$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa File: 66dd902d-1643-3da7-8d26-aa9de0264773.roa (raw, json) Hash identifier: N+3PmMI4a+JMPiYRlqaFhhRvYfMMir/iI8wY8Dqests= Subject key identifier: 27:A8:BC:D7:BC:82:31:BE:42:7E:F7:33:60:30:96:56:95:43:29:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA7645FFA4DF0E2202A98700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa Signing time: Fri 08 Aug 2025 18:12:21 +0000 ROA not before: Fri 08 Aug 2025 18:12:21 +0000 ROA not after: Thu 06 Nov 2025 19:12:21 +0000 asID: 31898 IP address blocks: 129.153.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:45:ff:a4:df:0e:22:02:a9:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:21 2025 GMT Not After : Nov 6 19:12:21 2025 GMT Subject: CN=a51e762e-ab42-4c77-9a67-862f37662918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:62:27:a7:dc:ca:22:4c:8c:de:31:d7:ea: 5e:34:6c:1d:01:c6:79:86:76:36:a6:19:62:56:bd: 43:c8:97:19:19:4a:a1:2d:64:b4:a8:53:4a:52:f7: a4:70:32:b9:09:95:be:23:c9:ce:2e:1c:14:98:a7: 2f:1a:67:61:7b:b2:d6:28:34:bc:93:52:11:0a:10: c0:80:20:72:44:cf:9f:b5:da:e2:ca:f3:bd:b9:1c: 50:7e:67:2f:70:96:0b:03:2c:fa:b0:39:58:50:7a: 56:10:33:de:0b:03:4c:60:78:c1:89:d7:a9:74:9c: a7:8b:7e:38:21:e5:08:61:f1:6d:e1:76:07:7e:02: 3c:ea:1c:33:96:a2:41:82:aa:b8:37:6e:0a:b0:45: e0:63:d6:0b:ba:08:5a:32:6d:aa:5a:c7:d9:cb:f3: f2:3c:e3:0e:43:35:f8:08:8e:cf:33:96:49:09:87: 8d:a1:df:f9:7c:d5:36:2a:23:f3:e5:71:0b:04:12: ff:47:db:3b:fe:e7:3a:8f:0f:a7:9a:a2:df:99:1f: 47:1c:98:cb:02:fc:2e:35:53:a8:1a:6c:31:0a:8f: e8:cc:f9:ff:2b:74:d2:78:e3:22:c9:e2:27:0a:4e: b8:b5:1a:fa:df:1d:76:7f:78:74:c6:08:fd:fc:16: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:BC:D7:BC:82:31:BE:42:7E:F7:33:60:30:96:56:95:43:29:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d9:88:30:01:63:58:da:e4:1e:96:e5:a9:a6:c2:c8:a4:c6: fd:da:78:a9:94:03:3e:a5:42:49:9e:e4:1c:5b:dc:92:b1:60: 72:08:64:b5:51:ad:13:2f:c8:89:ed:d3:9b:b6:4d:06:22:ca: 9e:12:4c:00:cf:4c:2e:f1:43:2b:43:34:5c:88:11:46:9f:f3: fa:04:39:21:c4:33:96:40:f3:11:e9:3e:7b:cf:f1:57:73:b0: 0d:04:07:b5:9e:f4:fd:82:cc:83:f0:53:cc:7c:a6:16:f6:a8: b0:15:bd:53:5f:b5:71:3d:8a:c7:a4:76:eb:30:f9:d3:2f:3d: 23:5f:73:41:d5:41:26:1b:73:8f:cc:30:92:14:f3:2e:26:cf: 85:07:ea:50:2b:53:3f:18:e8:3e:f9:cd:fa:86:40:6d:4a:2c: 6e:41:f7:ba:f5:ee:1f:ca:10:76:21:7e:e6:0c:74:14:63:27: c8:c3:59:63:2b:ab:96:ab:50:03:a9:2a:74:db:d9:d7:f7:fc: af:84:07:d6:c4:5c:13:93:50:46:70:3f:05:cd:fa:24:44:34: 2e:f2:43:e4:21:40:e2:e8:fe:23:ef:b0:e8:2a:49:c7:a3:73: 6a:9b:cb:e7:8c:2f:a7:a7:bb:95:73:92:76:7e:4b:e9:98:52: 15:ba:f1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdkX/pN8OIgKphwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTIyMVoXDTI1MTEwNjE5MTIyMVowLzEtMCsGA1UEAxMk YTUxZTc2MmUtYWI0Mi00Yzc3LTlhNjctODYyZjM3NjYyOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF1iJ6fcyiJMjN4x1+peNGwdAcZ5hnY2phli Vr1DyJcZGUqhLWS0qFNKUvekcDK5CZW+I8nOLhwUmKcvGmdhe7LWKDS8k1IRChDA gCByRM+ftdriyvO9uRxQfmcvcJYLAyz6sDlYUHpWEDPeCwNMYHjBidepdJyni344 IeUIYfFt4XYHfgI86hwzlqJBgqq4N24KsEXgY9YLughaMm2qWsfZy/PyPOMOQzX4 CI7PM5ZJCYeNod/5fNU2KiPz5XELBBL/R9s7/uc6jw+nmqLfmR9HHJjLAvwuNVOo GmwxCo/ozPn/K3TSeOMiyeInCk64tRr63x12f3h0xgj9/BavyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeovNe8gjG+Qn73M2AwllaVQymEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjZkZDkwMmQtMTY0My0z ZGE3LThkMjYtYWE5ZGUwMjY0NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ZiDABY1ja5B6W5ammwsikxv3aeKmUAz6lQkme5Bxb3JKxYHIIZLVR rRMvyInt05u2TQYiyp4STADPTC7xQytDNFyIEUaf8/oEOSHEM5ZA8xHpPnvP8Vdz sA0EB7We9P2CzIPwU8x8phb2qLAVvVNftXE9isekdusw+dMvPSNfc0HVQSYbc4/M MJIU8y4mz4UH6lArUz8Y6D75zfqGQG1KLG5B97r17h/KEHYhfuYMdBRjJ8jDWWMr q5arUAOpKnTb2df3/K+EB9bEXBOTUEZwPwXN+iRENC7yQ+QhQOLo/iPvsOgqScej c2qby+eML6enu5VzknZ+S+mYUhW68e0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:25:18 2025 by rpki-client