$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa File: d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa (raw, json) Hash identifier: W54QZhdoOEczjwW9TEMwzddRB0Quoik8kbr3JeRPi0o= Subject key identifier: AA:94:D9:1A:DC:F9:D4:68:90:5F:33:B0:7E:89:1C:00:02:C1:C9:97 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584AFEE6AAEDAE3F1A5D97F79E00 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 65 IP address blocks: 129.19.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:aa:ed:ae:3f:1a:5d:97:f7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=dda3d7d8-cda4-4898-9d16-d353d8a98ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:8c:0f:4a:20:95:f4:de:2a:79:01:86:4f: f9:58:52:b7:25:ea:d3:f6:83:c0:81:89:53:42:03: 3c:4f:f9:47:a3:fe:ed:b0:52:6f:b6:e8:d2:95:0d: 61:5b:44:15:14:ec:85:23:10:45:60:ac:87:83:c1: b6:e5:e4:2d:e5:14:4a:30:83:22:78:0a:a0:f2:2d: 87:00:c9:e3:e6:e2:78:e1:fd:de:9d:df:0b:3e:26: 1d:3c:af:07:2d:52:33:5f:33:c2:8c:d8:b0:71:ba: a1:ea:19:0e:72:c1:90:1b:72:c0:a0:2b:a7:de:11: 5f:be:5d:53:2e:27:2f:5b:b1:28:52:af:5d:b4:ad: 0c:e3:7e:32:bf:53:8f:39:22:d6:5c:f0:38:a6:39: 84:e2:26:c3:07:25:4e:d8:ed:1f:d4:f0:de:f8:38: 28:32:13:de:7a:46:b8:0d:1b:1d:c8:0c:3d:55:27: 94:ba:e5:39:26:fa:3b:14:24:43:91:b8:3d:8b:e4: 8a:90:77:54:8d:e0:64:ab:fa:0d:4e:50:31:bd:04: cd:fd:61:18:6e:6a:93:72:99:e1:81:13:56:ad:4e: 31:80:35:94:9f:c1:7e:6a:f1:44:27:01:3e:1a:29: 5a:24:00:14:2e:7e:7e:29:da:fe:63:d9:5a:e9:79: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:94:D9:1A:DC:F9:D4:68:90:5F:33:B0:7E:89:1C:00:02:C1:C9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:30:f1:0d:f6:db:dd:64:ad:0e:f0:0e:de:4e:9e:7b:f2:60: f6:58:ae:6a:b9:7f:a0:12:d9:26:61:78:15:61:18:cc:51:a5: aa:29:5e:1e:9a:93:ea:f1:98:a7:79:41:f4:64:0a:0a:ea:f5: 1b:30:9d:b0:f6:78:a4:29:bb:97:23:fc:ff:6a:14:8e:3f:d2: 0a:c3:c8:24:28:6e:ba:d8:d3:5b:90:3f:9d:a6:30:b2:43:eb: 25:9d:8c:9b:3c:c9:f2:59:ba:5e:a0:65:cd:60:77:ef:cc:51: ff:fa:ce:4a:0c:8a:17:91:e9:ab:98:4b:f3:eb:e6:2a:92:43: b4:30:a1:e7:42:83:09:8b:be:d7:af:d8:73:ee:9d:9f:eb:6e: 80:3c:f1:c1:01:27:11:35:a4:65:44:c1:29:b3:55:1f:49:5a: 72:4f:d5:aa:d3:4c:08:6a:69:21:4b:56:35:f3:fe:c6:d8:03: f0:a2:16:68:c5:59:6e:dc:26:56:eb:c3:82:d0:68:de:c0:a6: 33:57:b1:1f:74:22:c6:10:8d:13:e3:18:02:68:49:53:7e:30: 0a:24:c7:04:e3:a8:8d:bc:46:95:b3:c8:78:f3:02:21:96:22: bc:64:99:9e:e2:a1:bd:b0:ec:49:a5:20:54:40:69:74:16:8e: d8:8d:5c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qrtrj8aXZf3ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGRhM2Q3ZDgtY2RhNC00ODk4LTlkMTYtZDM1M2Q4YTk4Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmeMD0oglfTeKnkBhk/5WFK3JerT9oPAgYlT QgM8T/lHo/7tsFJvtujSlQ1hW0QVFOyFIxBFYKyHg8G25eQt5RRKMIMieAqg8i2H AMnj5uJ44f3end8LPiYdPK8HLVIzXzPCjNiwcbqh6hkOcsGQG3LAoCun3hFfvl1T LicvW7EoUq9dtK0M434yv1OPOSLWXPA4pjmE4ibDByVO2O0f1PDe+DgoMhPeeka4 DRsdyAw9VSeUuuU5Jvo7FCRDkbg9i+SKkHdUjeBkq/oNTlAxvQTN/WEYbmqTcpnh gRNWrU4xgDWUn8F+avFEJwE+GilaJAAULn5+Kdr+Y9la6Xk6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqU2Rrc+dRokF8zsH6JHAACwcmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvZDEyNGE1ZDctMjFjZi0z MDRhLTlkMmItNzMxZTkzYmNkZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgw8Q32291krQ7wDt5OnnvyYPZYrmq5f6AS2SZheBVhGMxRpaopXh6a k+rxmKd5QfRkCgrq9RswnbD2eKQpu5cj/P9qFI4/0grDyCQobrrY01uQP52mMLJD 6yWdjJs8yfJZul6gZc1gd+/MUf/6zkoMiheR6auYS/Pr5iqSQ7QwoedCgwmLvtev 2HPunZ/rboA88cEBJxE1pGVEwSmzVR9JWnJP1arTTAhqaSFLVjXz/sbYA/CiFmjF WW7cJlbrw4LQaN7ApjNXsR90IsYQjRPjGAJoSVN+MAokxwTjqI28RpWzyHjzAiGW IrxkmZ7iob2w7EmlIFRAaXQWjtiNXB0= -----END CERTIFICATE-----Generated at Tue Sep 16 03:34:32 2025 by rpki-client