$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa File: 8a644b8f-56f7-315d-98d4-f0efaae82a84.roa (raw, json) Hash identifier: h9/rMSP8OAW2ilWNBuNOMyBt++8HVzYYXySvYWzu/CU= Subject key identifier: B7:94:AF:1F:88:2F:49:8E:75:C6:F6:81:00:AF:5A:8E:19:C0:A6:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD427ACE183A8491D3257900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa Signing time: Tue 26 Aug 2025 22:54:13 +0000 ROA not before: Tue 26 Aug 2025 22:54:13 +0000 ROA not after: Mon 24 Nov 2025 23:54:13 +0000 asID: 31898 IP address blocks: 129.145.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:7a:ce:18:3a:84:91:d3:25:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:13 2025 GMT Not After : Nov 24 23:54:13 2025 GMT Subject: CN=c4bb9927-ade0-4345-afa6-97a40a754277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:20:0c:63:4b:42:81:48:cc:f5:f8:32:ae: 44:3b:cc:85:42:a3:38:eb:f1:62:a7:e5:7d:bf:67: 04:ae:18:d6:29:52:21:d5:b4:4c:43:ca:9c:ce:f3: 98:1c:ab:cd:97:dd:17:c6:ff:37:65:ab:e4:e1:21: df:ed:78:1f:6f:52:fe:fc:f5:52:d9:a4:ea:da:e3: 76:0e:ee:4d:bb:d3:c8:7a:88:be:6a:96:52:cb:90: db:79:88:5c:48:fa:58:7a:e6:54:54:52:f4:39:90: 63:0c:42:b2:93:c1:b7:44:80:b3:b2:99:69:ee:65: 33:ae:8e:89:fb:b4:29:0f:b5:61:7c:97:da:0c:fd: b2:8c:ad:97:93:7f:59:0f:a6:1c:d6:23:1f:76:59: b7:7b:29:79:a8:b5:c9:6c:f2:1e:45:66:86:02:8e: f4:01:22:c5:0a:44:b5:8f:74:b9:ba:25:da:a7:cf: 33:40:3d:49:95:13:d8:91:6f:4f:2b:48:4b:66:1a: e0:57:d9:60:ee:dd:ba:01:97:f8:42:fa:6e:45:d6: 7f:b2:15:1d:7c:f3:c7:bc:a8:e7:f3:51:b7:9b:0a: e7:c1:4b:f2:87:78:c5:9e:c1:c0:67:87:51:1a:5b: 64:fa:d8:3f:49:4b:34:af:69:37:ff:09:f2:56:41: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:AF:1F:88:2F:49:8E:75:C6:F6:81:00:AF:5A:8E:19:C0:A6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8a644b8f-56f7-315d-98d4-f0efaae82a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:85:c0:5c:ae:f5:6b:fe:b8:69:e2:e7:99:76:4d:ca:81:39: 83:2b:d5:70:57:4a:9a:40:61:71:9a:7f:10:eb:4f:6b:92:f1: d6:ce:a5:7e:6d:6a:fe:68:26:d8:c9:24:eb:2e:85:8f:fb:10: 18:32:ad:d2:c8:39:fb:f4:08:72:c7:7e:17:2c:63:7f:89:64: d7:1e:d2:c4:22:85:b8:dd:9b:36:1e:0f:9e:76:00:08:21:70: 2d:04:a9:4a:f5:8f:51:20:12:7a:65:d2:7e:d1:b3:61:44:f8: da:94:92:3b:14:ea:41:7c:5d:5d:59:8d:c6:5b:8e:b6:a9:92: 4e:3f:b3:5e:ea:70:9b:9c:65:60:0e:b5:af:1c:2d:1c:6a:ea: 49:60:14:76:04:c4:8a:d0:10:7a:d8:86:08:04:83:48:d3:61: 3f:b0:20:fa:1f:56:af:4b:0d:85:9e:20:1c:70:94:04:f8:d4: 77:3a:5c:c9:e2:86:3c:70:3c:46:74:a8:cf:cb:b5:8a:f4:23: 26:48:73:98:c2:2c:e9:63:b1:90:f5:04:2e:dc:0f:ec:97:1c: 41:c4:7e:8c:c8:2f:57:c0:e0:bc:68:ec:e9:34:f8:32:4b:63: 12:24:53:ba:8d:70:78:15:a8:19:85:bc:42:dd:14:3a:23:56: 3f:73:ea:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QnrOGDqEkdMleQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQxM1oXDTI1MTEyNDIzNTQxM1owLzEtMCsGA1UEAxMk YzRiYjk5MjctYWRlMC00MzQ1LWFmYTYtOTdhNDBhNzU0Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrggDGNLQoFIzPX4Mq5EO8yFQqM46/Fip+V9 v2cErhjWKVIh1bRMQ8qczvOYHKvNl90Xxv83Zavk4SHf7Xgfb1L+/PVS2aTq2uN2 Du5Nu9PIeoi+apZSy5DbeYhcSPpYeuZUVFL0OZBjDEKyk8G3RICzsplp7mUzro6J +7QpD7VhfJfaDP2yjK2Xk39ZD6Yc1iMfdlm3eyl5qLXJbPIeRWaGAo70ASLFCkS1 j3S5uiXap88zQD1JlRPYkW9PK0hLZhrgV9lg7t26AZf4QvpuRdZ/shUdfPPHvKjn 81G3mwrnwUvyh3jFnsHAZ4dRGltk+tg/SUs0r2k3/wnyVkESRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeUrx+IL0mOdcb2gQCvWo4ZwKZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGE2NDRiOGYtNTZmNy0z MTVkLTk4ZDQtZjBlZmFhZTgyYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSFwFyu9Wv+uGni55l2TcqBOYMr1XBXSppAYXGafxDrT2uS8dbOpX5t av5oJtjJJOsuhY/7EBgyrdLIOfv0CHLHfhcsY3+JZNce0sQihbjdmzYeD552AAgh cC0EqUr1j1EgEnpl0n7Rs2FE+NqUkjsU6kF8XV1ZjcZbjrapkk4/s17qcJucZWAO ta8cLRxq6klgFHYExIrQEHrYhggEg0jTYT+wIPofVq9LDYWeIBxwlAT41Hc6XMni hjxwPEZ0qM/LtYr0IyZIc5jCLOljsZD1BC7cD+yXHEHEfozIL1fA4Lxo7Ok0+DJL YxIkU7qNcHgVqBmFvELdFDojVj9z6t8= -----END CERTIFICATE-----Generated at Thu Oct 9 00:52:19 2025 by rpki-client