$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa File: 19928233-6d2f-37ae-9fb3-1f6627892861.roa (raw, json) Hash identifier: cP/oFREC7a4MZ9CELVSJ1U8/68sFbZE9kjpUoRpEKIo= Subject key identifier: 56:E0:79:42:C6:0A:76:2A:6C:27:B4:B8:CD:EA:7B:A1:91:6D:71:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584B6E920257D72EEC4BBC296300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 31898 IP address blocks: 129.91.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:92:02:57:d7:2e:ec:4b:bc:29:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=6de1e7cc-54a5-458e-8354-041e8deb0ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:90:0f:b2:5a:a5:88:92:83:0a:17:64:06: 6d:8d:51:23:93:ae:1a:f4:77:f9:02:e8:51:14:1e: f1:54:23:19:27:e3:40:78:99:69:1e:85:77:af:da: 5b:6c:f7:30:e2:1e:95:ca:13:2d:33:de:86:e0:ba: a4:02:7e:aa:a4:2e:0e:dd:6d:fa:82:7f:51:0f:d0: da:f9:2a:6a:72:e2:3b:88:89:f7:40:4a:9a:af:c1: e2:73:04:29:b9:dd:20:1f:42:88:0f:6d:2e:21:9d: fe:8f:16:71:40:bc:8b:ed:ff:de:6f:85:be:0d:fb: 2a:0a:44:62:55:10:73:00:f7:41:ad:48:dd:b5:c7: bb:0d:1c:02:46:06:6e:ae:d3:5c:ab:85:48:ef:b2: 6f:36:3c:9f:d0:2c:53:21:1e:7a:99:55:bb:38:c7: e7:45:69:83:c8:2f:c7:4b:c0:38:83:64:c5:d3:20: 76:51:4e:0b:db:bb:20:8a:a4:36:aa:ef:cd:44:d0: 95:f4:f7:38:d6:2c:e0:0e:81:c4:2d:11:18:7c:6c: c4:5f:44:d7:7d:cf:89:b9:43:20:0b:ef:a3:ef:8d: 45:82:d9:65:39:d1:b9:95:bd:f2:21:36:48:a4:6c: 96:13:b9:9f:4b:e1:19:32:5b:fe:1d:65:8e:45:f2: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E0:79:42:C6:0A:76:2A:6C:27:B4:B8:CD:EA:7B:A1:91:6D:71:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.91.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f4:53:ee:62:41:06:04:86:bf:6c:de:ca:55:e0:a8:67:54: 7c:a2:e4:67:ce:cd:1b:2d:24:ce:ce:b3:c9:50:29:f2:93:84: e2:99:3d:e0:5d:23:1c:7f:24:6c:e0:55:7b:db:0a:ae:77:4b: fa:17:af:af:36:0a:08:95:f1:59:3e:98:6a:39:a9:37:47:25: ec:2c:75:34:ec:b6:2e:66:2a:14:35:ca:ee:e4:18:f8:dd:04: 0d:c1:5e:ef:0e:a8:04:0b:92:90:fa:df:63:7a:e3:1a:0a:ee: f6:2e:d6:d2:36:6e:f8:51:7b:d5:78:4f:dd:08:2c:fa:f2:f3: f6:ea:86:86:a1:66:81:f9:80:b5:81:dc:ae:79:a6:68:91:f8: 0c:53:f5:70:ec:28:f5:e3:2a:c0:15:0a:e3:1b:00:77:04:99: 10:65:5c:c4:62:40:56:9f:10:d6:2c:a1:b6:16:9b:d1:0c:6b: b9:d1:7d:0e:bb:31:83:b6:f9:f1:a2:f3:66:a1:46:69:5f:ae: 11:f3:00:a0:4d:fb:d9:ec:2a:68:94:e0:f6:20:61:95:89:76: db:e9:aa:4c:af:7e:54:9e:f0:00:fb:80:3b:be:cf:f0:c3:55: af:ae:78:2f:d6:5b:ae:76:1d:12:26:68:52:c8:c0:56:77:65: 20:50:e8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukgJX1y7sS7wpYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk NmRlMWU3Y2MtNTRhNS00NThlLTgzNTQtMDQxZThkZWIwZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7amQD7JapYiSgwoXZAZtjVEjk64a9Hf5AuhR FB7xVCMZJ+NAeJlpHoV3r9pbbPcw4h6VyhMtM96G4LqkAn6qpC4O3W36gn9RD9Da +SpqcuI7iIn3QEqar8HicwQpud0gH0KID20uIZ3+jxZxQLyL7f/eb4W+DfsqCkRi VRBzAPdBrUjdtce7DRwCRgZurtNcq4VI77JvNjyf0CxTIR56mVW7OMfnRWmDyC/H S8A4g2TF0yB2UU4L27sgiqQ2qu/NRNCV9Pc41izgDoHELREYfGzEX0TXfc+JuUMg C++j741FgtllOdG5lb3yITZIpGyWE7mfS+EZMlv+HWWORfKi4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbgeULGCnYqbCe0uM3qe6GRbXE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTk5MjgyMzMtNmQyZi0z N2FlLTlmYjMtMWY2NjI3ODkyODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgVsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv0U+5iQQYEhr9s3spV4KhnVHyi5GfOzRstJM7Os8lQKfKThOKZPeBd Ixx/JGzgVXvbCq53S/oXr682CgiV8Vk+mGo5qTdHJewsdTTsti5mKhQ1yu7kGPjd BA3BXu8OqAQLkpD632N64xoK7vYu1tI2bvhRe9V4T90ILPry8/bqhoahZoH5gLWB 3K55pmiR+AxT9XDsKPXjKsAVCuMbAHcEmRBlXMRiQFafENYsobYWm9EMa7nRfQ67 MYO2+fGi82ahRmlfrhHzAKBN+9nsKmiU4PYgYZWJdtvpqkyvflSe8AD7gDu+z/DD Va+ueC/WW652HRImaFLIwFZ3ZSBQ6PI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:44 2025 by rpki-client