$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/e1200a85-7da9-3bfc-85d6-585912a24716.roa File: e1200a85-7da9-3bfc-85d6-585912a24716.roa (raw, json) Hash identifier: 5LgFGEVWTDFeKcxQFs2qkO44BwLXW+DRpQwpVSmeWmQ= Subject key identifier: 54:E0:EC:E7:BE:F6:D2:9B:ED:BA:46:02:3E:40:9C:EC:15:AE:0A:45 Certificate issuer: /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Certificate serial: 010D0C9F4328584B970CE8118950266EF8356980 Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/e1200a85-7da9-3bfc-85d6-585912a24716.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 6360 IP address blocks: 132.160.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e8:11:89:50:26:6e:f8:35:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4b056376-7e4e-41cf-af8a-97428ab6833e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:e6:be:22:a9:19:03:ad:4f:9b:12:57:02: 37:d4:37:d1:8a:c2:dd:ea:e2:6b:fa:76:4e:e2:b3: e6:0d:7a:12:00:ae:6a:ce:7c:c4:86:54:34:6c:8b: 75:2b:5a:19:03:72:fb:fe:4a:26:2a:ed:17:91:af: 24:be:b1:7a:a7:c5:15:c7:a8:1e:87:6e:98:bf:bf: 3d:fd:3d:ee:08:c3:c4:33:5f:97:34:8a:9b:3c:95: 82:bd:ec:9e:a9:6d:cc:90:4b:1a:2c:f8:b7:b8:88: e0:46:e1:d0:07:34:e8:89:11:90:b3:53:07:e8:ee: 16:69:a0:07:26:d0:1f:a4:1c:b0:9c:87:36:05:4b: 3b:8a:08:71:f2:16:31:fe:07:da:0b:1e:c6:8b:69: dd:0d:2e:fa:85:a3:4e:d3:e2:b3:94:81:16:01:c4: 27:4d:ff:21:6c:65:43:26:84:69:f6:73:90:64:ff: 33:b5:11:91:7a:34:70:4c:9c:0e:78:11:18:37:06: e5:df:7e:4e:da:d1:9a:52:aa:85:42:cf:0f:a9:6e: d1:07:f3:c5:09:8e:50:6a:2a:5e:48:c7:ea:41:2c: 0b:ca:5f:4e:98:31:9a:30:0c:5f:75:fb:84:47:b7: 8f:10:c1:f3:77:eb:32:97:2c:56:e2:36:1f:c6:27: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E0:EC:E7:BE:F6:D2:9B:ED:BA:46:02:3E:40:9C:EC:15:AE:0A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/e1200a85-7da9-3bfc-85d6-585912a24716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl X509v3 Authority Key Identifier: keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer sbgp-ipAddrBlock: critical IPv4: 132.160.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:68:fe:c8:96:67:93:4d:5b:bb:99:f6:37:64:4b:c5:9d:6a: 48:40:e8:e9:91:36:d4:45:3c:ac:69:f4:91:37:5a:96:8d:f2: f7:c2:a1:86:04:87:8b:c5:e8:f0:82:52:df:9c:ff:92:f8:b1: 47:5f:d8:e9:40:f7:ee:9a:13:16:9c:fc:ec:4c:11:c0:3e:1d: c4:35:21:6f:94:0d:02:7e:1c:5c:a3:b7:75:9f:44:e0:0f:21: 7f:ba:72:70:6a:40:fe:35:31:15:41:c8:3e:3a:23:0f:0d:10: 73:9c:39:37:74:88:65:75:42:1b:b7:80:c0:82:07:81:e4:81: 7c:55:82:ce:ad:b7:1c:b5:3e:32:15:2a:81:4e:54:8e:7d:0d: c8:de:36:51:5a:14:7c:30:bb:f5:e1:42:ab:97:88:d5:23:ba: 7c:d1:fe:34:41:dc:bb:24:48:77:4f:92:d4:39:ee:fd:95:ae: 57:37:90:28:27:96:71:f0:40:5a:19:42:ec:93:47:e8:e1:aa: cf:60:c7:e2:59:41:a2:95:e8:f3:1a:d3:dd:9c:dd:78:11:5b: d8:a0:3f:e5:ac:6f:e2:6f:b6:be:0e:6d:fc:59:51:e7:81:9b: b7:db:4a:35:75:d1:c1:27:d2:b5:f8:fb:ac:a3:4b:de:9a:98: 61:e1:d0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOgRiVAmbvg1aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAxYzQ2NGQtOWQyMC00NmExLTg1OGItYzM2YzhjMWEz Nzc2MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGIwNTYzNzYtN2U0ZS00MWNmLWFmOGEtOTc0MjhhYjY4MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zmviKpGQOtT5sSVwI31DfRisLd6uJr+nZO 4rPmDXoSAK5qznzEhlQ0bIt1K1oZA3L7/komKu0Xka8kvrF6p8UVx6geh26Yv789 /T3uCMPEM1+XNIqbPJWCveyeqW3MkEsaLPi3uIjgRuHQBzToiRGQs1MH6O4WaaAH JtAfpBywnIc2BUs7ighx8hYx/gfaCx7Gi2ndDS76haNO0+KzlIEWAcQnTf8hbGVD JoRp9nOQZP8ztRGRejRwTJwOeBEYNwbl335O2tGaUqqFQs8PqW7RB/PFCY5Qaipe SMfqQSwLyl9OmDGaMAxfdfuER7ePEMHzd+sylyxW4jYfxidVoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTg7Oe+9tKb7bpGAj5AnOwVrgpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFj NDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZjOGMxYTM3NzYvZTEyMDBhODUtN2RhOS0z YmZjLTg1ZDYtNTg1OTEyYTI0NzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxYzQ2NGQtOWQyMC00NmExLTg1 OGItYzM2YzhjMWEzNzc2L2EwMWM0NjRkLTlkMjAtNDZhMS04NThiLWMzNmM4YzFh Mzc3Ni5jcmwwHwYDVR0jBBgwFoAUQo2GNS7VIXZWdKOP4reK/APen14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFjNDY0ZC05ZDIwLTQ2YTEtODU4Yi1jMzZj OGMxYTM3NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGhKCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBo/siWZ5NNW7uZ9jdkS8WdakhA6OmRNtRFPKxp9JE3WpaN8vfCoYYE h4vF6PCCUt+c/5L4sUdf2OlA9+6aExac/OxMEcA+HcQ1IW+UDQJ+HFyjt3WfROAP IX+6cnBqQP41MRVByD46Iw8NEHOcOTd0iGV1Qhu3gMCCB4HkgXxVgs6ttxy1PjIV KoFOVI59DcjeNlFaFHwwu/XhQquXiNUjunzR/jRB3LskSHdPktQ57v2Vrlc3kCgn lnHwQFoZQuyTR+jhqs9gx+JZQaKV6PMa092c3XgRW9igP+Wsb+Jvtr4ObfxZUeeB m7fbSjV10cEn0rX4+6yjS96amGHh0Hw= -----END CERTIFICATE-----Generated at Tue Nov 4 09:49:27 2025 by rpki-client