$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b421b2d-2f6b-3bed-8340-d32e81670ff7.roa File: 0b421b2d-2f6b-3bed-8340-d32e81670ff7.roa (raw, json) Hash identifier: ymYDY5GsjbALrAPxmQp4NmgqTjMw9kavTYunbdys4ws= Subject key identifier: 43:BF:B6:B6:6E:94:99:8F:E0:42:CD:BD:C5:A3:62:B7:E5:CB:64:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C5E5CFE443E002275F420 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b421b2d-2f6b-3bed-8340-d32e81670ff7.roa Signing time: Tue 19 Aug 2025 17:41:16 +0000 ROA not before: Tue 19 Aug 2025 17:41:16 +0000 ROA not after: Mon 17 Nov 2025 18:41:16 +0000 asID: 31898 IP address blocks: 129.154.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:5e:5c:fe:44:3e:00:22:75:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:16 2025 GMT Not After : Nov 17 18:41:16 2025 GMT Subject: CN=5b469e41-4e8d-466a-80d5-2bb41c73a57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:41:97:de:77:97:05:3a:87:f9:0a:83:27: a0:c4:1a:0b:fb:32:5b:cc:29:8c:6d:b2:aa:40:d9: b1:e8:f8:78:39:b0:70:55:72:9c:a5:8e:98:ca:c5: f5:fb:55:58:80:7e:e5:95:c1:94:8f:f6:b6:ca:91: a7:85:48:e2:95:77:05:bc:a3:19:34:cb:98:b1:59: 23:69:f7:34:16:9d:42:96:7e:74:4c:b6:fa:83:1b: 72:5e:c8:ab:81:f8:7c:63:42:b6:33:fd:8b:0c:c4: a0:8b:44:4b:95:d5:cf:29:39:60:f5:b9:9f:4e:6f: f9:9c:46:5d:d4:48:52:a5:05:74:64:34:b2:12:50: 6b:60:12:69:cf:54:f2:8c:10:66:a4:0a:68:9d:28: c7:d5:a7:09:d1:90:cb:23:3e:9e:fa:a2:df:66:c7: ef:d5:35:22:c1:52:48:85:84:2b:e9:b9:ad:4e:2e: 52:77:1f:ab:8a:2e:6f:d0:96:b0:29:43:2e:7b:9e: 2e:07:93:c3:b8:9f:b8:95:02:83:5b:11:ee:59:6f: 61:64:97:81:cc:31:db:d5:52:2f:67:9e:d1:c6:48: 87:9a:36:be:41:38:bf:0c:2b:a9:88:61:41:9b:bf: 6b:04:97:43:19:91:3b:0e:98:55:63:80:9f:c7:e2: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BF:B6:B6:6E:94:99:8F:E0:42:CD:BD:C5:A3:62:B7:E5:CB:64:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0b421b2d-2f6b-3bed-8340-d32e81670ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.154.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5e:09:b5:71:80:84:80:8c:d5:01:93:34:d4:ed:3f:f5:41: 02:ec:e1:36:35:cd:a1:5c:7d:7d:db:10:2a:1b:17:04:b4:35: 62:60:f5:09:7e:ea:73:1e:66:49:65:c6:98:4b:3c:ca:45:f5: f6:87:42:b5:b4:e0:8e:2c:d9:25:94:75:aa:12:5f:79:6e:c6: f2:01:de:13:3a:58:1f:35:ea:02:3d:dc:d4:40:5b:eb:a0:b9: 4a:30:38:0e:b6:a3:92:d2:69:0c:79:fe:27:e8:08:99:03:02: e2:30:91:f9:ef:45:75:76:ba:93:ec:5b:df:e1:d9:2e:d1:ac: 75:9d:32:16:da:8a:a6:fe:38:ca:2b:20:99:48:19:d7:7f:30: 61:33:90:b7:07:a4:c1:e0:7e:9d:cc:01:e1:c2:9e:bd:d4:20: 3a:47:8f:06:37:00:db:84:4a:91:c1:be:e0:b7:df:ee:08:0f: 28:a2:a8:69:8b:73:9d:6d:00:46:2c:02:43:e2:ad:9f:c0:68: 9f:6b:28:d8:e0:f2:b3:77:3a:39:44:66:c4:61:36:1e:5f:61: 96:d8:96:0d:22:6d:34:c6:2f:30:7e:79:87:7d:87:2a:75:aa: 5d:31:b5:08:30:97:5b:d8:cc:69:9d:06:00:5b:dc:f3:7a:01: f6:6b:f5:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHF5c/kQ+ACJ19CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDExNloXDTI1MTExNzE4NDExNlowLzEtMCsGA1UEAxMk NWI0NjllNDEtNGU4ZC00NjZhLTgwZDUtMmJiNDFjNzNhNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo69Bl953lwU6h/kKgyegxBoL+zJbzCmMbbKq QNmx6Ph4ObBwVXKcpY6YysX1+1VYgH7llcGUj/a2ypGnhUjilXcFvKMZNMuYsVkj afc0Fp1Cln50TLb6gxtyXsirgfh8Y0K2M/2LDMSgi0RLldXPKTlg9bmfTm/5nEZd 1EhSpQV0ZDSyElBrYBJpz1TyjBBmpAponSjH1acJ0ZDLIz6e+qLfZsfv1TUiwVJI hYQr6bmtTi5Sdx+rii5v0JawKUMue54uB5PDuJ+4lQKDWxHuWW9hZJeBzDHb1VIv Z57RxkiHmja+QTi/DCupiGFBm79rBJdDGZE7DphVY4Cfx+KTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO/trZulJmP4ELNvcWjYrfly2QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGI0MjFiMmQtMmY2Yi0z YmVkLTgzNDAtZDMyZTgxNjcwZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFleCbVxgISAjNUBkzTU7T/1QQLs4TY1zaFcfX3bECobFwS0NWJg9Ql+ 6nMeZkllxphLPMpF9faHQrW04I4s2SWUdaoSX3luxvIB3hM6WB816gI93NRAW+ug uUowOA62o5LSaQx5/ifoCJkDAuIwkfnvRXV2upPsW9/h2S7RrHWdMhbaiqb+OMor IJlIGdd/MGEzkLcHpMHgfp3MAeHCnr3UIDpHjwY3ANuESpHBvuC33+4IDyiiqGmL c51tAEYsAkPirZ/AaJ9rKNjg8rN3OjlEZsRhNh5fYZbYlg0ibTTGLzB+eYd9hyp1 ql0xtQgwl1vYzGmdBgBb3PN6AfZr9Z4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:31:31 2025 by rpki-client