$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa File: 6c912e53-7f9f-359d-9783-9d739696e83e.roa (raw, json) Hash identifier: rUnfksAzpvJ0sk+jq2OnUzhd1/G4cKcStmhGdLNyr/8= Subject key identifier: 1B:BF:5C:40:76:8E:3B:F4:99:2F:F2:B6:74:61:8C:B0:17:7F:82:D6 Certificate issuer: /CN=fb26a778-1de5-4c0c-ae29-169277907d9c Certificate serial: 010D0C9F4328584B970D055FAD302B3DED07B000 Authority key identifier: E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 589 IP address blocks: 129.120.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:05:5f:ad:30:2b:3d:ed:07:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb26a778-1de5-4c0c-ae29-169277907d9c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=485a83b2-4da6-457f-9e5e-7f7d634acbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:f4:c1:1c:64:66:82:23:02:82:da:7b:83: e4:5c:8b:f2:7d:57:bb:49:d3:9e:3b:ee:25:26:c2: 8e:76:a0:97:ce:28:30:f2:9d:ea:ad:16:45:9b:56: 5e:53:d4:59:27:5c:43:56:92:8b:3c:8c:b4:b9:a0: a5:b9:d7:18:6d:ab:a9:07:93:60:0a:19:fe:b4:c9: 0f:f1:b5:3b:e6:6f:1b:08:ce:d3:65:eb:c1:7c:20: 40:12:72:e6:db:68:de:4e:69:48:ee:c0:5d:cc:c3: 43:95:d8:f7:f3:e1:8b:a1:e8:41:ee:0a:b3:0a:7f: 7b:e1:98:f5:f2:b5:e0:2a:48:17:ee:10:d0:bd:39: ca:c7:2b:69:c3:4b:42:ad:11:4a:5e:29:2b:e7:3a: 23:67:d0:fa:98:01:4a:61:56:fc:03:8c:72:2a:b8: cb:e4:3c:78:40:aa:ae:5c:30:6a:98:ae:6a:0b:bc: 22:49:a6:32:29:1a:5b:f2:c0:ee:cb:4e:4a:78:15: ec:1f:5e:b1:7b:75:27:ce:ed:1a:f2:e3:53:10:fe: 47:23:9a:b2:93:7a:b3:99:66:d7:83:4e:33:8b:06: f8:6c:24:0c:57:91:9d:6c:db:ef:a8:d6:cf:b8:cc: 82:2b:12:da:72:5b:b6:56:1f:b5:19:bf:59:2a:f6: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:5C:40:76:8E:3B:F4:99:2F:F2:B6:74:61:8C:B0:17:7F:82:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/6c912e53-7f9f-359d-9783-9d739696e83e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.crl X509v3 Authority Key Identifier: keyid:E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer sbgp-ipAddrBlock: critical IPv4: 129.120.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fc:53:be:29:4a:a6:a9:37:4d:85:85:79:ab:c0:22:92:d0: b8:72:41:5e:2a:75:4f:86:60:20:db:82:af:3b:64:af:ef:68: 24:44:58:d7:dc:78:22:87:ea:96:4e:54:f1:05:b6:6f:94:6e: 9b:51:f8:6d:fc:58:8c:89:81:0d:78:5a:fb:2f:49:c4:f2:95: 6a:ce:a7:eb:0c:62:fa:b6:97:79:e0:2a:c7:88:02:94:e0:74: 5c:4f:65:32:a3:d5:20:e6:ed:83:ad:66:fa:af:7b:b1:03:16: 88:48:62:54:b1:ea:ac:15:b5:e9:ab:47:d2:5b:47:5e:63:e1: fb:2f:a3:14:d0:7e:05:df:ca:d3:1a:9b:e4:7a:8d:22:e1:18: 66:d8:7e:c1:f9:55:a9:37:62:e0:a3:f7:58:3c:36:6f:84:47: 41:b7:4d:fc:47:2a:00:2e:f6:26:c2:20:a5:18:f1:da:0d:94: ae:28:d1:75:20:14:1a:f5:35:16:eb:bc:da:4b:51:37:10:18: a5:e3:ed:ee:fd:62:2b:44:58:06:cb:77:7a:0f:f6:b1:81:f7: 5b:7d:c7:c9:1a:4d:aa:34:27:3c:28:19:e1:e4:ae:dc:88:df: 0f:3d:5a:ea:79:78:de:f7:2c:2b:59:78:5f:34:f0:02:0a:2b: c1:71:9a:1e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuXDQVfrTArPe0HsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIyNmE3NzgtMWRlNS00YzBjLWFlMjktMTY5Mjc3OTA3 ZDljMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDg1YTgzYjItNGRhNi00NTdmLTllNWUtN2Y3ZDYzNGFjYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtX0wRxkZoIjAoLae4PkXIvyfVe7SdOeO+4l JsKOdqCXzigw8p3qrRZFm1ZeU9RZJ1xDVpKLPIy0uaCludcYbaupB5NgChn+tMkP 8bU75m8bCM7TZevBfCBAEnLm22jeTmlI7sBdzMNDldj38+GLoehB7gqzCn974Zj1 8rXgKkgX7hDQvTnKxytpw0tCrRFKXikr5zojZ9D6mAFKYVb8A4xyKrjL5Dx4QKqu XDBqmK5qC7wiSaYyKRpb8sDuy05KeBXsH16xe3Unzu0a8uNTEP5HI5qyk3qzmWbX g04ziwb4bCQMV5GdbNvvqNbPuMyCKxLaclu2Vh+1Gb9ZKvZEhQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBu/XEB2jjv0mS/ytnRhjLAXf4LWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYjI2 YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjkyNzc5MDdkOWMvNmM5MTJlNTMtN2Y5Zi0z NTlkLTk3ODMtOWQ3Mzk2OTZlODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmIyNmE3NzgtMWRlNS00YzBjLWFl MjktMTY5Mjc3OTA3ZDljL2ZiMjZhNzc4LTFkZTUtNGMwYy1hZTI5LTE2OTI3Nzkw N2Q5Yy5jcmwwHwYDVR0jBBgwFoAU4SdEEistWtpJPYjITgDqLK+XRmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYjI2YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjky Nzc5MDdkOWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgXgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHfxTvilKpqk3TYWFeavAIpLQuHJBXip1T4ZgINuCrztkr+9oJERY19x4 Iofqlk5U8QW2b5Rum1H4bfxYjImBDXha+y9JxPKVas6n6wxi+raXeeAqx4gClOB0 XE9lMqPVIObtg61m+q97sQMWiEhiVLHqrBW16atH0ltHXmPh+y+jFNB+Bd/K0xqb 5HqNIuEYZth+wflVqTdi4KP3WDw2b4RHQbdN/EcqAC72JsIgpRjx2g2UrijRdSAU GvU1Fuu82ktRNxAYpePt7v1iK0RYBst3eg/2sYH3W33HyRpNqjQnPCgZ4eSu3Ijf Dz1a6nl43vcsK1l4XzTwAgorwXGaHg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:07 2025 by rpki-client