$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa File: fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa (raw, json) Hash identifier: iDq4YEVJ8vBbAUUMQfMil1OQpjYbpOxlVJGcDg+EYUE= Subject key identifier: 53:DD:60:90:5B:E0:9B:41:3F:9A:AC:AD:23:94:C3:44:D8:4D:27:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD429A06D6C4E8D89EAECDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa Signing time: Tue 26 Aug 2025 22:54:28 +0000 ROA not before: Tue 26 Aug 2025 22:54:28 +0000 ROA not after: Mon 24 Nov 2025 23:54:28 +0000 asID: 31898 IP address blocks: 129.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:42:9a:06:d6:c4:e8:d8:9e:ae:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:54:28 2025 GMT Not After : Nov 24 23:54:28 2025 GMT Subject: CN=18b769d0-d328-4da4-9fc9-5a21d9edd366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:f0:f7:14:29:55:cd:3a:0f:0d:33:58:6c: 1e:f7:8f:99:52:67:06:6f:48:cb:21:5f:c1:26:f6: 1c:22:cf:97:d5:c9:bf:bc:b1:10:71:2f:ff:90:2d: 14:6b:6c:6d:a8:58:d7:d0:f5:48:f8:a5:6c:86:7d: 00:2e:d0:87:c7:19:2b:7d:fb:42:fb:5b:e9:93:f3: b3:93:b3:b1:6d:a3:28:e7:3f:ee:bd:37:cc:17:15: 34:63:fe:4a:07:c3:a6:7b:11:d1:26:21:ec:f0:1d: e9:fb:0e:03:73:8e:8b:1f:9a:2f:62:a5:16:55:05: d0:5f:5e:78:44:35:1d:c6:e6:50:66:66:ea:b1:cc: ef:b2:24:d3:f7:7e:0f:ec:87:ad:f9:43:3d:29:cb: ef:2e:2d:8d:99:a5:72:39:9a:70:d9:08:7b:ea:d1: ca:6c:40:7f:28:95:ac:f8:8e:f5:4f:65:6f:b4:14: 84:02:e9:1b:0b:7a:92:d3:2f:33:cc:e6:cc:4b:ac: d2:9e:47:17:e2:c4:84:cd:00:77:b0:93:b4:cc:10: 68:8e:f6:dd:0f:9e:fa:4b:76:52:20:87:f6:5c:c2: 00:9b:47:6d:09:01:c5:0d:39:fa:c9:f1:7e:61:7a: 93:a2:26:a0:38:32:64:4d:f7:92:a1:cb:71:49:9a: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DD:60:90:5B:E0:9B:41:3F:9A:AC:AD:23:94:C3:44:D8:4D:27:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:da:98:b3:50:4c:fe:c7:a5:02:b6:62:b3:9f:9a:bb:45:60: 7e:37:7f:7e:26:13:15:46:71:3b:9c:cb:99:f4:ef:71:3c:e2: d8:f3:e0:ad:67:19:8d:b1:5b:a6:78:fe:ad:8b:87:2c:39:39: 04:d1:f1:9a:4e:d9:c6:d1:86:62:c2:ea:95:30:26:21:b0:23: 98:6c:68:c1:86:3f:05:a5:00:c0:b0:34:1e:0d:3f:23:5a:e6: 84:6d:3b:b8:fd:4b:4a:0d:f2:f3:50:f6:fb:1e:85:48:05:69: 95:48:d5:73:0d:66:88:45:62:20:02:47:18:36:d5:e8:98:ef: 41:0f:6f:ac:e8:9a:03:6a:f8:3c:34:0c:82:ca:3d:a9:af:cd: f7:0c:53:c8:8e:b1:12:60:11:9d:8a:a8:3b:d9:74:79:90:bb: 99:7b:d2:f9:89:d8:b6:75:7e:8f:db:0b:3d:b7:23:b1:00:cc: 24:5b:b8:97:1a:15:ed:b7:7a:34:f4:49:b1:7b:f0:5a:ec:86: 86:52:1b:f9:d4:54:10:0d:10:8f:b3:b0:b1:dc:04:49:18:72: d7:5f:4b:2b:e7:a0:78:2c:1d:67:ae:15:72:13:b9:98:55:75: c6:a1:a4:0c:f4:95:86:aa:cb:69:1a:35:09:61:a8:2c:20:af: 6c:4e:50:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9QpoG1sTo2J6uzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTQyOFoXDTI1MTEyNDIzNTQyOFowLzEtMCsGA1UEAxMk MThiNzY5ZDAtZDMyOC00ZGE0LTlmYzktNWEyMWQ5ZWRkMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3rw9xQpVc06Dw0zWGwe94+ZUmcGb0jLIV/B JvYcIs+X1cm/vLEQcS//kC0Ua2xtqFjX0PVI+KVshn0ALtCHxxkrfftC+1vpk/Oz k7OxbaMo5z/uvTfMFxU0Y/5KB8OmexHRJiHs8B3p+w4Dc46LH5ovYqUWVQXQX154 RDUdxuZQZmbqsczvsiTT934P7Iet+UM9KcvvLi2NmaVyOZpw2Qh76tHKbEB/KJWs +I71T2VvtBSEAukbC3qS0y8zzObMS6zSnkcX4sSEzQB3sJO0zBBojvbdD576S3ZS IIf2XMIAm0dtCQHFDTn6yfF+YXqToiagODJkTfeSoctxSZr8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPdYJBb4JtBP5qsrSOUw0TYTSfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQ5ZDE0NmEtOTU2NS0z MWU1LTllMGUtZDJkZTJlYmQxNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPamLNQTP7HpQK2YrOfmrtFYH43f34mExVGcTucy5n073E84tjz4K1n GY2xW6Z4/q2Lhyw5OQTR8ZpO2cbRhmLC6pUwJiGwI5hsaMGGPwWlAMCwNB4NPyNa 5oRtO7j9S0oN8vNQ9vsehUgFaZVI1XMNZohFYiACRxg21eiY70EPb6zomgNq+Dw0 DILKPamvzfcMU8iOsRJgEZ2KqDvZdHmQu5l70vmJ2LZ1fo/bCz23I7EAzCRbuJca Fe23ejT0SbF78FrshoZSG/nUVBANEI+zsLHcBEkYctdfSyvnoHgsHWeuFXITuZhV dcahpAz0lYaqy2kaNQlhqCwgr2xOUBc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:07:30 2025 by rpki-client