$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa File: 896bba77-8553-37ca-90e0-b8ef42e49c98.roa (raw, json) Hash identifier: KD8kLymWjxghlXuLYIVRo9lNUtj+LRfEpXxCpXxoAXo= Subject key identifier: 92:20:5E:9C:FD:F3:21:8B:08:BE:54:C6:10:8D:74:FA:89:55:F1:E0 Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Certificate serial: 010D0C9F4328584A8840A07540BFB3EDA3FA5B00 Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 19905 IP address blocks: 160.129.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:a0:75:40:bf:b3:ed:a3:fa:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=89109414-8ac3-415e-9848-35ca27a19a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:5f:4e:14:39:44:11:37:58:06:9e:70:90: 6d:f9:93:1e:cc:2e:f2:77:ba:6f:51:19:82:de:0a: d5:a1:36:76:71:12:5d:29:74:b6:66:d6:23:6d:23: 03:0c:b6:e6:69:48:6b:05:e5:3b:f3:88:31:81:81: 83:50:45:5a:1e:13:bd:24:a0:1d:31:0a:bc:76:79: fe:74:9a:01:bb:5b:f9:be:96:80:42:f7:86:8d:db: b9:57:90:b9:29:6a:e5:e7:58:7c:da:ab:13:f1:2f: 90:de:93:7f:0b:28:55:39:52:a4:e7:e5:5f:19:f0: c0:85:3d:c4:ff:7e:f9:d4:ae:36:65:d2:6f:78:74: 3b:ff:ef:d7:ce:a1:de:01:14:96:2c:e9:94:13:a7: 03:1b:e6:c2:7c:34:b2:13:14:97:fe:a4:1e:e5:a5: 54:d2:6a:1c:43:7b:6f:18:3d:10:53:cd:a5:c3:f6: 13:22:da:9e:4d:85:2c:fa:dc:e1:1e:d4:c2:04:40: 30:3d:45:12:99:1e:ac:cb:d4:8b:5b:7b:2c:61:b4: 2e:e5:06:62:09:e3:c5:b5:58:f3:90:09:8e:30:69: 4a:02:d9:da:f5:80:ed:75:54:ae:e7:17:61:87:cb: 87:85:f4:09:98:19:bd:30:65:03:13:80:f2:8e:b0: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:20:5E:9C:FD:F3:21:8B:08:BE:54:C6:10:8D:74:FA:89:55:F1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/896bba77-8553-37ca-90e0-b8ef42e49c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl X509v3 Authority Key Identifier: keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer sbgp-ipAddrBlock: critical IPv4: 160.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4d:90:cb:3d:ad:70:ab:9f:ad:f2:30:f5:1c:4d:05:b5:78: c7:11:56:46:53:11:c9:dd:2d:2c:4e:9d:bf:6d:02:9d:75:23: e0:1c:5d:4a:89:ec:0f:71:d1:a3:e6:ab:86:e6:65:96:f2:9d: 0b:88:4c:34:58:91:6f:af:99:20:d2:bf:98:46:d3:a5:1e:b8: 47:e7:10:49:f7:da:fe:43:72:76:61:31:7c:18:c1:38:4c:8a: 15:2d:1a:60:4d:68:07:eb:8c:79:40:ec:ed:ab:4d:d6:c9:a5: 4a:de:5a:bc:fa:fe:8f:77:06:f3:bd:94:62:c3:f2:5b:90:01: 17:a6:c0:b0:58:cd:41:13:c9:1b:ca:60:fe:c8:b2:ff:8d:53: 14:e1:a5:e0:d8:f9:53:07:a6:7d:11:3c:2d:dc:af:44:7f:87: 50:71:1e:11:43:d0:88:17:3f:c8:46:30:65:3f:81:67:e8:a2: 4a:75:eb:d5:96:91:a5:af:0b:02:8f:5b:ab:81:dd:17:02:68: 9d:5c:d9:8f:09:43:d9:f7:c0:88:59:69:37:ef:8f:33:b1:bc: 9d:e1:66:7d:69:51:ae:41:84:3d:5d:29:c3:cf:74:9b:91:91: 0d:35:7e:82:91:47:63:7b:e8:27:67:31:43:99:ef:2d:86:19: 7b:a0:04:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqIQKB1QL+z7aP6WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh MDFlMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ODkxMDk0MTQtOGFjMy00MTVlLTk4NDgtMzVjYTI3YTE5YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+JfThQ5RBE3WAaecJBt+ZMezC7yd7pvURmC 3grVoTZ2cRJdKXS2ZtYjbSMDDLbmaUhrBeU784gxgYGDUEVaHhO9JKAdMQq8dnn+ dJoBu1v5vpaAQveGjdu5V5C5KWrl51h82qsT8S+Q3pN/CyhVOVKk5+VfGfDAhT3E /3751K42ZdJveHQ7/+/XzqHeARSWLOmUE6cDG+bCfDSyExSX/qQe5aVU0mocQ3tv GD0QU82lw/YTItqeTYUs+tzhHtTCBEAwPUUSmR6sy9SLW3ssYbQu5QZiCePFtVjz kAmOMGlKAtna9YDtdVSu5xdhh8uHhfQJmBm9MGUDE4DyjrCipQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJIgXpz98yGLCL5UxhCNdPqJVfHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvODk2YmJhNzctODU1My0z N2NhLTkwZTAtYjhlZjQyZTQ5Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2 YzQ3YmEwMWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoIEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAf02Qyz2tcKufrfIw9RxNBbV4xxFWRlMRyd0tLE6dv20CnXUj4BxdSons D3HRo+arhuZllvKdC4hMNFiRb6+ZINK/mEbTpR64R+cQSffa/kNydmExfBjBOEyK FS0aYE1oB+uMeUDs7atN1smlSt5avPr+j3cG872UYsPyW5ABF6bAsFjNQRPJG8pg /siy/41TFOGl4Nj5UwemfRE8LdyvRH+HUHEeEUPQiBc/yEYwZT+BZ+iiSnXr1ZaR pa8LAo9bq4HdFwJonVzZjwlD2ffAiFlpN++PM7G8neFmfWlRrkGEPV0pw890m5GR DTV+gpFHY3voJ2cxQ5nvLYYZe6AEdA== -----END CERTIFICATE-----Generated at Sun Jul 20 09:43:23 2025 by rpki-client