$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa File: 99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa (raw, json) Hash identifier: dyOTFFfaYlMDvOaVm24UfeQyx7u782a+w2f0EDWG3Bk= Subject key identifier: A5:E2:7E:D1:CC:38:AC:EB:07:7E:BB:3B:99:E1:34:FF:6E:C6:DD:46 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8BFE57E517D3E5599245C20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa Signing time: Mon 25 Aug 2025 08:07:53 +0000 ROA not before: Mon 25 Aug 2025 08:07:53 +0000 ROA not after: Sun 23 Nov 2025 09:07:53 +0000 asID: 31898 IP address blocks: 129.145.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:bf:e5:7e:51:7d:3e:55:99:24:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:07:53 2025 GMT Not After : Nov 23 09:07:53 2025 GMT Subject: CN=92597139-8796-40e5-944e-194fcb7fbff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:45:df:bc:0c:c1:12:5f:53:e2:6f:48:ff: da:26:9f:21:7e:1b:48:ab:d4:54:7f:cf:69:5b:8f: fe:36:b4:71:30:87:3d:ea:27:dc:84:f7:8a:19:2c: 18:96:d4:2c:23:dc:40:20:0d:70:0b:09:49:eb:f6: 3a:f0:68:77:fc:24:f1:3f:a4:60:aa:05:cd:d4:85: 33:80:60:5c:49:9d:0c:84:e3:16:b0:77:c1:55:d1: 5c:35:01:3c:d0:ad:c4:91:13:40:63:21:51:91:2a: 92:8d:0b:97:6d:f4:11:8c:d1:43:b9:97:74:aa:6b: 14:a6:7d:f3:a7:b5:34:9c:b8:fc:7e:86:be:84:98: da:73:2b:ba:92:8f:cb:14:d2:63:14:01:43:48:e5: 1a:81:71:84:94:23:24:00:a8:49:4f:61:cf:34:4f: 48:73:f3:6c:3b:8d:fd:d8:76:0a:78:e9:cd:04:02: 03:d2:eb:22:0d:b0:5b:bb:02:9d:26:ce:4d:ea:6f: a7:c5:4f:d3:f9:0e:db:13:ac:fa:92:67:08:a6:1c: 7a:5d:6a:04:fe:aa:21:7d:c8:e2:7f:8f:d0:ff:53: 08:cf:0c:bc:82:52:81:e3:ab:98:06:f1:8b:e2:4f: ed:36:bd:1c:03:c5:12:e6:01:3b:b3:23:89:e3:f3: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E2:7E:D1:CC:38:AC:EB:07:7E:BB:3B:99:E1:34:FF:6E:C6:DD:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99949ebf-598f-3d56-a4ca-cb9209a8afcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:60:9f:c7:8d:6c:58:a8:6d:02:de:43:69:06:a6:f1:1e:6e: 2d:6c:d7:23:2d:10:e0:58:3d:19:b5:50:12:df:f1:f0:21:08: a5:e7:a0:f8:4f:7e:71:0e:c9:fd:d3:38:16:33:9c:86:5b:ce: f8:6d:33:be:16:b7:f9:bf:aa:9e:d4:1f:71:cb:f9:d0:4a:c4: f6:fc:96:b2:98:c1:f2:46:01:13:38:6d:58:f2:ee:76:56:67: 8a:ed:65:3e:3d:01:fb:b9:06:3f:15:f7:02:8e:d9:2f:8b:b1: d2:30:c0:e9:6d:97:0c:cf:b2:6e:a0:9c:3a:18:0b:63:0a:c9: ef:bf:25:ce:f1:bb:bc:d2:66:73:ed:8f:7a:13:43:d2:d4:c8: 9a:4c:1e:99:15:88:80:c7:aa:17:9b:13:e0:1c:d1:21:84:09: 6e:45:8a:9d:54:b0:ee:ff:7e:4c:aa:5b:ac:85:91:53:f7:c7: fc:24:47:8e:ab:b7:be:e0:50:d4:01:6e:66:96:52:a3:93:43: bb:01:64:35:16:3d:49:57:68:00:bf:59:4a:51:87:04:35:2a: 53:3f:00:c6:b5:ee:45:3a:51:e2:98:6e:98:8f:f8:f8:1b:04: 5d:96:41:2a:3c:54:67:43:c8:c2:4d:b1:47:c6:1d:66:1a:61: c8:27:f6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4v+V+UX0+VZkkXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDc1M1oXDTI1MTEyMzA5MDc1M1owLzEtMCsGA1UEAxMk OTI1OTcxMzktODc5Ni00MGU1LTk0NGUtMTk0ZmNiN2ZiZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSJF37wMwRJfU+JvSP/aJp8hfhtIq9RUf89p W4/+NrRxMIc96ifchPeKGSwYltQsI9xAIA1wCwlJ6/Y68Gh3/CTxP6RgqgXN1IUz gGBcSZ0MhOMWsHfBVdFcNQE80K3EkRNAYyFRkSqSjQuXbfQRjNFDuZd0qmsUpn3z p7U0nLj8foa+hJjacyu6ko/LFNJjFAFDSOUagXGElCMkAKhJT2HPNE9Ic/NsO439 2HYKeOnNBAID0usiDbBbuwKdJs5N6m+nxU/T+Q7bE6z6kmcIphx6XWoE/qohfcji f4/Q/1MIzwy8glKB46uYBvGL4k/tNr0cA8US5gE7syOJ4/MiRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXiftHMOKzrB367O5nhNP9uxt1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTk5NDllYmYtNTk4Zi0z ZDU2LWE0Y2EtY2I5MjA5YThhZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNgn8eNbFiobQLeQ2kGpvEebi1s1yMtEOBYPRm1UBLf8fAhCKXnoPhP fnEOyf3TOBYznIZbzvhtM74Wt/m/qp7UH3HL+dBKxPb8lrKYwfJGARM4bVjy7nZW Z4rtZT49Afu5Bj8V9wKO2S+LsdIwwOltlwzPsm6gnDoYC2MKye+/Jc7xu7zSZnPt j3oTQ9LUyJpMHpkViIDHqhebE+Ac0SGECW5Fip1UsO7/fkyqW6yFkVP3x/wkR46r t77gUNQBbmaWUqOTQ7sBZDUWPUlXaAC/WUpRhwQ1KlM/AMa17kU6UeKYbpiP+Pgb BF2WQSo8VGdDyMJNsUfGHWYaYcgn9vY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:07:26 2025 by rpki-client