$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5428678a-ace4-34fe-9a35-7163b5c087ab.roa File: 5428678a-ace4-34fe-9a35-7163b5c087ab.roa (raw, json) Hash identifier: 2y4EzsaowDVgSEMWfNOGUek5nQ0a6pWVYe2qYPhsYks= Subject key identifier: 6C:C6:C9:39:F7:97:90:E1:BD:A0:BA:19:74:36:3E:D0:D2:46:90:99 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE436DE0833CD0BB08EA5280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5428678a-ace4-34fe-9a35-7163b5c087ab.roa Signing time: Fri 15 Aug 2025 20:26:05 +0000 ROA not before: Fri 15 Aug 2025 20:26:05 +0000 ROA not after: Thu 13 Nov 2025 21:26:05 +0000 asID: 31898 IP address blocks: 129.152.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:43:6d:e0:83:3c:d0:bb:08:ea:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 20:26:05 2025 GMT Not After : Nov 13 21:26:05 2025 GMT Subject: CN=778a4d55-7384-4401-802c-ffd000beb5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:c7:86:b1:0c:be:39:d9:21:2e:b0:2a:87: 85:f6:ec:7a:83:70:a8:22:2f:e2:d9:22:94:d5:a0: 55:38:9a:12:db:eb:32:25:69:ae:fa:fa:5d:d6:1f: 04:bf:dd:2e:a7:25:04:ea:12:52:a4:ac:be:d1:7d: 2f:1a:ea:8b:8e:1a:12:9d:41:e3:3c:2c:61:d7:34: b7:8b:7f:24:c6:e0:76:ce:10:44:8b:96:63:7b:d5: 54:63:a5:79:b6:c1:0a:40:23:66:ab:1c:ba:00:e5: 53:6b:a9:42:33:ee:e5:26:02:0f:31:e7:b5:ee:9c: 20:31:3d:fe:04:ec:29:01:96:8d:65:76:b3:4d:fc: 5e:91:85:38:43:5d:9a:c6:ae:42:7b:82:4c:50:87: d2:36:7e:06:af:d0:f6:8c:18:c4:f8:77:33:73:74: f0:22:dd:02:1d:e3:0b:9a:bb:53:b5:4e:25:b8:b5: 08:b9:34:1e:6e:94:6c:ed:7f:80:35:2d:cb:27:69: 7e:04:02:82:51:fb:04:8c:bf:7f:8f:b9:ca:25:0e: c6:55:fb:cf:7a:95:10:e9:80:a4:8d:c1:bc:78:40: 5d:58:97:ab:b2:d6:66:a2:7a:e0:61:91:27:d5:5a: e4:33:c6:ce:9d:c1:23:9c:ef:b3:dd:0e:ec:cf:92: a2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:C9:39:F7:97:90:E1:BD:A0:BA:19:74:36:3E:D0:D2:46:90:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5428678a-ace4-34fe-9a35-7163b5c087ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2a:05:d1:70:25:d4:15:5a:08:c4:66:af:c5:40:c8:08:17: af:7c:fe:14:fd:ed:90:69:3d:38:61:01:9b:16:46:5d:73:68: ce:fa:7a:43:25:f9:0c:63:81:c7:fd:54:6e:c2:3e:72:fe:6c: 30:61:1b:0e:fa:9b:ae:4d:3a:3b:33:9c:f3:a4:a8:c7:48:c2: 88:4f:95:19:2b:a9:fc:55:99:41:80:9e:ed:28:8b:99:be:dc: 10:95:03:95:e2:4f:9f:a8:9b:f0:2b:24:f7:87:dd:ce:3a:e7: b1:1c:c8:07:6c:a2:89:e3:10:de:e7:24:0e:d6:1c:c6:bd:29: 4d:96:d8:dc:cb:1f:d3:7a:81:6d:5b:20:1a:17:22:72:05:c6: f8:fa:e2:33:f8:fe:c5:bc:f2:5e:21:12:ac:0c:24:21:f2:b2: 7f:36:7a:c9:94:17:46:8c:6f:f2:5f:d4:b5:56:f0:e8:02:6b: 6e:8e:68:ea:db:5c:49:f1:ae:ac:b1:33:e6:6c:16:f6:9a:bb: af:85:e6:17:3b:7e:73:fb:c8:36:b9:99:97:a2:9b:78:b9:73: c2:a2:d2:7d:68:d3:b3:5b:0a:fb:f6:d2:cf:62:a5:f7:68:91: 1d:04:6e:31:57:6e:d5:e1:22:de:ee:7a:92:5d:b8:be:66:73: 0e:1a:f8:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreQ23ggzzQuwjqUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIwMjYwNVoXDTI1MTExMzIxMjYwNVowLzEtMCsGA1UEAxMk Nzc4YTRkNTUtNzM4NC00NDAxLTgwMmMtZmZkMDAwYmViNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip3HhrEMvjnZIS6wKoeF9ux6g3CoIi/i2SKU 1aBVOJoS2+syJWmu+vpd1h8Ev90upyUE6hJSpKy+0X0vGuqLjhoSnUHjPCxh1zS3 i38kxuB2zhBEi5Zje9VUY6V5tsEKQCNmqxy6AOVTa6lCM+7lJgIPMee17pwgMT3+ BOwpAZaNZXazTfxekYU4Q12axq5Ce4JMUIfSNn4Gr9D2jBjE+Hczc3TwIt0CHeML mrtTtU4luLUIuTQebpRs7X+ANS3LJ2l+BAKCUfsEjL9/j7nKJQ7GVfvPepUQ6YCk jcG8eEBdWJerstZmonrgYZEn1VrkM8bOncEjnO+z3Q7sz5KijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzGyTn3l5DhvaC6GXQ2PtDSRpCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTQyODY3OGEtYWNlNC0z NGZlLTlhMzUtNzE2M2I1YzA4N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIqBdFwJdQVWgjEZq/FQMgIF698/hT97ZBpPThhAZsWRl1zaM76ekMl +Qxjgcf9VG7CPnL+bDBhGw76m65NOjsznPOkqMdIwohPlRkrqfxVmUGAnu0oi5m+ 3BCVA5XiT5+om/ArJPeH3c4657EcyAdsoonjEN7nJA7WHMa9KU2W2NzLH9N6gW1b IBoXInIFxvj64jP4/sW88l4hEqwMJCHysn82esmUF0aMb/Jf1LVW8OgCa26OaOrb XEnxrqyxM+ZsFvaau6+F5hc7fnP7yDa5mZeim3i5c8Ki0n1o07NbCvv20s9ipfdo kR0EbjFXbtXhIt7uepJduL5mcw4a+NM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:33 2025 by rpki-client