$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa File: d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa (raw, json) Hash identifier: xL+LN86tuCoJoHkf8Jap8DqgUE37/y/B0DHu5t0+2JA= Subject key identifier: 4A:8D:6F:77:6D:07:19:B6:8D:F1:53:D3:70:0B:2B:E8:E3:18:9A:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BAD628D9422CB854348ADAF00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 132.145.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:8d:94:22:cb:85:43:48:ad:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=e76fd7bb-00b0-4d42-8156-df0398fa8dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:24:88:f7:85:64:d0:2c:5e:3d:8a:f6:c0: cf:3f:3c:05:7e:d9:66:66:d1:a8:8c:cc:c5:be:ba: eb:3f:0c:de:11:de:d3:80:30:49:84:92:0c:4b:b5: b0:ce:be:cb:e2:07:33:2a:73:35:57:89:29:c3:9e: ac:2b:76:d0:2b:70:cc:e2:d2:97:f4:33:fb:83:8b: 22:2f:7e:65:52:ea:1e:48:d1:46:72:39:78:59:77: da:a6:c8:a5:d6:40:a0:d2:36:e3:83:25:8e:35:5c: 9c:10:a4:cc:68:40:1d:68:6e:83:6d:25:ce:0c:d5: dc:b7:b4:9c:69:cd:a0:39:d1:97:7b:1e:f7:15:8d: 4e:67:46:32:68:1d:41:6d:cd:fa:d6:a9:e0:de:fe: 39:df:b4:fa:85:fe:4f:93:6e:33:a8:c6:9b:ee:ed: 2a:6e:ea:d9:80:44:e9:9a:e0:c9:f9:0e:a7:8a:a2: 41:7b:74:76:b2:3a:39:e8:85:67:d5:f4:fe:c3:5a: b1:ef:8d:68:3f:1c:b4:2f:95:20:8f:fc:85:cb:6b: 8f:17:c2:d8:44:e3:13:ae:0f:58:4b:60:86:bf:3f: 93:89:91:3e:0d:73:bb:d2:96:97:bb:e4:57:b8:bf: 89:35:e6:7f:4c:66:d0:59:8d:bd:25:1d:0f:36:ac: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8D:6F:77:6D:07:19:B6:8D:F1:53:D3:70:0B:2B:E8:E3:18:9A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d33f861f-0f71-3f75-8f91-d7406fd22e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fe:47:12:87:51:56:01:04:66:25:a9:e8:6b:8d:f4:da:4b: f9:c2:db:85:39:81:48:98:9b:3f:fd:c0:95:a1:0d:78:bb:5a: ae:04:45:d0:a0:df:48:ca:75:85:2d:e1:42:a3:bb:36:3c:66: fc:7f:df:2a:cb:2d:12:ce:26:d7:2e:61:b6:bb:9b:ad:d2:5c: 6f:fd:ee:30:d9:4b:ae:38:9b:6a:e2:34:fa:c5:56:b7:90:ac: b6:e7:fa:7e:15:8e:e9:47:c6:8f:f5:8d:52:f2:ba:a1:9c:e4: c4:84:00:18:b8:40:ff:26:72:78:15:3c:68:d5:e0:f3:a2:96: ec:e5:68:74:2b:70:4a:83:cc:ee:b9:9b:2e:19:16:ba:f2:39: 3d:e4:02:71:74:85:8d:e1:20:14:38:53:69:34:24:42:5b:3e: 4d:4e:1e:73:8f:47:3d:69:8a:4e:5c:81:e8:e2:8b:23:a5:1e: 6e:8f:c0:b4:25:81:e3:e4:5d:80:70:49:64:ec:c1:a9:09:bc: 6f:93:b6:32:60:8a:c7:cd:7b:51:a9:72:ce:9a:89:db:6f:62: ea:2a:82:d3:43:a9:ee:81:ab:69:28:85:ca:a2:e0:f5:eb:88: 0b:68:83:47:31:ba:35:0a:23:c3:b0:5a:d5:b9:94:07:5d:13: 64:7c:7f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo2UIsuFQ0itrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZTc2ZmQ3YmItMDBiMC00ZDQyLTgxNTYtZGYwMzk4ZmE4ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMkkiPeFZNAsXj2K9sDPPzwFftlmZtGojMzF vrrrPwzeEd7TgDBJhJIMS7Wwzr7L4gczKnM1V4kpw56sK3bQK3DM4tKX9DP7g4si L35lUuoeSNFGcjl4WXfapsil1kCg0jbjgyWONVycEKTMaEAdaG6DbSXODNXct7Sc ac2gOdGXex73FY1OZ0YyaB1Bbc361qng3v4537T6hf5Pk24zqMab7u0qburZgETp muDJ+Q6niqJBe3R2sjo56IVn1fT+w1qx741oPxy0L5Ugj/yFy2uPF8LYROMTrg9Y S2CGvz+TiZE+DXO70paXu+RXuL+JNeZ/TGbQWY29JR0PNqxjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqNb3dtBxm2jfFT03ALK+jjGJryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDMzZjg2MWYtMGY3MS0z Zjc1LThmOTEtZDc0MDZmZDIyZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhJGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH+RxKHUVYBBGYlqehrjfTaS/nC24U5gUiYmz/9wJWhDXi7Wq4ERdCg 30jKdYUt4UKjuzY8Zvx/3yrLLRLOJtcuYba7m63SXG/97jDZS644m2riNPrFVreQ rLbn+n4VjulHxo/1jVLyuqGc5MSEABi4QP8mcngVPGjV4POiluzlaHQrcEqDzO65 my4ZFrryOT3kAnF0hY3hIBQ4U2k0JEJbPk1OHnOPRz1pik5cgejiiyOlHm6PwLQl gePkXYBwSWTswakJvG+TtjJgisfNe1Gpcs6aidtvYuoqgtNDqe6Bq2kohcqi4PXr iAtog0cxujUKI8OwWtW5lAddE2R8f/w= -----END CERTIFICATE-----Generated at Wed Nov 5 04:58:18 2025 by rpki-client