$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa File: fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa (raw, json) Hash identifier: N6HvY7SLVO6FjeJwcgV2ZTk9b9uZoPqFJLUvy+/byc8= Subject key identifier: D7:D6:1B:A9:79:8E:D8:01:74:20:04:49:E4:03:75:D5:D9:DF:A4:F8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF8C0738FE0DC0CDF868081E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa Signing time: Mon 25 Aug 2025 08:09:00 +0000 ROA not before: Mon 25 Aug 2025 08:09:00 +0000 ROA not after: Sun 23 Nov 2025 09:09:00 +0000 asID: 31898 IP address blocks: 129.158.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:c0:73:8f:e0:dc:0c:df:86:80:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 25 08:09:00 2025 GMT Not After : Nov 23 09:09:00 2025 GMT Subject: CN=6e95a81c-6d46-4e3b-bf65-205532aae1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:de:26:93:77:b0:e0:e5:f0:2f:2c:04:69: 7d:51:c3:da:31:dd:48:fa:a6:40:1b:07:22:1f:32: e7:f3:67:38:a7:6c:b3:b7:cd:43:c5:84:07:cc:49: eb:9b:1e:74:a9:c7:51:e6:58:25:1d:b3:89:10:c1: ea:28:48:13:f8:0a:5b:2a:de:75:45:28:9a:db:64: 86:7b:73:5c:2d:07:90:99:4c:4a:0a:af:52:f3:bd: bb:8e:58:98:72:4b:75:09:e1:15:5b:34:af:f2:98: 9b:d5:96:f3:a6:4f:e1:90:dc:9c:da:59:55:59:b7: 92:37:5c:71:f9:fd:aa:f3:f3:4c:18:4c:7f:89:b8: ab:b1:cb:38:a7:92:14:36:09:b9:95:86:52:31:fe: 07:bb:20:4c:6c:ec:42:f7:be:31:ab:6b:17:e5:ff: 6a:ca:ce:a1:f7:77:db:04:b2:4c:00:be:e1:c0:c6: bc:4a:67:3c:a3:64:ff:70:80:0d:e7:e9:c0:a4:75: 34:cd:f6:8c:89:a0:a4:ec:69:75:e7:89:eb:75:e2: 4c:28:bc:94:14:21:ac:8f:33:af:73:70:a4:47:63: 0b:9e:e8:23:4e:5c:f1:2d:83:23:91:74:61:38:02: 1d:d2:9e:76:65:54:bf:45:b2:aa:c5:25:ca:71:fa: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D6:1B:A9:79:8E:D8:01:74:20:04:49:E4:03:75:D5:D9:DF:A4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fcc6e632-afe0-368b-83ce-cbdc80c4a43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.158.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ff:02:95:d1:06:28:6e:ea:52:8e:d3:39:6b:b4:84:a4:c2: f5:30:9a:3f:df:1d:bd:50:7c:c8:39:74:18:b6:c5:f0:08:ac: 1b:db:d0:6a:fb:85:0b:7c:a1:a0:83:4a:a5:44:70:1b:22:5b: ed:91:6b:ce:1f:11:35:94:62:c6:90:d0:70:70:1f:59:1c:e1: 88:8a:50:54:2e:b0:86:52:2d:15:2d:ef:4a:1e:53:d1:db:da: e6:ae:21:7c:c9:3f:c5:2d:4f:44:f1:02:96:0d:14:e7:7c:11: 74:a4:af:af:9a:c2:f4:e9:dc:11:2e:2a:0c:5e:1b:a0:1f:92: ae:8b:e3:c8:dc:8a:8b:96:f0:b6:18:4c:c4:5b:54:13:ec:f8: f3:b6:71:f1:2c:14:e9:2d:5f:db:55:04:58:00:3b:ab:a2:ea: 99:3b:bf:d7:ca:2b:92:97:4c:0c:4f:bc:9b:bf:9c:48:81:fd: 86:fe:bf:4e:44:1b:b1:60:be:5f:fb:5d:d3:10:a6:85:8a:b6: 3c:dd:21:46:d6:2d:4b:b9:63:05:bb:4d:ab:db:36:24:21:be: 4c:0e:aa:43:38:ba:d0:e2:46:92:45:9c:3c:89:e0:dd:ea:93: bd:57:00:d9:d2:bb:3f:6e:e3:57:98:0e:62:09:91:2c:76:fe: 66:d5:ea:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr4wHOP4NwM34aAgeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNTA4MDkwMFoXDTI1MTEyMzA5MDkwMFowLzEtMCsGA1UEAxMk NmU5NWE4MWMtNmQ0Ni00ZTNiLWJmNjUtMjA1NTMyYWFlMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7HeJpN3sODl8C8sBGl9UcPaMd1I+qZAGwci HzLn82c4p2yzt81DxYQHzEnrmx50qcdR5lglHbOJEMHqKEgT+ApbKt51RSia22SG e3NcLQeQmUxKCq9S8727jliYckt1CeEVWzSv8pib1Zbzpk/hkNyc2llVWbeSN1xx +f2q8/NMGEx/ibirscs4p5IUNgm5lYZSMf4HuyBMbOxC974xq2sX5f9qys6h93fb BLJMAL7hwMa8Smc8o2T/cIAN5+nApHU0zfaMiaCk7Gl154nrdeJMKLyUFCGsjzOv c3CkR2MLnugjTlzxLYMjkXRhOAId0p52ZVS/RbKqxSXKcfrwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfWG6l5jtgBdCAESeQDddXZ36T4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmNjNmU2MzItYWZlMC0z NjhiLTgzY2UtY2JkYzgwYzRhNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZ5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID/ApXRBihu6lKO0zlrtISkwvUwmj/fHb1QfMg5dBi2xfAIrBvb0Gr7 hQt8oaCDSqVEcBsiW+2Ra84fETWUYsaQ0HBwH1kc4YiKUFQusIZSLRUt70oeU9Hb 2uauIXzJP8UtT0TxApYNFOd8EXSkr6+awvTp3BEuKgxeG6Afkq6L48jciouW8LYY TMRbVBPs+PO2cfEsFOktX9tVBFgAO6ui6pk7v9fKK5KXTAxPvJu/nEiB/Yb+v05E G7Fgvl/7XdMQpoWKtjzdIUbWLUu5YwW7TavbNiQhvkwOqkM4utDiRpJFnDyJ4N3q k71XANnSuz9u41eYDmIJkSx2/mbV6jk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:17 2025 by rpki-client