$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa File: 666a5fa8-2935-3725-93ec-7da096b6c2c9.roa (raw, json) Hash identifier: QOWMlNOgskzpjv2EBjXp7M/tuNE2HK+QZ+k+s+DK4zQ= Subject key identifier: CC:9E:E4:04:CA:47:92:A6:17:AA:67:F1:F8:F8:E9:DB:37:EE:9E:3D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE941B204F73187F98A854180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa Signing time: Tue 19 Aug 2025 18:56:29 +0000 ROA not before: Tue 19 Aug 2025 18:56:29 +0000 ROA not after: Mon 17 Nov 2025 19:56:29 +0000 asID: 31898 IP address blocks: 129.151.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:41:b2:04:f7:31:87:f9:8a:85:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 18:56:29 2025 GMT Not After : Nov 17 19:56:29 2025 GMT Subject: CN=ffa8cd94-1462-4dbf-bcc8-d058b7be61de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:0d:4a:bf:95:3b:36:88:1b:91:c5:a7:c9: 8c:ab:56:3a:f0:20:1e:0f:b3:ef:ed:ad:84:71:73: 55:5c:30:7d:14:4e:d6:ca:c6:cf:2e:cb:51:5a:d2: 20:c4:2f:1b:24:9a:f7:0c:36:4c:8e:d6:c9:80:bb: 36:1c:e5:a5:09:e5:98:7c:44:b0:ac:a2:0e:eb:92: 46:f3:7c:97:2a:1d:ed:e5:b1:52:4e:c2:95:dd:e2: b2:54:9c:39:7b:96:fd:ba:2e:d0:94:31:6c:41:83: 62:aa:c3:e7:a6:c4:e2:5d:5e:71:63:45:cd:d6:fd: 56:67:78:34:da:c5:85:6c:3d:2c:41:bb:ab:ec:e2: 0a:7f:bf:ce:d6:b4:40:ff:17:2c:51:a5:e5:75:8e: 13:d2:80:16:74:aa:c2:5d:8a:43:fb:72:25:63:41: 4e:18:70:47:d4:65:a3:3d:5d:21:3a:59:d6:96:1f: c8:11:d1:3f:cf:a6:9c:de:23:50:c3:3c:db:33:7a: ca:96:7a:7d:e1:e8:6b:5b:f2:f1:19:ef:e9:bb:7a: d5:b7:c3:9e:db:de:37:b0:20:f8:85:cb:a9:75:3f: a9:58:6e:69:01:ca:92:53:23:0a:b8:ec:4b:a1:db: 31:12:c5:9c:eb:83:aa:22:aa:7e:11:d9:de:79:86: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:E4:04:CA:47:92:A6:17:AA:67:F1:F8:F8:E9:DB:37:EE:9E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/666a5fa8-2935-3725-93ec-7da096b6c2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:62:40:2a:d7:10:aa:dd:ad:24:4b:7d:0b:d0:24:ec:9c:45: 2c:1a:c7:c5:aa:28:fd:2b:c1:b0:4a:2b:97:78:5b:93:1b:0c: b9:8e:19:cf:b4:9c:9f:cd:42:85:ec:3c:9d:c4:d6:d7:5c:51: 35:07:31:a8:81:2f:61:d5:ae:bc:2f:4d:ce:e2:cf:3b:a8:2f: eb:0d:69:be:f3:04:17:44:2e:6a:e6:c8:88:e7:1f:f5:84:9c: 09:fe:42:91:46:7c:66:66:65:75:a2:ec:c0:64:52:f4:69:be: e0:3e:f2:3d:b1:5f:4c:57:00:8d:62:93:19:b1:16:31:0c:91: 67:a4:e3:aa:8c:24:55:8f:44:99:d2:a0:eb:93:b0:51:35:6b: cc:00:50:a8:ca:19:58:b0:ea:54:6e:4a:e4:d8:58:4c:b0:e5: 7f:91:82:93:4e:5b:12:5c:6a:36:dd:a4:66:a9:00:27:ee:02: 86:87:5d:9c:d4:10:31:4e:de:43:fb:b4:c3:54:74:2d:e1:08: 5c:25:47:8a:00:54:b4:c1:59:d6:f6:0c:42:51:7b:6d:de:88: 99:8a:bc:86:fe:77:a2:f9:92:52:05:e5:5e:8f:be:4d:96:41: 12:6a:86:46:ad:22:8f:cd:e9:6b:64:a6:22:3f:eb:6d:56:8a: e2:5f:13:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpQbIE9zGH+YqFQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE4NTYyOVoXDTI1MTExNzE5NTYyOVowLzEtMCsGA1UEAxMk ZmZhOGNkOTQtMTQ2Mi00ZGJmLWJjYzgtZDA1OGI3YmU2MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrMNSr+VOzaIG5HFp8mMq1Y68CAeD7Pv7a2E cXNVXDB9FE7WysbPLstRWtIgxC8bJJr3DDZMjtbJgLs2HOWlCeWYfESwrKIO65JG 83yXKh3t5bFSTsKV3eKyVJw5e5b9ui7QlDFsQYNiqsPnpsTiXV5xY0XN1v1WZ3g0 2sWFbD0sQbur7OIKf7/O1rRA/xcsUaXldY4T0oAWdKrCXYpD+3IlY0FOGHBH1GWj PV0hOlnWlh/IEdE/z6ac3iNQwzzbM3rKlnp94ehrW/LxGe/pu3rVt8Oe2943sCD4 hcupdT+pWG5pAcqSUyMKuOxLodsxEsWc64OqIqp+EdneeYb1wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMye5ATKR5KmF6pn8fj46ds37p49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjY2YTVmYTgtMjkzNS0z NzI1LTkzZWMtN2RhMDk2YjZjMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJiQCrXEKrdrSRLfQvQJOycRSwax8WqKP0rwbBKK5d4W5MbDLmOGc+0 nJ/NQoXsPJ3E1tdcUTUHMaiBL2HVrrwvTc7izzuoL+sNab7zBBdELmrmyIjnH/WE nAn+QpFGfGZmZXWi7MBkUvRpvuA+8j2xX0xXAI1ikxmxFjEMkWek46qMJFWPRJnS oOuTsFE1a8wAUKjKGViw6lRuSuTYWEyw5X+RgpNOWxJcajbdpGapACfuAoaHXZzU EDFO3kP7tMNUdC3hCFwlR4oAVLTBWdb2DEJRe23eiJmKvIb+d6L5klIF5V6Pvk2W QRJqhkatIo/N6WtkpiI/621WiuJfEz8= -----END CERTIFICATE-----Generated at Wed Aug 20 03:38:02 2025 by rpki-client