$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa File: 23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa (raw, json) Hash identifier: v7U+RXS4DcJIXamJDvDODYqJjdDP0fAW3HWUm4qKD/E= Subject key identifier: 49:4F:B8:06:11:C5:62:E7:1F:83:0F:4D:0C:D1:3B:4F:8E:72:12:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C561CFE9F02C089C10C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa Signing time: Tue 19 Aug 2025 17:41:12 +0000 ROA not before: Tue 19 Aug 2025 17:41:12 +0000 ROA not after: Mon 17 Nov 2025 18:41:12 +0000 asID: 31898 IP address blocks: 129.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:56:1c:fe:9f:02:c0:89:c1:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:12 2025 GMT Not After : Nov 17 18:41:12 2025 GMT Subject: CN=ccd3d67b-c212-4f23-88d4-9c1fe2c04e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:8a:fb:4b:3c:8b:b4:db:c1:3c:f8:2d:51: cb:7d:f0:9e:79:ef:94:02:fd:6f:e5:4f:30:c0:1c: dd:df:bf:ee:77:d4:3b:d7:be:90:f9:82:af:c6:87: ad:b9:9b:85:15:a1:e3:82:7c:03:a5:f9:1c:06:d2: d7:66:e0:1b:40:c1:6e:0f:c4:f3:20:4a:67:d0:f9: 56:b6:3d:f0:f5:f6:28:f7:70:6c:0e:41:79:b9:5b: 93:a8:12:33:3b:fa:2d:96:cd:8b:19:8b:d4:d7:02: 6b:20:69:9e:fb:ea:cb:90:45:d5:33:de:16:43:5d: ef:a7:1b:b2:96:d7:9f:c0:68:4e:a3:96:64:f5:d1: 49:dc:d8:57:49:a5:0a:6e:8b:fc:e6:c7:7e:bc:90: 4b:b1:09:c4:c1:e1:c9:be:e3:95:31:ff:26:82:5b: 7c:af:d4:5b:9f:c0:03:96:67:3f:4c:8d:43:15:e3: 15:4d:7e:25:de:c5:9f:26:5c:09:25:a5:78:af:bc: 59:8f:68:3b:36:3d:42:7d:5a:b4:d7:0b:49:70:b6: ae:be:ad:20:22:6b:08:14:a0:e8:6b:fb:a3:e8:06: 6a:11:75:d0:56:56:2b:46:75:99:27:ba:9f:44:5a: 10:62:8d:52:8d:89:62:5c:d0:2a:d0:61:c6:92:6f: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:B8:06:11:C5:62:E7:1F:83:0F:4D:0C:D1:3B:4F:8E:72:12:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cf:34:e5:9f:4a:a9:25:73:33:9a:d1:54:56:9f:f8:01:eb: 89:ac:f6:34:fc:bb:7e:7f:f6:f0:1f:b5:3e:6e:d0:b4:24:5c: f3:96:13:a7:18:37:b1:42:f0:59:68:f2:84:da:8c:fb:f2:ea: b2:8a:34:3d:00:22:52:f5:d8:b9:9f:a3:01:62:b6:6d:1f:58: ce:c7:8a:df:3c:46:31:09:c8:e6:dc:a4:bc:2f:6f:54:65:50: 8c:2f:00:47:3c:dd:46:28:f2:ef:d9:f3:aa:7a:7a:b3:19:f5: c2:98:e3:2f:bd:6b:de:29:07:17:0a:d3:33:df:b5:16:9c:df: d8:ca:c6:13:27:1a:01:95:c2:be:c7:a6:1a:b6:ff:56:79:30: 49:92:48:00:35:7f:2d:ba:25:c3:9f:5e:43:92:71:c6:43:7c: 99:be:87:0e:2a:1d:5a:5d:79:f8:3a:f7:aa:67:76:96:97:04: 44:56:fd:18:5f:40:b3:51:78:da:2f:4e:2b:e0:f0:f7:bf:d2: 6c:72:e6:1e:9a:94:77:66:24:b8:ce:06:8a:b8:4f:e5:2d:92: 37:42:5f:76:01:a8:28:4b:a9:51:91:71:2a:57:e8:20:e8:ed: 5b:c0:6d:4e:23:01:4e:b1:99:7c:b8:ab:03:9a:17:ad:fa:7b: 59:22:64:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHFYc/p8CwInBDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDExMloXDTI1MTExNzE4NDExMlowLzEtMCsGA1UEAxMk Y2NkM2Q2N2ItYzIxMi00ZjIzLTg4ZDQtOWMxZmUyYzA0ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcOK+0s8i7TbwTz4LVHLffCeee+UAv1v5U8w wBzd37/ud9Q7176Q+YKvxoetuZuFFaHjgnwDpfkcBtLXZuAbQMFuD8TzIEpn0PlW tj3w9fYo93BsDkF5uVuTqBIzO/otls2LGYvU1wJrIGme++rLkEXVM94WQ13vpxuy ltefwGhOo5Zk9dFJ3NhXSaUKbov85sd+vJBLsQnEweHJvuOVMf8mglt8r9Rbn8AD lmc/TI1DFeMVTX4l3sWfJlwJJaV4r7xZj2g7Nj1CfVq01wtJcLauvq0gImsIFKDo a/uj6AZqEXXQVlYrRnWZJ7qfRFoQYo1SjYliXNAq0GHGkm+krQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElPuAYRxWLnH4MPTQzRO0+OchJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNkMmQ0NTgtZWQ4OS0z YTdlLWJmNmQtNjYzNjA2MTJhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3PNOWfSqklczOa0VRWn/gB64ms9jT8u35/9vAftT5u0LQkXPOWE6cY N7FC8Flo8oTajPvy6rKKND0AIlL12LmfowFitm0fWM7Hit88RjEJyObcpLwvb1Rl UIwvAEc83UYo8u/Z86p6erMZ9cKY4y+9a94pBxcK0zPftRac39jKxhMnGgGVwr7H phq2/1Z5MEmSSAA1fy26JcOfXkOSccZDfJm+hw4qHVpdefg696pndpaXBERW/Rhf QLNReNovTivg8Pe/0mxy5h6alHdmJLjOBoq4T+UtkjdCX3YBqChLqVGRcSpX6CDo 7VvAbU4jAU6xmXy4qwOaF636e1kiZLc= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:12 2025 by rpki-client