$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa File: 3ac99882-5f66-3e45-b087-556a6be061d9.roa (raw, json) Hash identifier: hb0kTfInVQUYCDs+vb6YXCngqDVfVRnC6HQF0LBG7Xo= Subject key identifier: 18:C0:07:67:77:C6:A5:9E:BB:3A:3A:91:58:DF:95:B9:22:2D:53:00 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA76666CD91F577216192C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa Signing time: Fri 08 Aug 2025 18:12:37 +0000 ROA not before: Fri 08 Aug 2025 18:12:37 +0000 ROA not after: Thu 06 Nov 2025 19:12:37 +0000 asID: 31898 IP address blocks: 129.146.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:66:6c:d9:1f:57:72:16:19:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:37 2025 GMT Not After : Nov 6 19:12:37 2025 GMT Subject: CN=2f9a1976-db9e-46cf-aa48-31a495ae6878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:14:05:b6:2a:cc:0d:8e:d1:dc:7f:89:83:ff: 57:44:49:82:28:a2:74:74:d5:b4:c1:db:5c:a8:ae: 1c:38:ae:42:86:ba:42:4e:ee:5a:8f:23:4c:aa:f4: 38:44:d3:75:ed:10:ea:cf:de:c6:1f:cd:a6:36:fd: d5:92:f4:79:29:e8:79:19:57:d7:38:c4:63:7d:99: 70:79:13:74:64:4c:8d:b4:a2:32:c4:43:72:24:80: a9:e2:3a:3b:d6:ed:84:d0:2e:eb:a5:3f:c4:69:48: 99:58:b5:f5:21:c6:7d:1d:9f:63:fb:15:7e:94:41: 30:c3:f9:97:92:4a:01:6e:f0:f1:0a:e9:bb:58:ec: e6:a8:67:97:69:53:c5:68:72:6a:52:9d:ef:88:fa: 40:39:d1:c4:06:72:91:e7:37:17:a3:bb:78:24:04: b0:55:9e:b1:f3:11:61:fd:1e:95:0e:35:71:d0:57: 5a:d3:28:23:0a:ff:6a:49:6d:ba:66:51:f7:2b:72: 46:62:9c:b7:47:b1:d5:c6:c2:7d:05:3a:00:88:10: 9e:73:a3:1f:e1:61:c6:bc:52:46:6e:63:b7:b5:53: 11:aa:68:5e:91:95:7e:f0:fc:b7:31:07:1c:d8:b9: 97:23:35:8e:72:89:a5:b2:a2:a1:7a:24:54:75:46: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C0:07:67:77:C6:A5:9E:BB:3A:3A:91:58:DF:95:B9:22:2D:53:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6f:c0:c5:07:d7:66:e4:62:93:8a:98:04:35:1f:a1:9f:28: c8:1f:b4:22:0f:45:d9:70:20:0f:62:de:db:48:60:de:24:71: c8:18:46:d5:47:e8:a0:1c:19:5d:ff:ed:cc:53:f2:13:2f:fc: 08:71:4f:7a:b1:c2:79:5c:eb:3d:30:f2:c6:5c:da:ac:82:bc: ef:13:5a:e0:8a:51:ee:43:c6:cf:ca:b4:8c:9f:93:d0:fb:de: a0:5a:e6:e6:bb:81:87:22:e4:4d:87:10:4e:bc:6f:94:c0:49: f5:01:5e:67:ab:5b:ef:12:ca:42:c4:60:8b:87:a1:12:f6:f2: df:f2:41:70:55:bb:79:7e:9a:d9:3a:36:e6:4a:c1:70:0e:a1: 45:d8:5f:b1:1a:be:19:ff:07:b5:f0:d4:9a:ce:13:3b:69:26: cf:78:1a:98:80:4e:79:7b:a3:f8:df:00:9f:2d:30:2b:24:cb: 0c:b8:d7:dd:cc:cf:41:a9:1c:77:a4:5d:35:15:e2:6c:1e:aa: 17:52:1b:4d:fc:eb:7b:a8:cf:43:d6:58:51:4b:5d:2a:d8:d6: 63:37:00:bc:12:14:ae:00:97:98:36:c4:c2:73:ba:f1:4c:7f: 2f:be:3e:a1:b3:e0:81:78:c1:55:30:15:11:40:51:ff:53:c8: 72:75:a0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdmZs2R9XchYZLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTIzN1oXDTI1MTEwNjE5MTIzN1owLzEtMCsGA1UEAxMk MmY5YTE5NzYtZGI5ZS00NmNmLWFhNDgtMzFhNDk1YWU2ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxQFtirMDY7R3H+Jg/9XREmCKKJ0dNW0wdtc qK4cOK5ChrpCTu5ajyNMqvQ4RNN17RDqz97GH82mNv3VkvR5Keh5GVfXOMRjfZlw eRN0ZEyNtKIyxENyJICp4jo71u2E0C7rpT/EaUiZWLX1IcZ9HZ9j+xV+lEEww/mX kkoBbvDxCum7WOzmqGeXaVPFaHJqUp3viPpAOdHEBnKR5zcXo7t4JASwVZ6x8xFh /R6VDjVx0Fda0ygjCv9qSW26ZlH3K3JGYpy3R7HVxsJ9BToAiBCec6Mf4WHGvFJG bmO3tVMRqmhekZV+8Py3MQcc2LmXIzWOcomlsqKheiRUdUYc2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjAB2d3xqWeuzo6kVjflbkiLVMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2FjOTk4ODItNWY2Ni0z ZTQ1LWIwODctNTU2YTZiZTA2MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClvwMUH12bkYpOKmAQ1H6GfKMgftCIPRdlwIA9i3ttIYN4kccgYRtVH 6KAcGV3/7cxT8hMv/AhxT3qxwnlc6z0w8sZc2qyCvO8TWuCKUe5Dxs/KtIyfk9D7 3qBa5ua7gYci5E2HEE68b5TASfUBXmerW+8SykLEYIuHoRL28t/yQXBVu3l+mtk6 NuZKwXAOoUXYX7Eavhn/B7Xw1JrOEztpJs94GpiATnl7o/jfAJ8tMCskywy4193M z0GpHHekXTUV4mweqhdSG03863uoz0PWWFFLXSrY1mM3ALwSFK4Al5g2xMJzuvFM fy++PqGz4IF4wVUwFRFAUf9TyHJ1oMg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:25 2025 by rpki-client