$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa File: 07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa (raw, json) Hash identifier: xd+jYBekuDgLqVZVmIoqDfIlNJaeF1LpWj0Yw6pwE10= Subject key identifier: E8:AC:8A:60:76:6E:2E:08:54:27:B2:AB:D8:B4:DE:82:29:0C:69:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C0A4BC8A041AC63840BF90 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa Signing time: Mon 25 Aug 2025 08:09:23 +0000 ROA not before: Mon 25 Aug 2025 08:09:23 +0000 ROA not after: Sun 23 Nov 2025 09:09:23 +0000 asID: 31898 IP address blocks: 129.213.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c0:a4:bc:8a:04:1a:c6:38:40:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:09:23 2025 GMT Not After : Nov 23 09:09:23 2025 GMT Subject: CN=e8c6dbd7-9cc6-4e38-b6a1-7f29e2fee350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:9e:b6:1c:65:b0:d5:44:b5:13:2f:c2:8d: 82:c5:aa:9e:d0:56:9c:c2:c2:e8:20:05:ee:35:10: d5:38:6b:85:da:dc:cd:5b:63:e5:5b:6e:95:09:9f: d2:36:1e:ab:2a:a6:70:c2:0e:f8:df:46:17:48:3f: 80:bb:c1:44:cf:ba:64:94:62:d8:89:10:aa:70:74: ca:d6:60:c6:02:75:80:3e:d1:17:f9:a6:37:64:51: 95:8c:72:96:5d:6f:5e:30:31:b3:5f:ef:d5:6a:46: a3:3d:fd:a9:c2:4b:03:64:1e:2e:40:83:e5:53:47: cb:8f:a1:d1:24:f0:43:f6:20:99:ae:ec:6c:18:39: af:88:08:19:2f:8c:de:72:7a:61:7a:95:98:3b:8e: 63:38:6b:22:ff:a0:b6:9c:41:d1:db:19:25:57:e9: cb:40:44:4c:7a:a2:59:03:7a:3f:f8:bd:a3:4f:c4: 7b:ee:e8:36:34:9c:1a:b8:ec:9c:44:63:8f:5a:5e: 45:b3:76:13:4a:29:5c:b0:7a:81:33:62:10:5d:5e: 2c:61:1c:d5:ad:48:3d:4c:70:dc:c1:26:77:80:75: 13:8d:3d:07:c6:34:c7:19:d7:91:49:1b:a5:e6:c4: 62:17:94:bc:a0:9e:c1:d8:5b:f6:30:da:50:c8:0a: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:8A:60:76:6E:2E:08:54:27:B2:AB:D8:B4:DE:82:29:0C:69:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07f9ee14-0c81-31ff-ba93-f64c0e559ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9e:a0:33:a2:22:7e:a3:eb:58:66:ac:f7:0d:3b:5f:0e:0d: e8:60:13:23:07:82:d4:18:8b:d4:2f:22:77:30:5c:1c:63:c5: ef:85:95:85:9d:e2:6a:14:7e:bc:91:e8:ef:e3:b4:9d:97:59: 6a:f1:c6:fe:85:df:58:c7:aa:74:5a:98:29:d8:bc:7e:46:c7: 7e:c0:54:ef:bc:d2:24:82:fd:fe:83:c0:c9:5b:c7:f2:05:3d: db:1b:f9:9a:ee:25:e2:26:34:25:f5:66:a6:de:f7:0c:ac:12: 71:37:00:c8:fe:12:58:ad:4b:09:7d:a4:57:08:ab:8c:63:7d: 64:4c:26:14:e6:9f:7a:7d:b2:4f:44:90:3a:9e:8b:8f:cf:e1: bc:de:58:c7:cf:8a:4f:7c:b8:d1:08:97:b6:e0:9b:9e:6e:27: c7:a9:70:6d:2e:e3:b3:a6:81:5a:55:b4:6f:32:1b:7f:89:06: 46:52:ad:5f:39:df:5f:15:dd:ed:e8:cf:45:b1:15:dc:c4:be: f5:32:15:e6:98:73:e8:7b:37:d6:d0:db:9e:ab:9c:6c:52:c5: 0b:28:a5:b5:69:83:cb:12:02:e3:25:e9:47:d1:e7:85:2c:da: 16:da:01:21:81:a6:4e:60:99:5d:a9:71:9e:61:78:ae:9f:98: 25:c4:a9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wKS8igQaxjhAv5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDkyM1oXDTI1MTEyMzA5MDkyM1owLzEtMCsGA1UEAxMk ZThjNmRiZDctOWNjNi00ZTM4LWI2YTEtN2YyOWUyZmVlMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU6ethxlsNVEtRMvwo2Cxaqe0FacwsLoIAXu NRDVOGuF2tzNW2PlW26VCZ/SNh6rKqZwwg7430YXSD+Au8FEz7pklGLYiRCqcHTK 1mDGAnWAPtEX+aY3ZFGVjHKWXW9eMDGzX+/VakajPf2pwksDZB4uQIPlU0fLj6HR JPBD9iCZruxsGDmviAgZL4zecnphepWYO45jOGsi/6C2nEHR2xklV+nLQERMeqJZ A3o/+L2jT8R77ug2NJwauOycRGOPWl5Fs3YTSilcsHqBM2IQXV4sYRzVrUg9THDc wSZ3gHUTjT0HxjTHGdeRSRul5sRiF5S8oJ7B2Fv2MNpQyAr7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOisimB2bi4IVCeyq9i03oIpDGm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDdmOWVlMTQtMGM4MS0z MWZmLWJhOTMtZjY0YzBlNTU5YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyeoDOiIn6j61hmrPcNO18ODehgEyMHgtQYi9QvIncwXBxjxe+FlYWd 4moUfryR6O/jtJ2XWWrxxv6F31jHqnRamCnYvH5Gx37AVO+80iSC/f6DwMlbx/IF Pdsb+ZruJeImNCX1Zqbe9wysEnE3AMj+ElitSwl9pFcIq4xjfWRMJhTmn3p9sk9E kDqei4/P4bzeWMfPik98uNEIl7bgm55uJ8epcG0u47OmgVpVtG8yG3+JBkZSrV85 318V3e3oz0WxFdzEvvUyFeaYc+h7N9bQ256rnGxSxQsopbVpg8sSAuMl6UfR54Us 2hbaASGBpk5gmV2pcZ5heK6fmCXEqcE= -----END CERTIFICATE-----Generated at Thu Oct 9 00:55:43 2025 by rpki-client