$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa File: 3e80f5bf-407d-36f9-986f-806a0334ee39.roa (raw, json) Hash identifier: 1xPJ/ztHogmjgUGSKd0ZclHVC1AYqCdABHdQr3NjZzU= Subject key identifier: E9:12:A4:88:18:21:30:B3:A5:D0:4F:63:C6:03:26:BA:9A:CF:78:7E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD429198C2AD30C3C3D4B680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa Signing time: Tue 26 Aug 2025 22:54:24 +0000 ROA not before: Tue 26 Aug 2025 22:54:24 +0000 ROA not after: Mon 24 Nov 2025 23:54:24 +0000 asID: 31898 IP address blocks: 129.156.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:91:98:c2:ad:30:c3:c3:d4:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:24 2025 GMT Not After : Nov 24 23:54:24 2025 GMT Subject: CN=a8f0d3aa-83ea-4ef5-9785-0bada4b6dc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:95:79:72:05:cf:71:7f:8c:a6:a2:bc:d2: 7d:73:7c:b2:64:c6:05:fb:58:28:e7:09:60:d3:bb: 95:86:ae:a2:cf:ad:bf:83:d9:ef:d9:1e:35:9b:b7: 9b:d8:14:6b:c8:ca:dd:8b:9d:16:73:61:56:61:79: 05:5f:82:f5:ef:e0:97:82:ae:e4:8b:c4:34:f7:46: f2:c4:5d:0e:07:f3:fa:b2:9d:91:d6:ff:56:d5:f9: 25:7b:df:fd:d2:2f:eb:fd:d8:de:8c:ae:d3:15:cd: f9:15:31:8b:ac:11:00:f5:0f:bf:62:b2:6a:3a:e2: 1f:3a:ea:ce:c7:5f:66:d9:c4:7c:10:e7:98:c7:1e: 6f:68:31:58:3a:22:ab:85:e6:4d:9c:8c:10:ab:eb: 98:de:32:ac:59:6d:15:3f:af:95:8b:c5:7a:f5:48: c4:38:ef:cd:25:31:27:c2:d0:ca:30:f0:49:de:ab: de:e6:df:cd:4c:d0:65:6a:63:4b:a2:f6:47:74:4f: f7:aa:4a:7b:76:2a:45:bb:d9:84:3b:92:19:35:73: d7:48:5f:80:66:03:50:63:0b:a3:34:1c:08:6f:cf: f5:72:bc:b7:c7:36:de:77:fe:0a:dc:ff:42:a2:af: 64:76:4f:ab:93:9c:f3:83:2f:8f:1d:54:74:97:b2: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:12:A4:88:18:21:30:B3:A5:D0:4F:63:C6:03:26:BA:9A:CF:78:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e80f5bf-407d-36f9-986f-806a0334ee39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.156.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:03:79:e5:ca:35:06:bb:0a:61:f4:55:27:d2:29:4a:54: 5c:ee:18:61:69:7a:40:4e:f6:3b:26:d3:26:48:64:c8:12:92: 29:11:59:a7:92:9f:e7:4d:c0:af:72:95:16:18:f2:82:70:db: 94:1b:18:cc:51:87:74:e1:f8:5f:32:73:67:f0:71:b1:33:6a: ed:4c:0a:2e:45:84:e0:7a:fc:81:c9:5f:e0:8d:60:3b:b3:fa: 62:e7:83:34:c8:36:c9:27:d3:5a:2b:5b:88:88:81:77:80:48: d3:7b:4e:bb:21:93:3d:f1:1c:fa:39:1f:30:19:86:7a:b8:28: d7:9a:b8:f4:3d:fa:66:6c:57:53:b0:eb:64:d3:1c:cd:0c:86: cf:f8:f2:2c:78:13:14:e0:58:63:30:0d:73:71:3c:9a:30:f2: 8a:6a:24:b7:7f:32:67:0c:92:bf:17:d4:e8:93:99:6d:5b:16: fe:e4:88:c8:e4:3b:48:2a:43:0b:f4:4e:c9:ad:b1:8e:a8:47: 01:c7:10:58:8a:31:4f:dd:5c:95:f9:30:50:67:92:e1:e6:f8: 45:b3:22:76:b1:3d:c6:3e:d6:97:1e:19:ec:d1:1a:ff:74:05: 0d:e3:4d:84:a7:1c:90:88:45:7a:fb:a7:db:0d:e9:c0:0e:f1: 68:25:7e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QpGYwq0ww8PUtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQyNFoXDTI1MTEyNDIzNTQyNFowLzEtMCsGA1UEAxMk YThmMGQzYWEtODNlYS00ZWY1LTk3ODUtMGJhZGE0YjZkYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKeVeXIFz3F/jKaivNJ9c3yyZMYF+1go5wlg 07uVhq6iz62/g9nv2R41m7eb2BRryMrdi50Wc2FWYXkFX4L17+CXgq7ki8Q090by xF0OB/P6sp2R1v9W1fkle9/90i/r/djejK7TFc35FTGLrBEA9Q+/YrJqOuIfOurO x19m2cR8EOeYxx5vaDFYOiKrheZNnIwQq+uY3jKsWW0VP6+Vi8V69UjEOO/NJTEn wtDKMPBJ3qve5t/NTNBlamNLovZHdE/3qkp7dipFu9mEO5IZNXPXSF+AZgNQYwuj NBwIb8/1cry3xzbed/4K3P9Coq9kdk+rk5zzgy+PHVR0l7IBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkSpIgYITCzpdBPY8YDJrqaz3h+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U4MGY1YmYtNDA3ZC0z NmY5LTk4NmYtODA2YTAzMzRlZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArxA3nlyjUGuwph9FUn0ilKVFzuGGFpekBO9jsm0yZIZMgSkikRWaeS n+dNwK9ylRYY8oJw25QbGMxRh3Th+F8yc2fwcbEzau1MCi5FhOB6/IHJX+CNYDuz +mLngzTINskn01orW4iIgXeASNN7Trshkz3xHPo5HzAZhnq4KNeauPQ9+mZsV1Ow 62TTHM0Mhs/48ix4ExTgWGMwDXNxPJow8opqJLd/MmcMkr8X1OiTmW1bFv7kiMjk O0gqQwv0TsmtsY6oRwHHEFiKMU/dXJX5MFBnkuHm+EWzInaxPcY+1pceGezRGv90 BQ3jTYSnHJCIRXr7p9sN6cAO8Wglfg8= -----END CERTIFICATE-----Generated at Thu Oct 9 00:58:32 2025 by rpki-client