$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa File: 37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa (raw, json) Hash identifier: waP3dbp1G5Bgu3dETBmMn+I2EwFY+w8MB7SUoMlvDXQ= Subject key identifier: 0B:EB:1B:DE:C9:43:68:1D:25:36:45:CE:86:21:58:EB:09:AA:AB:2F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9769E72F9298FE5AC98F480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa Signing time: Tue 19 Aug 2025 20:43:07 +0000 ROA not before: Tue 19 Aug 2025 20:43:07 +0000 ROA not after: Mon 17 Nov 2025 21:43:07 +0000 asID: 31898 IP address blocks: 129.149.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:76:9e:72:f9:29:8f:e5:ac:98:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 20:43:07 2025 GMT Not After : Nov 17 21:43:07 2025 GMT Subject: CN=2823334d-7962-479a-b05e-1ed5ef3ac56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:24:2a:35:20:55:51:91:1a:ff:c0:01:67: 5f:42:cb:25:c8:de:13:ef:9e:ff:4c:46:57:5f:e4: e6:8b:69:0e:d0:05:33:00:c7:af:89:32:67:41:3e: 78:e6:62:ae:0d:ce:38:9c:6a:72:06:e7:cd:6c:8c: eb:c5:53:31:8c:d0:5f:09:3b:c0:34:ef:87:ee:a6: 8b:c0:d0:a3:e7:87:c8:86:7c:6c:0f:e7:c6:2b:78: 96:7f:f6:db:a9:17:5d:5a:99:1f:f6:21:f4:a5:02: 5c:02:b9:84:e4:b9:0d:7d:8d:54:d7:b7:70:0f:2e: 42:21:02:82:68:14:ce:b7:e1:d2:bc:7f:a9:f8:cc: d7:29:96:26:8e:65:9e:71:5d:9b:41:30:26:4d:15: ad:fc:14:fc:6a:df:45:99:fc:c4:7d:3d:26:d7:07: 69:1a:61:33:9a:ab:dd:6e:6f:bb:46:d6:4e:ad:41: d5:9e:15:aa:09:35:ab:3f:ac:07:b1:7c:fd:14:52: e3:c8:d1:4a:8a:4c:7c:5d:9e:3f:4d:64:59:60:a5: a3:ee:fd:b9:b7:98:19:42:7b:99:4b:e9:8e:7c:7c: e0:25:be:7f:0f:04:3a:2a:a3:a1:61:bf:62:be:54: 9e:19:f7:70:de:27:20:12:e7:25:db:55:a5:01:29: 5f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:1B:DE:C9:43:68:1D:25:36:45:CE:86:21:58:EB:09:AA:AB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/37eb1be9-577e-3e55-b6e1-3f44b804a8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6b:51:64:87:3f:50:e0:9b:bc:37:19:b5:ce:72:b7:35:d3: ad:fd:80:62:4e:43:ef:ba:5c:82:50:9c:0f:b4:22:80:ae:5e: d0:97:fb:9b:45:33:74:e0:f4:b0:b9:8b:6a:66:fa:69:82:f1: 33:dc:81:cf:dc:ae:ed:a4:e4:e9:b3:a4:af:83:5d:ff:91:00: b2:8d:dd:5a:7f:06:df:d3:71:5d:93:5b:31:60:6f:5f:2d:2e: de:6c:a4:28:44:18:d0:32:0a:35:c9:3d:63:f5:19:8b:51:4b: e1:b5:71:a9:99:ac:62:46:db:9f:dc:1e:5a:4c:6b:6a:19:ed: 87:04:29:29:69:a8:0b:94:f4:56:34:e6:09:ed:1b:bc:88:59: cc:75:72:00:0b:29:47:1d:f5:61:76:40:75:d1:6c:92:04:01: 5c:c9:7d:d3:b6:bf:a3:77:0f:c9:e9:31:27:5b:d3:25:03:98: 04:26:63:9f:06:df:4a:79:5a:ac:d8:58:08:68:95:54:3e:ad: 77:49:2f:20:4d:ea:77:93:91:59:40:a8:aa:13:ba:4e:f6:af: f8:ff:25:6e:f2:48:90:13:c7:71:a8:41:d9:a8:fb:bb:0a:7d: 4e:18:35:a5:bc:5c:82:31:1d:0e:58:56:0d:c5:31:66:d1:f2: 26:a7:30:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpdp5y+SmP5ayY9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIwNDMwN1oXDTI1MTExNzIxNDMwN1owLzEtMCsGA1UEAxMk MjgyMzMzNGQtNzk2Mi00NzlhLWIwNWUtMWVkNWVmM2FjNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIkKjUgVVGRGv/AAWdfQsslyN4T757/TEZX X+Tmi2kO0AUzAMeviTJnQT545mKuDc44nGpyBufNbIzrxVMxjNBfCTvANO+H7qaL wNCj54fIhnxsD+fGK3iWf/bbqRddWpkf9iH0pQJcArmE5LkNfY1U17dwDy5CIQKC aBTOt+HSvH+p+MzXKZYmjmWecV2bQTAmTRWt/BT8at9FmfzEfT0m1wdpGmEzmqvd bm+7RtZOrUHVnhWqCTWrP6wHsXz9FFLjyNFKikx8XZ4/TWRZYKWj7v25t5gZQnuZ S+mOfHzgJb5/DwQ6KqOhYb9ivlSeGfdw3icgEucl21WlASlfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvrG97JQ2gdJTZFzoYhWOsJqqsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzdlYjFiZTktNTc3ZS0z ZTU1LWI2ZTEtM2Y0NGI4MDRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdrUWSHP1Dgm7w3GbXOcrc10639gGJOQ++6XIJQnA+0IoCuXtCX+5tF M3Tg9LC5i2pm+mmC8TPcgc/cru2k5OmzpK+DXf+RALKN3Vp/Bt/TcV2TWzFgb18t Lt5spChEGNAyCjXJPWP1GYtRS+G1camZrGJG25/cHlpMa2oZ7YcEKSlpqAuU9FY0 5gntG7yIWcx1cgALKUcd9WF2QHXRbJIEAVzJfdO2v6N3D8npMSdb0yUDmAQmY58G 30p5WqzYWAholVQ+rXdJLyBN6neTkVlAqKoTuk72r/j/JW7ySJATx3GoQdmo+7sK fU4YNaW8XIIxHQ5YVg3FMWbR8ianMHY= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:48 2025 by rpki-client