$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa File: 9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa (raw, json) Hash identifier: FNOszwwBRrtz7vyse6VaOS1SfSNjRfyMU3wAQqkk/os= Subject key identifier: CA:87:A9:95:48:9F:14:CD:46:81:38:33:CF:BD:84:BB:69:D1:B2:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD42A253533B819B29027CC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa Signing time: Tue 26 Aug 2025 22:54:32 +0000 ROA not before: Tue 26 Aug 2025 22:54:32 +0000 ROA not after: Mon 24 Nov 2025 23:54:32 +0000 asID: 31898 IP address blocks: 129.191.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:a2:53:53:3b:81:9b:29:02:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:32 2025 GMT Not After : Nov 24 23:54:32 2025 GMT Subject: CN=95ae0829-165d-4328-9335-70451897903d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:9e:99:81:e6:68:2f:06:f8:ee:b3:6b:5a: a4:0e:f2:6f:2d:96:43:bf:0d:48:13:73:12:91:8b: 2f:b4:b2:d5:72:1a:dd:a2:c2:98:21:82:6f:58:20: 56:3d:eb:3e:30:32:d8:45:66:81:17:c9:4e:df:4f: e8:e6:99:ac:aa:d9:f5:b5:7a:20:bb:20:c2:c1:0d: 7a:d8:22:08:57:a1:21:1a:a5:51:48:3e:8a:29:ec: 35:14:fb:08:2b:fd:dd:a5:c2:f1:9a:4f:35:3a:13: 2e:32:54:68:1b:38:c7:b1:f6:82:0e:bd:ee:68:4d: 67:e8:d5:47:ee:d7:ee:e5:de:d6:93:01:f4:4e:de: 9f:c7:dc:ee:08:9e:1e:5f:ab:9d:40:1d:17:e8:9d: f2:6e:76:f7:d3:22:56:3c:a8:4a:a4:a2:67:d5:4c: 1a:f7:73:bf:c1:62:7b:e2:5c:52:ee:8f:3d:e0:15: 33:6a:8f:c3:03:62:49:4f:72:ae:db:1a:a8:32:af: c5:a0:4d:14:0e:d4:33:09:17:7c:a8:5c:51:56:88: a5:84:6f:68:9d:a0:5c:8b:f6:18:4b:7b:4a:02:17: de:68:5c:27:45:20:24:ae:fa:5f:5e:2a:2d:d4:f4: 46:7a:59:a8:e3:55:43:c5:dc:23:46:49:87:b1:bb: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:87:A9:95:48:9F:14:CD:46:81:38:33:CF:BD:84:BB:69:D1:B2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9c8ee91b-84f9-3af8-a805-f49c3e862a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.191.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:05:de:55:e1:c9:17:42:3f:ef:6c:af:bf:79:a9:3b:96: 69:3b:80:87:ce:b4:15:ee:e7:64:dc:89:a6:2a:2e:d3:f9:b6: f0:72:f0:c8:90:07:83:5b:72:fb:f3:e1:89:60:51:89:3a:28: 08:b8:1a:c6:9d:18:86:a9:01:ac:4b:31:d3:10:82:04:14:05: b5:5b:c0:f2:4e:49:5d:0d:ae:98:f9:6a:d0:f5:8d:be:7c:38: b7:17:7e:55:22:0b:a8:11:dd:3d:91:d2:f7:1c:40:93:1d:4a: 7f:3b:b5:33:d9:53:f8:93:16:00:ec:7c:f7:16:03:6b:75:f5: f8:cc:48:9c:23:26:33:22:bc:58:e4:59:73:c6:f1:c2:84:f9: 8c:9b:2a:af:67:27:97:f8:30:74:0e:3c:b2:0f:bc:92:82:fd: 19:0a:fc:0b:3e:52:a7:8c:ae:2d:c9:57:df:54:24:7c:4c:7c: b0:27:8d:9e:26:c9:75:69:00:13:dd:df:03:37:b8:70:af:8c: 42:f5:2b:44:bd:41:29:5a:55:c5:d7:64:75:49:ca:44:e6:50: 02:7a:cc:d9:c7:07:80:5a:f1:4a:4a:cb:da:29:01:e6:59:fb: 38:a2:b5:6d:ea:e3:c2:50:b4:9d:7c:ce:4c:f3:79:c2:13:eb: b2:ad:a5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QqJTUzuBmykCfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQzMloXDTI1MTEyNDIzNTQzMlowLzEtMCsGA1UEAxMk OTVhZTA4MjktMTY1ZC00MzI4LTkzMzUtNzA0NTE4OTc5MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qGemYHmaC8G+O6za1qkDvJvLZZDvw1IE3MS kYsvtLLVchrdosKYIYJvWCBWPes+MDLYRWaBF8lO30/o5pmsqtn1tXoguyDCwQ16 2CIIV6EhGqVRSD6KKew1FPsIK/3dpcLxmk81OhMuMlRoGzjHsfaCDr3uaE1n6NVH 7tfu5d7WkwH0Tt6fx9zuCJ4eX6udQB0X6J3ybnb30yJWPKhKpKJn1Uwa93O/wWJ7 4lxS7o894BUzao/DA2JJT3Ku2xqoMq/FoE0UDtQzCRd8qFxRVoilhG9onaBci/YY S3tKAhfeaFwnRSAkrvpfXiot1PRGelmo41VDxdwjRkmHsbtM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqHqZVInxTNRoE4M8+9hLtp0bLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWM4ZWU5MWItODRmOS0z YWY4LWE4MDUtZjQ5YzNlODYyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABABd5V4ckXQj/vbK+/eak7lmk7gIfOtBXu52TciaYqLtP5tvBy8MiQ B4Nbcvvz4YlgUYk6KAi4GsadGIapAaxLMdMQggQUBbVbwPJOSV0Nrpj5atD1jb58 OLcXflUiC6gR3T2R0vccQJMdSn87tTPZU/iTFgDsfPcWA2t19fjMSJwjJjMivFjk WXPG8cKE+YybKq9nJ5f4MHQOPLIPvJKC/RkK/As+UqeMri3JV99UJHxMfLAnjZ4m yXVpABPd3wM3uHCvjEL1K0S9QSlaVcXXZHVJykTmUAJ6zNnHB4Ba8UpKy9opAeZZ +ziitW3q48JQtJ18zkzzecIT67KtpaY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:14 2025 by rpki-client