$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa File: abda09be-fab4-32da-9fec-a75f89cd4903.roa (raw, json) Hash identifier: EI/clUxM9fUQ/Q2XHPTakBxZv85E2flZOPzKKQC3O2M= Subject key identifier: AB:C8:24:9B:72:40:7D:E9:ED:17:D2:18:1E:2B:20:C7:B2:E8:C0:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C00884AB198886DFB045E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa Signing time: Mon 25 Aug 2025 08:08:09 +0000 ROA not before: Mon 25 Aug 2025 08:08:09 +0000 ROA not after: Sun 23 Nov 2025 09:08:09 +0000 asID: 31898 IP address blocks: 129.152.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c0:08:84:ab:19:88:86:df:b0:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:08:09 2025 GMT Not After : Nov 23 09:08:09 2025 GMT Subject: CN=73538a13-d865-48ef-8977-faa524db9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:78:a3:b0:05:0d:48:97:ac:2c:6c:25:ca: de:4c:ec:0f:24:2a:ec:47:11:36:1e:34:bf:9b:e1: d5:15:b5:78:2a:5f:50:e4:0f:73:29:c3:77:db:56: 91:4b:70:30:67:7f:85:1c:45:bc:c3:d3:d0:0e:47: a6:87:d0:51:0e:4e:5b:40:81:e7:4a:4a:86:03:e5: b7:c9:80:81:e5:7c:2b:f1:7d:4f:41:9e:1d:e8:aa: 02:76:75:67:7d:88:b6:03:6a:48:8c:f4:6e:4a:62: d1:30:8d:b3:aa:15:72:88:1c:8e:ac:56:02:b0:4e: 9b:a0:47:29:00:77:a7:ce:af:61:d9:07:06:6d:c6: 75:e0:9a:c3:f4:5a:c8:95:1f:66:5b:b0:70:0c:0f: c4:82:1c:91:b4:d5:89:df:96:d3:4a:c7:12:32:b1: 9f:6f:31:62:0e:21:6a:7f:9f:11:3c:df:b6:81:d1: 33:04:93:57:31:20:f0:0a:bf:48:7b:95:8c:27:e4: 89:3d:ba:85:7d:4d:02:d8:38:e8:17:00:e5:70:73: f3:15:08:05:24:28:d9:55:cb:bd:c7:1c:5b:fd:89: aa:28:01:cc:a0:12:b2:a6:9b:72:03:d5:d1:5e:2b: 8c:3b:6a:cb:62:75:4b:92:a9:89:68:45:f7:a9:06: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:24:9B:72:40:7D:E9:ED:17:D2:18:1E:2B:20:C7:B2:E8:C0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:75:85:e2:91:2c:04:8b:0a:fa:14:a1:18:1e:92:a8:d6:27: b2:78:28:ba:4f:be:d9:f3:c2:f6:cd:ba:fd:05:d5:4b:ec:54: d9:9c:f9:b5:e5:eb:c2:2a:95:79:08:02:18:08:8b:b0:f1:cb: 14:eb:53:ff:58:df:e6:a1:99:db:a9:78:1d:18:1f:b9:65:9c: e8:dc:83:5c:80:76:36:b1:90:60:5b:dd:52:c4:26:b6:0a:b7: da:2f:89:48:28:df:bb:da:48:b3:a3:2c:50:d2:2f:d9:66:01: 9d:ae:45:f9:84:ae:3d:51:7d:a1:83:89:7e:b7:55:c2:f5:00: d7:a7:c0:d2:48:79:49:59:10:96:d2:bd:1e:64:02:ce:a8:23: 71:ad:39:20:a5:9d:e4:aa:2e:89:2b:4c:f1:e2:d0:08:55:55: 8f:b1:6b:75:bd:3a:ed:33:91:bc:d5:90:31:49:0b:a6:c5:6a: f2:3f:91:a0:92:fd:53:d6:b6:b9:a4:4e:36:0e:3e:71:fc:d4: c9:f4:63:7c:9a:cb:5f:e8:76:42:78:45:74:df:3b:c7:ae:ee: e1:30:89:15:6d:45:c8:bc:7f:cd:1b:96:7d:dd:5c:50:dc:ca: c8:6b:ff:dd:96:e0:4d:71:a8:bc:87:f2:58:87:1d:74:c2:f9: ce:88:48:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wAiEqxmIht+wReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDgwOVoXDTI1MTEyMzA5MDgwOVowLzEtMCsGA1UEAxMk NzM1MzhhMTMtZDg2NS00OGVmLTg5NzctZmFhNTI0ZGI5MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJJ4o7AFDUiXrCxsJcreTOwPJCrsRxE2HjS/ m+HVFbV4Kl9Q5A9zKcN321aRS3AwZ3+FHEW8w9PQDkemh9BRDk5bQIHnSkqGA+W3 yYCB5Xwr8X1PQZ4d6KoCdnVnfYi2A2pIjPRuSmLRMI2zqhVyiByOrFYCsE6boEcp AHenzq9h2QcGbcZ14JrD9FrIlR9mW7BwDA/EghyRtNWJ35bTSscSMrGfbzFiDiFq f58RPN+2gdEzBJNXMSDwCr9Ie5WMJ+SJPbqFfU0C2DjoFwDlcHPzFQgFJCjZVcu9 xxxb/YmqKAHMoBKypptyA9XRXiuMO2rLYnVLkqmJaEX3qQa61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvIJJtyQH3p7RfSGB4rIMey6MBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWJkYTA5YmUtZmFiNC0z MmRhLTlmZWMtYTc1Zjg5Y2Q0OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE51heKRLASLCvoUoRgekqjWJ7J4KLpPvtnzwvbNuv0F1UvsVNmc+bXl 68IqlXkIAhgIi7DxyxTrU/9Y3+ahmdupeB0YH7llnOjcg1yAdjaxkGBb3VLEJrYK t9oviUgo37vaSLOjLFDSL9lmAZ2uRfmErj1RfaGDiX63VcL1ANenwNJIeUlZEJbS vR5kAs6oI3GtOSClneSqLokrTPHi0AhVVY+xa3W9Ou0zkbzVkDFJC6bFavI/kaCS /VPWtrmkTjYOPnH81Mn0Y3yay1/odkJ4RXTfO8eu7uEwiRVtRci8f80bln3dXFDc yshr/92W4E1xqLyH8liHHXTC+c6ISB4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:07 2025 by rpki-client