$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa File: 5a078424-61f2-3260-b0fc-cb1113530fdf.roa (raw, json) Hash identifier: ZHktzoDeZjro3sYs+v35I5VT76XIAmX/V87zst8ieVY= Subject key identifier: 13:26:88:C5:7D:3F:9A:EC:C7:0D:E1:D0:2F:0F:D6:95:14:6E:B2:94 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD61B5E12A2E70BBB37A9E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa Signing time: Sat 09 Aug 2025 19:18:21 +0000 ROA not before: Sat 09 Aug 2025 19:18:21 +0000 ROA not after: Fri 07 Nov 2025 20:18:21 +0000 asID: 31898 IP address blocks: 129.213.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:b5:e1:2a:2e:70:bb:b3:7a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:18:21 2025 GMT Not After : Nov 7 20:18:21 2025 GMT Subject: CN=b6f83648-36d0-4e7c-b4ee-b18677a181c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:e3:02:4d:1d:12:c0:3f:95:d8:b5:47:f2: 5c:e4:d8:21:15:d2:6c:46:1b:61:33:47:2f:87:c6: c3:dc:e9:28:6a:0a:4d:9f:2d:9e:6f:a1:52:70:d6: 2d:36:eb:d5:0c:20:aa:b6:e3:09:f1:cb:ee:ff:56: b9:0d:0b:b0:85:f3:87:87:02:a5:62:0c:fe:79:29: 7e:c7:05:93:8e:6e:c7:a7:15:bb:18:53:d8:ab:a1: 11:61:39:5a:ab:36:c4:62:ef:31:3b:25:aa:60:38: 7f:a0:ca:17:a6:5c:67:d0:20:d0:b4:8f:76:c7:bc: a7:7f:30:1c:47:a3:39:65:cd:69:29:fd:46:45:ac: f7:8e:42:f9:76:6f:31:f4:a5:3f:d8:52:b5:88:c9: a5:fb:d1:3e:ea:d1:cd:99:77:92:a2:3a:fb:b8:98: c5:95:13:37:57:96:98:8b:cf:33:b9:81:34:84:92: 90:9d:c4:30:31:f6:59:e8:b0:81:04:6a:0a:9f:8f: 62:eb:29:f2:25:d8:ce:a8:8d:16:6e:52:7c:d0:1b: 9d:5e:32:41:20:5c:ce:69:d1:5c:60:7b:59:05:19: 0f:28:2a:ab:c4:5d:e3:ab:cd:42:d7:15:df:2b:47: ca:49:cd:8e:c5:53:49:77:0d:db:75:50:84:d1:48: bf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:26:88:C5:7D:3F:9A:EC:C7:0D:E1:D0:2F:0F:D6:95:14:6E:B2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5a078424-61f2-3260-b0fc-cb1113530fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:42:9b:c8:89:19:4b:a3:b8:00:42:15:18:86:8b:8a:e9:c5: c0:9d:f0:31:31:03:b1:8d:8f:07:f4:7a:3e:15:81:2e:93:39: 0b:39:b9:0e:20:db:7a:90:a1:6f:f5:84:49:4e:8a:31:95:0e: 31:b1:3a:56:ee:61:cd:6d:38:ed:7d:66:a0:a6:14:ea:c1:b8: 3c:84:6f:97:0a:2e:f5:0e:09:ed:ee:36:a3:a5:22:58:c7:0e: 6c:9e:04:98:60:ae:31:45:13:4a:64:e3:90:02:f3:2c:44:4b: 3a:90:a9:fb:4c:70:ca:e3:eb:b8:bf:1b:2e:1f:9a:08:45:5b: 48:28:0a:3c:c6:62:b4:91:7d:b3:20:98:70:3f:7e:b5:a7:06: 3b:60:74:76:71:51:e7:df:1b:d3:66:c8:f5:93:94:22:7b:1e: 2b:58:12:03:17:ab:45:64:36:e4:6f:90:bd:9d:2e:59:b0:20: db:42:d9:2a:c1:8b:5d:18:b0:29:d4:ba:5e:6b:c5:9d:9b:da: 95:45:7f:7a:aa:61:e4:26:c5:60:ae:dd:56:90:48:16:21:c0: 86:70:ff:5b:62:87:47:b5:f8:d0:98:35:b9:34:56:2b:4a:0d: c5:d3:2e:03:d5:ef:c9:cf:90:bf:71:5b:17:83:12:85:10:01: 35:26:5d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYbXhKi5wu7N6ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTgyMVoXDTI1MTEwNzIwMTgyMVowLzEtMCsGA1UEAxMk YjZmODM2NDgtMzZkMC00ZTdjLWI0ZWUtYjE4Njc3YTE4MWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37PjAk0dEsA/ldi1R/Jc5NghFdJsRhthM0cv h8bD3OkoagpNny2eb6FScNYtNuvVDCCqtuMJ8cvu/1a5DQuwhfOHhwKlYgz+eSl+ xwWTjm7HpxW7GFPYq6ERYTlaqzbEYu8xOyWqYDh/oMoXplxn0CDQtI92x7ynfzAc R6M5Zc1pKf1GRaz3jkL5dm8x9KU/2FK1iMml+9E+6tHNmXeSojr7uJjFlRM3V5aY i88zuYE0hJKQncQwMfZZ6LCBBGoKn49i6ynyJdjOqI0WblJ80BudXjJBIFzOadFc YHtZBRkPKCqrxF3jq81C1xXfK0fKSc2OxVNJdw3bdVCE0Ui/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMmiMV9P5rsxw3h0C8P1pUUbrKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWEwNzg0MjQtNjFmMi0z MjYwLWIwZmMtY2IxMTEzNTMwZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgdWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhCm8iJGUujuABCFRiGi4rpxcCd8DExA7GNjwf0ej4VgS6TOQs5uQ4g 23qQoW/1hElOijGVDjGxOlbuYc1tOO19ZqCmFOrBuDyEb5cKLvUOCe3uNqOlIljH DmyeBJhgrjFFE0pk45AC8yxESzqQqftMcMrj67i/Gy4fmghFW0goCjzGYrSRfbMg mHA/frWnBjtgdHZxUeffG9NmyPWTlCJ7HitYEgMXq0VkNuRvkL2dLlmwINtC2SrB i10YsCnUul5rxZ2b2pVFf3qqYeQmxWCu3VaQSBYhwIZw/1tih0e1+NCYNbk0VitK DcXTLgPV78nPkL9xWxeDEoUQATUmXXw= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:43 2025 by rpki-client