$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3aa0c1ae-8593-312a-b0ea-2120fed674e3.roa File: 3aa0c1ae-8593-312a-b0ea-2120fed674e3.roa (raw, json) Hash identifier: nh24lPiwE3UqYCwvNAH5ktkk2GWSduPNQ0/+oZAQmfk= Subject key identifier: AE:71:69:BD:8C:0C:8E:A5:55:F8:3A:74:36:AB:1E:D9:CC:DE:F0:52 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD614AE51BDC11C896582500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3aa0c1ae-8593-312a-b0ea-2120fed674e3.roa Signing time: Sat 09 Aug 2025 19:17:30 +0000 ROA not before: Sat 09 Aug 2025 19:17:30 +0000 ROA not after: Fri 07 Nov 2025 20:17:30 +0000 asID: 31898 IP address blocks: 129.213.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:4a:e5:1b:dc:11:c8:96:58:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:30 2025 GMT Not After : Nov 7 20:17:30 2025 GMT Subject: CN=84e77e40-af75-47fb-b011-342ba043741f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:0c:f3:34:a2:a9:ba:2e:ba:67:05:dc:c9: ea:a7:a5:7a:e9:ed:eb:6e:84:f0:c1:09:81:d5:3d: 8e:f9:98:b8:80:fa:c1:94:8a:49:dc:07:99:58:e2: a7:1f:5d:b9:91:07:1a:05:13:c3:0b:85:93:4a:1f: f4:81:9a:04:ec:16:77:a6:78:96:09:7e:df:c8:c7: f4:ef:aa:ae:b3:52:4d:ec:a9:ac:eb:66:5e:42:12: f9:d6:4a:b2:26:24:a4:94:a5:1e:06:5c:3a:1a:52: 44:86:7e:d5:71:94:72:52:71:ae:8c:a0:27:71:1e: ce:0d:92:03:38:aa:6a:02:e6:a5:02:0b:c6:69:18: a5:12:5e:6b:86:43:76:4c:53:45:e5:c4:49:20:ce: 6d:0b:18:1c:27:b4:9e:ef:b1:37:48:fd:49:50:14: 06:b6:e2:94:82:13:47:f6:1a:e9:49:21:57:56:27: 47:d4:16:21:60:09:a7:72:90:42:a7:ba:fa:be:c8: ab:e7:97:25:59:6f:86:ba:95:af:69:0c:9e:87:76: e6:de:6f:19:1c:1c:ca:4b:bd:d5:f5:2b:9b:b5:72: 8f:7e:5e:5c:e5:5d:04:63:06:a7:6a:a1:60:5f:89: d9:19:97:1e:84:03:4b:82:d1:73:13:40:a3:a0:99: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:69:BD:8C:0C:8E:A5:55:F8:3A:74:36:AB:1E:D9:CC:DE:F0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3aa0c1ae-8593-312a-b0ea-2120fed674e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:22:eb:12:d9:43:61:7e:62:a0:02:6e:83:c9:3e:54:53:21: 81:73:ba:37:85:f6:c7:09:cd:ff:7e:c9:1a:dc:6f:25:5a:27: 6f:65:bc:bd:99:70:b2:50:63:07:cc:51:da:6c:1d:00:08:c9: 52:8f:89:ee:7e:00:a0:98:2e:65:fc:7d:09:09:04:b2:09:93: 70:dc:e5:db:8e:88:2a:67:76:8b:6b:92:4f:4a:72:23:a3:a2: c1:3b:8f:bc:6f:88:b4:b4:b4:4c:9d:93:ab:4e:a1:1a:d7:cf: 51:2a:a7:ba:32:bb:f0:a1:99:e1:08:e0:c4:53:75:d9:19:b2: 6d:66:7e:c9:34:21:fd:1c:6b:cd:1e:09:f9:8f:b9:1b:ce:b6: b1:f8:2d:b8:0a:33:21:e7:f5:eb:3e:d3:4d:95:12:55:02:bd: 44:0e:b9:0f:bc:0e:18:03:6b:c2:54:59:37:68:02:67:9a:14: bb:ab:d8:b1:1d:f3:a0:bf:6a:90:58:6e:71:3b:3a:32:9f:cc: 30:c8:8b:b7:3c:f0:28:bd:ce:0b:21:25:40:22:6d:fd:18:62: 67:b0:56:a4:d6:50:a6:4d:4a:e7:68:9a:5e:21:28:a0:d1:c4: d6:22:7e:9a:8c:50:28:22:1b:75:66:16:d3:9e:d9:a7:c8:c8: 96:cb:34:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYUrlG9wRyJZYJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTczMFoXDTI1MTEwNzIwMTczMFowLzEtMCsGA1UEAxMk ODRlNzdlNDAtYWY3NS00N2ZiLWIwMTEtMzQyYmEwNDM3NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9MM8zSiqbouumcF3Mnqp6V66e3rboTwwQmB 1T2O+Zi4gPrBlIpJ3AeZWOKnH125kQcaBRPDC4WTSh/0gZoE7BZ3pniWCX7fyMf0 76qus1JN7Kms62ZeQhL51kqyJiSklKUeBlw6GlJEhn7VcZRyUnGujKAncR7ODZID OKpqAualAgvGaRilEl5rhkN2TFNF5cRJIM5tCxgcJ7Se77E3SP1JUBQGtuKUghNH 9hrpSSFXVidH1BYhYAmncpBCp7r6vsir55clWW+GupWvaQyeh3bm3m8ZHBzKS73V 9SubtXKPfl5c5V0EYwanaqFgX4nZGZcehANLgtFzE0CjoJmsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5xab2MDI6lVfg6dDarHtnM3vBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2FhMGMxYWUtODU5My0z MTJhLWIwZWEtMjEyMGZlZDY3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4i6xLZQ2F+YqACboPJPlRTIYFzujeF9scJzf9+yRrcbyVaJ29lvL2Z cLJQYwfMUdpsHQAIyVKPie5+AKCYLmX8fQkJBLIJk3Dc5duOiCpndotrkk9KciOj osE7j7xviLS0tEydk6tOoRrXz1Eqp7oyu/ChmeEI4MRTddkZsm1mfsk0If0ca80e CfmPuRvOtrH4LbgKMyHn9es+002VElUCvUQOuQ+8DhgDa8JUWTdoAmeaFLur2LEd 86C/apBYbnE7OjKfzDDIi7c88Ci9zgshJUAibf0YYmewVqTWUKZNSudoml4hKKDR xNYifpqMUCgiG3VmFtOe2afIyJbLNO4= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:00 2025 by rpki-client