$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa File: 3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa (raw, json) Hash identifier: Xij/5FHPe41cgeGSgsRT9licxIJQ53j5o3GzvKV/ayM= Subject key identifier: EA:AC:F2:4C:AB:5D:C3:E5:03:5E:0C:D5:67:1F:0B:C3:E6:E9:B6:4D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD616BF23CF0ED80C9B04A40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa Signing time: Sat 09 Aug 2025 19:17:46 +0000 ROA not before: Sat 09 Aug 2025 19:17:46 +0000 ROA not after: Fri 07 Nov 2025 20:17:46 +0000 asID: 31898 IP address blocks: 129.213.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:6b:f2:3c:f0:ed:80:c9:b0:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:46 2025 GMT Not After : Nov 7 20:17:46 2025 GMT Subject: CN=9bc0a8d4-ccc2-4295-927b-3367ff2cd68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d3:63:60:ac:db:de:b0:c2:90:9f:f1:64:a2: b5:c8:ce:3a:bc:14:58:40:f7:67:92:2e:ee:26:4a: 51:69:cd:66:ca:7c:63:68:b1:27:80:03:51:a8:c1: d0:7a:e3:fe:09:9e:58:eb:7d:31:5d:df:cb:ab:b4: 0b:32:c6:78:22:9b:fc:f2:b6:77:58:78:47:0a:60: 7d:cd:a4:fd:09:33:da:74:53:83:26:35:53:8b:cd: d6:5a:4a:e2:6b:21:94:a7:b7:35:43:16:83:59:af: 3c:f8:bd:c5:59:f7:01:80:70:94:29:06:8e:f8:51: c6:42:23:a0:96:46:b0:76:09:51:c5:70:14:ed:06: 60:0b:f2:cc:0b:aa:55:31:29:e8:18:f9:fa:a4:cb: a7:68:b3:77:70:4a:13:d0:43:da:6b:bc:c9:fb:e4: 00:8c:6e:d5:fc:df:a5:7b:4d:38:ca:80:00:b5:01: b4:87:1b:17:65:2f:4a:65:e4:b8:70:7d:c2:5c:8b: 48:55:1c:fd:8b:6b:a1:70:2a:e0:b4:88:ee:b4:5d: d8:68:9b:3f:b5:df:88:e1:c5:a9:41:88:1c:6a:1a: ad:be:4e:b8:6e:a5:e8:9e:41:68:57:2b:60:3d:18: 1a:fa:ad:e8:a9:20:e0:ba:3c:d0:b1:43:6d:57:13: e4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AC:F2:4C:AB:5D:C3:E5:03:5E:0C:D5:67:1F:0B:C3:E6:E9:B6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:31:e8:9c:65:21:57:39:91:f1:44:4a:f7:98:cc:40:3d:70: 85:62:6b:c2:a7:8f:d8:a9:99:73:20:27:cd:1e:f1:e0:09:e9: 7f:0b:16:44:50:65:73:dc:b9:24:4e:1e:d2:2d:2b:1c:3f:57: 7c:c3:ec:ca:ae:c9:3e:7e:95:e7:1b:3a:5f:ff:5a:3d:8d:25: a5:5b:0e:b4:7b:59:22:e4:41:5a:fd:b7:72:2e:1b:7e:de:a9: 5e:1a:02:b4:f7:c4:ee:94:d2:b0:eb:e2:f4:c6:21:e8:08:1e: 29:75:d2:de:96:7e:be:b8:3c:fd:80:68:e8:81:c2:b9:f6:3f: 2d:8a:47:02:05:50:f7:a0:0c:e6:01:05:de:3b:c7:9f:b4:2d: 22:ab:82:d8:02:30:1b:34:f7:21:f4:f8:f7:0d:41:c4:9a:da: 4c:9f:4f:53:1b:4e:f8:b1:e9:2c:6c:1c:6c:26:e3:83:b0:37: ee:fb:e3:b8:e9:c9:7d:a3:77:f6:d7:fc:01:aa:65:a8:e4:e3: bc:b8:8a:11:97:65:ef:b0:62:f0:81:e5:ab:bc:da:d6:c9:e7: 4f:17:cb:30:2d:53:83:20:ff:cf:2c:6a:09:86:e6:f2:2d:53: 1a:44:fb:fe:09:93:af:5c:30:6b:b5:30:2a:d5:46:bd:a9:b5: 76:c5:b6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYWvyPPDtgMmwSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTc0NloXDTI1MTEwNzIwMTc0NlowLzEtMCsGA1UEAxMk OWJjMGE4ZDQtY2NjMi00Mjk1LTkyN2ItMzM2N2ZmMmNkNjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9NjYKzb3rDCkJ/xZKK1yM46vBRYQPdnki7u JkpRac1mynxjaLEngANRqMHQeuP+CZ5Y630xXd/Lq7QLMsZ4Ipv88rZ3WHhHCmB9 zaT9CTPadFODJjVTi83WWkriayGUp7c1QxaDWa88+L3FWfcBgHCUKQaO+FHGQiOg lkawdglRxXAU7QZgC/LMC6pVMSnoGPn6pMunaLN3cEoT0EPaa7zJ++QAjG7V/N+l e004yoAAtQG0hxsXZS9KZeS4cH3CXItIVRz9i2uhcCrgtIjutF3YaJs/td+I4cWp QYgcahqtvk64bqXonkFoVytgPRga+q3oqSDgujzQsUNtVxPkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqs8kyrXcPlA14M1WcfC8Pm6bZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U5MWNkZmQtMzc2NS0z ZjYyLWI1ZTktMDA5NWY1OWQ1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMx6JxlIVc5kfFESveYzEA9cIVia8Knj9ipmXMgJ80e8eAJ6X8LFkRQ ZXPcuSROHtItKxw/V3zD7MquyT5+lecbOl//Wj2NJaVbDrR7WSLkQVr9t3IuG37e qV4aArT3xO6U0rDr4vTGIegIHil10t6Wfr64PP2AaOiBwrn2Py2KRwIFUPegDOYB Bd47x5+0LSKrgtgCMBs09yH0+PcNQcSa2kyfT1MbTvix6SxsHGwm44OwN+7747jp yX2jd/bX/AGqZajk47y4ihGXZe+wYvCB5au82tbJ508XyzAtU4Mg/88sagmG5vIt UxpE+/4Jk69cMGu1MCrVRr2ptXbFts0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:29 2025 by rpki-client