62:B5:5F:70:95:E8:85:6C:A1:CD:18:DE:5E:11:FC:6B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d261dd53-1dbf-31a0-9a52-37789dd7de5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:af:b6:af:ad:72:fa:dd:21:23:ec:32:48:69:28:69:aa:0b: 58:b4:59:10:e5:d1:8f:94:c5:1c:66:20:1c:92:7f:7e:fd:e5: ab:e6:59:c6:19:df:5a:d2:80:cf:4b:c4:65:30:dc:fc:c9:07: b6:e3:5c:37:69:1f:26:30:37:0d:5b:32:18:8c:b4:39:e9:d4: 3e:85:e0:c2:35:93:85:ce:1e:41:4c:4c:67:eb:d8:2c:71:08: 59:95:83:e9:36:59:94:c2:06:c3:81:65:66:f4:6d:ed:36:31: 83:e0:ff:88:c0:f9:c8:f9:46:06:79:63:98:1b:ab:72:ed:d4: 93:ff:a4:c5:07:48:de:7c:d6:35:75:34:97:09:45:20:4c:2e: d4:f2:65:c9:55:45:ea:c3:8e:b2:95:c0:5f:ed:31:1f:d7:58: c5:7f:c0:e4:1b:fb:73:4d:5b:06:1f:17:bd:3e:12:26:b1:43: f8:f6:87:93:57:79:51:81:96:c8:1e:2a:54:fa:cb:aa:ce:c4: 48:70:71:a8:3e:dc:ae:d2:7d:6c:61:41:66:25:cf:2d:0a:d0: 2e:9b:20:1d:1f:41:f6:f2:af:d5:89:4f:7c:29:ca:a7:77:f4: e9:eb:11:27:07:e0:77:33:67:8e:19:13:52:da:29:3e:72:ad: a8:ea:df:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7qN2VrdO6rDnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZjQxMmI4N2QtNmE2Yy00MTcwLTk0ODItMWQ3YjhhYWEzNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5dJc2CElL+zxzwnrcak95F2e0/nAr7PoVas 1WRl501JLkiWC/+xWUbyQ2yo4mgs7W/EmlDj6NC3bwXPJoYS34mMeLUyDfDA8/5L 27lWhhstR/9Fhg/CrKeT4nie/qpoxWdXdJg8Kz0o6TaGJolJj4137L8iIlDBiUWU E5hCIoUgAa2rdafpSVH21ichABwkG0Md/n7tdg52tg5Tio6b96yST93TCrbyW5ZL 7ma1syhyBdIqqPmdMVWeFhVKUfOPne/AN3UwRP+mKJpRwwLAHSEGrU8k6nikZz6J SsNy7qThGPVndjM//7J//BWXb+UIPyHbH5zTZNcmKS7TeI0w5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9vqWK1X3CV6IVsoc0Y3l4R/GuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDI2MWRkNTMtMWRiZi0z MWEwLTlhNTItMzc3ODlkZDdkZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6vtq+tcvrdISPsMkhpKGmqC1i0WRDl0Y+UxRxmIBySf3795avmWcYZ 31rSgM9LxGUw3PzJB7bjXDdpHyYwNw1bMhiMtDnp1D6F4MI1k4XOHkFMTGfr2Cxx CFmVg+k2WZTCBsOBZWb0be02MYPg/4jA+cj5RgZ5Y5gbq3Lt1JP/pMUHSN581jV1 NJcJRSBMLtTyZclVRerDjrKVwF/tMR/XWMV/wOQb+3NNWwYfF70+EiaxQ/j2h5NX eVGBlsgeKlT6y6rOxEhwcag+3K7SfWxhQWYlzy0K0C6bIB0fQfbyr9WJT3wpyqd3 9OnrEScH4HczZ44ZE1LaKT5yrajq3/o= -----END CERTIFICATE-----Generated at Wed Nov 5 07:07:51 2025 by rpki-client