$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa File: 0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa (raw, json) Hash identifier: m9EkLIj0WIcO2Cio8JCkFwZ6HRbYOb9cTGH1+1t44m0= Subject key identifier: AC:CC:AD:69:6F:AD:79:5D:DD:6E:BF:55:90:C0:F6:3B:6F:FB:45:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA763A749E2FBAA0CE19C7D0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa Signing time: Fri 08 Aug 2025 18:12:16 +0000 ROA not before: Fri 08 Aug 2025 18:12:16 +0000 ROA not after: Thu 06 Nov 2025 19:12:16 +0000 asID: 31898 IP address blocks: 129.151.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:3a:74:9e:2f:ba:a0:ce:19:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:16 2025 GMT Not After : Nov 6 19:12:16 2025 GMT Subject: CN=ed65a6a9-f875-4ef7-9fab-776d09ed9a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:da:6c:36:14:78:20:21:6f:5c:d3:bc:f6: 44:b6:37:7e:e7:98:b3:27:8a:31:a6:e2:e4:dc:5a: e5:57:30:be:33:18:38:85:95:c3:af:c7:88:d2:95: 4a:7c:e2:27:10:0e:c0:b0:10:42:e5:be:34:21:bb: e5:c9:7e:4a:c3:98:69:71:c2:37:54:ae:e3:1d:4b: 6e:ca:3a:21:69:4a:b4:35:c8:71:0a:4d:10:b0:e5: af:d0:b2:68:0c:e1:38:10:1a:42:fd:44:d9:8c:4c: e0:44:e3:2a:3c:ea:3b:ca:3b:b0:20:14:d7:67:f0: d8:e9:ad:7c:e6:95:ef:c9:c0:2a:f8:b1:45:0b:b2: a1:11:38:53:61:4d:46:b2:4d:c7:57:48:d3:85:d4: 38:9a:18:f9:fd:91:bf:0e:56:c2:c9:59:3b:b8:98: e5:84:dc:b2:cb:4c:54:6d:ae:6f:ed:1c:93:66:8b: c7:6b:3d:a3:25:8e:50:f8:14:5e:01:30:5f:39:66: 43:20:6c:53:f4:07:6f:da:31:af:46:24:46:75:69: 55:96:ff:cd:2c:97:cd:32:b7:f1:cc:01:33:c2:7a: 03:ca:df:54:66:fe:64:7e:93:a4:0d:08:b4:f3:a5: 96:46:5e:eb:b0:b9:ea:3a:1f:37:04:55:73:ec:26: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:AD:69:6F:AD:79:5D:DD:6E:BF:55:90:C0:F6:3B:6F:FB:45:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0fb2b91b-7ae4-3847-9668-c174ea24aaa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:76:66:e2:47:f9:ec:b0:ea:81:ad:c4:3f:b4:7d:cf:15:37: 58:a7:80:11:4d:a1:6f:56:52:23:99:1d:8f:fd:32:c6:65:0b: 98:87:57:cb:97:b4:00:62:1b:43:fc:88:5f:28:f1:40:81:15: 8f:be:48:5d:ba:0f:43:49:9c:b3:20:19:32:fa:d7:a1:1d:d8: 26:f3:d3:4c:be:86:8f:dc:28:ad:12:4e:b4:ce:27:04:8a:25: 8f:bc:a6:4e:0d:9a:c3:af:ec:00:c1:d7:b5:1d:fd:85:81:e3: ee:12:1b:28:02:c0:b4:65:a6:99:db:c7:67:9f:7e:86:79:8d: 16:7e:25:53:a0:8a:c9:3e:93:34:d3:0e:f0:d4:09:38:4f:df: 40:ea:03:0c:7e:f3:fa:f1:0e:1a:15:8f:72:c4:3f:c9:89:3e: f2:f6:b0:2e:f8:8a:c8:eb:ad:e8:99:c1:ef:af:96:dc:7e:bc: c7:36:54:c3:eb:40:e8:c4:75:a9:6c:14:1b:85:33:0d:11:d9: c0:73:58:d7:2b:84:c4:fb:91:c3:b0:b4:74:11:ef:b9:01:ff: 6d:18:1f:d3:dd:43:8b:51:9d:71:c4:c1:e8:70:d9:98:9f:01: 64:ab:3b:b3:2a:40:f1:f7:c8:d9:78:e6:81:6d:fd:1f:2b:58: 91:74:b1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdjp0ni+6oM4Zx9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTIxNloXDTI1MTEwNjE5MTIxNlowLzEtMCsGA1UEAxMk ZWQ2NWE2YTktZjg3NS00ZWY3LTlmYWItNzc2ZDA5ZWQ5YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpnabDYUeCAhb1zTvPZEtjd+55izJ4oxpuLk 3FrlVzC+Mxg4hZXDr8eI0pVKfOInEA7AsBBC5b40IbvlyX5Kw5hpccI3VK7jHUtu yjohaUq0NchxCk0QsOWv0LJoDOE4EBpC/UTZjEzgROMqPOo7yjuwIBTXZ/DY6a18 5pXvycAq+LFFC7KhEThTYU1Gsk3HV0jThdQ4mhj5/ZG/DlbCyVk7uJjlhNyyy0xU ba5v7RyTZovHaz2jJY5Q+BReATBfOWZDIGxT9Adv2jGvRiRGdWlVlv/NLJfNMrfx zAEzwnoDyt9UZv5kfpOkDQi086WWRl7rsLnqOh83BFVz7CbGewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzMrWlvrXld3W6/VZDA9jtv+0U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGZiMmI5MWItN2FlNC0z ODQ3LTk2NjgtYzE3NGVhMjRhYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd2ZuJH+eyw6oGtxD+0fc8VN1ingBFNoW9WUiOZHY/9MsZlC5iHV8uX tABiG0P8iF8o8UCBFY++SF26D0NJnLMgGTL616Ed2Cbz00y+ho/cKK0STrTOJwSK JY+8pk4NmsOv7ADB17Ud/YWB4+4SGygCwLRlppnbx2effoZ5jRZ+JVOgisk+kzTT DvDUCThP30DqAwx+8/rxDhoVj3LEP8mJPvL2sC74isjrreiZwe+vltx+vMc2VMPr QOjEdalsFBuFMw0R2cBzWNcrhMT7kcOwtHQR77kB/20YH9PdQ4tRnXHEwehw2Zif AWSrO7MqQPH3yNl45oFt/R8rWJF0sRw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:10 2025 by rpki-client