$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2c1ec21-e971-3f16-8965-370f384fd5b2.roa File: d2c1ec21-e971-3f16-8965-370f384fd5b2.roa (raw, json) Hash identifier: 1uDN2VuVjZ3Avh+IXhbH/zYwc6oIhAyXMP/yXE50oJg= Subject key identifier: 92:71:3F:6D:54:C1:F7:09:8C:5F:5A:41:66:C4:AC:0D:DB:35:BD:0E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAA97BA68F8EF59D382E46A40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2c1ec21-e971-3f16-8965-370f384fd5b2.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.146.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:ba:68:f8:ef:59:d3:82:e4:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c635b101-9b71-4856-b9cc-7647c79adfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:86:6d:20:51:7e:69:63:4b:65:57:47:78: 10:31:2c:a0:8c:2b:ca:9a:01:a9:a7:4a:37:dd:96: 3b:ab:4d:ea:32:ec:68:9b:eb:e1:71:41:c2:73:da: 28:03:bf:90:e1:97:0b:bf:d6:ba:d9:b3:48:5f:1e: 45:d3:01:de:01:9a:0e:0c:6a:a9:8b:ed:06:44:ff: c8:d3:6c:16:83:57:3d:1d:ce:a8:04:91:56:3b:f5: 2d:25:43:74:e3:98:31:93:6b:f6:20:55:61:f9:98: cb:83:24:bd:56:fc:39:96:3e:0d:3e:88:c3:b1:d3: 6f:72:f7:68:6e:5c:68:d5:8c:8e:68:5d:3f:47:ce: ed:27:d8:6a:cf:f7:17:e3:2a:5b:a4:45:7f:ca:3d: d4:20:82:a2:63:b6:d3:98:21:e3:7a:18:8d:34:1f: 23:68:d8:99:7f:ac:81:26:f8:b8:70:15:e0:28:d3: bf:4f:75:83:92:b9:db:94:73:24:65:e1:a2:4c:77: 3c:9c:da:af:2a:ea:b5:4a:53:71:d3:95:3d:fe:b9: e8:93:2e:28:6a:26:3c:6b:a2:30:82:5b:58:60:36: 60:cb:f1:a2:31:f1:5d:e4:4d:99:10:46:ea:3b:81: 16:0b:c8:07:68:61:70:9a:7c:87:27:ca:20:cb:27: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:71:3F:6D:54:C1:F7:09:8C:5F:5A:41:66:C4:AC:0D:DB:35:BD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2c1ec21-e971-3f16-8965-370f384fd5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e0:ce:b6:7a:24:28:a9:30:47:e4:a5:79:a5:c7:80:ff:58: fb:be:5b:80:50:16:d3:4e:23:46:92:2a:d0:85:72:b7:47:12: ee:21:19:d2:fd:dc:6f:66:82:2a:09:6f:cf:bd:3c:21:32:0f: f6:6e:60:35:ca:cc:87:11:ff:61:41:30:41:87:7b:3f:69:de: cd:8a:bc:b8:c2:0e:87:20:6a:a4:6a:6b:42:1a:cc:07:a8:79: 10:a2:d8:bf:14:c4:32:30:49:f1:44:05:00:00:65:99:c0:b2: e4:a3:bc:22:9c:61:fe:6b:88:b6:03:8c:9f:26:72:a1:e8:17: b7:2b:8b:98:98:fd:d2:13:45:70:c4:a5:b0:93:3b:93:f5:93: 39:c8:46:a4:a5:5b:87:cc:8f:84:54:c7:b4:f9:f7:fe:6c:e6: 65:37:a0:ed:be:cd:55:dc:3a:4a:95:7f:63:40:64:10:a8:6f: e1:07:3a:1d:5a:58:f6:b0:57:d5:c5:47:47:ce:96:82:ae:b3: a8:28:fc:18:49:85:f0:f4:9d:9a:1e:e8:61:37:ab:62:9e:fe: f4:ee:7c:c8:4e:de:1c:5f:6e:e5:4d:a7:df:eb:a7:65:c9:16: 85:c6:79:5d:af:1d:ff:9c:2c:cc:82:bf:bb:26:fe:b7:2c:26: af:b4:45:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7po+O9Z04LkakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzYzNWIxMDEtOWI3MS00ODU2LWI5Y2MtNzY0N2M3OWFkZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuGGbSBRfmljS2VXR3gQMSygjCvKmgGpp0o3 3ZY7q03qMuxom+vhcUHCc9ooA7+Q4ZcLv9a62bNIXx5F0wHeAZoODGqpi+0GRP/I 02wWg1c9Hc6oBJFWO/UtJUN045gxk2v2IFVh+ZjLgyS9Vvw5lj4NPojDsdNvcvdo blxo1YyOaF0/R87tJ9hqz/cX4ypbpEV/yj3UIIKiY7bTmCHjehiNNB8jaNiZf6yB Jvi4cBXgKNO/T3WDkrnblHMkZeGiTHc8nNqvKuq1SlNx05U9/rnoky4oaiY8a6Iw gltYYDZgy/GiMfFd5E2ZEEbqO4EWC8gHaGFwmnyHJ8ogyyd/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJxP21UwfcJjF9aQWbErA3bNb0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDJjMWVjMjEtZTk3MS0z ZjE2LTg5NjUtMzcwZjM4NGZkNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/gzrZ6JCipMEfkpXmlx4D/WPu+W4BQFtNOI0aSKtCFcrdHEu4hGdL9 3G9mgioJb8+9PCEyD/ZuYDXKzIcR/2FBMEGHez9p3s2KvLjCDocgaqRqa0IazAeo eRCi2L8UxDIwSfFEBQAAZZnAsuSjvCKcYf5riLYDjJ8mcqHoF7cri5iY/dITRXDE pbCTO5P1kznIRqSlW4fMj4RUx7T59/5s5mU3oO2+zVXcOkqVf2NAZBCob+EHOh1a WPawV9XFR0fOloKus6go/BhJhfD0nZoe6GE3q2Ke/vTufMhO3hxfbuVNp9/rp2XJ FoXGeV2vHf+cLMyCv7sm/rcsJq+0RTc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:31 2025 by rpki-client