$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa File: 81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa (raw, json) Hash identifier: 7AsIp7EmVeAwdQ/mmz1mI3GsuhIWvuLdZ0nwU2bnVa0= Subject key identifier: FA:A8:60:4B:A0:B4:6D:3E:B6:C5:4C:B2:FB:85:62:5E:10:69:31:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD61B19D5A3E79B11EDB3400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa Signing time: Sat 09 Aug 2025 19:18:19 +0000 ROA not before: Sat 09 Aug 2025 19:18:19 +0000 ROA not after: Fri 07 Nov 2025 20:18:19 +0000 asID: 31898 IP address blocks: 129.213.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:b1:9d:5a:3e:79:b1:1e:db:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:18:19 2025 GMT Not After : Nov 7 20:18:19 2025 GMT Subject: CN=3f1e48ab-a223-4e52-83a9-f73af8117b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:2b:e3:0b:1b:e4:b7:d8:ce:31:a9:08:80: fb:a0:72:9c:8f:61:08:d2:9e:aa:84:e5:31:2d:2a: 7e:da:5f:80:0d:09:e3:01:6e:27:4d:1f:9e:49:e2: 67:da:7e:f5:43:9e:31:75:1e:3e:f8:18:76:ee:aa: 63:0a:94:ec:e2:c3:2b:4e:82:27:d8:14:0b:3d:9b: 74:e9:1f:03:ac:a8:56:06:36:f1:9c:34:17:b1:7b: ee:26:21:9c:bc:20:3f:40:0e:87:73:75:b7:1f:cf: f2:fa:2b:55:4d:40:ba:6f:25:d1:b9:e7:ea:7a:c5: dd:3e:03:fb:3d:24:a9:fc:41:26:bb:2f:97:1d:cd: f4:4b:a4:98:c7:d1:1a:55:c4:7c:93:ef:21:6c:99: 2a:97:bc:4f:a6:60:1f:ba:a8:8a:96:bd:86:5c:44: 7d:b0:9d:0c:65:55:1c:90:1d:5d:7e:6a:b1:9d:f6: 0c:91:4b:f1:c5:3b:7e:c0:0e:0c:50:e2:4a:4f:0b: 21:33:d4:db:2b:cb:f7:e4:97:f1:45:e7:2f:94:ac: 19:bd:29:e6:42:38:b8:b0:28:72:8c:f9:63:70:7e: 4c:bb:69:97:4a:65:c3:f7:eb:59:20:1d:e6:37:83: cc:28:0a:24:eb:fc:41:3f:f1:9c:f8:7c:b4:e9:42: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:60:4B:A0:B4:6D:3E:B6:C5:4C:B2:FB:85:62:5E:10:69:31:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81955f4b-78c0-3a2d-9018-f89eea6b3e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fc:5f:3d:1d:e6:db:6c:b8:c9:81:44:71:53:b7:93:87:37: a9:73:af:21:9b:4c:60:a0:e3:c9:93:03:91:b1:6d:72:5f:b1: 57:2d:03:bf:c1:e3:f0:76:ac:27:60:90:52:81:6b:0b:96:7c: aa:7b:45:01:32:1f:05:1e:82:58:1e:4a:8d:24:db:93:3e:2b: 4a:fa:a6:05:18:94:c8:05:b6:b5:b9:8c:7a:c8:af:63:80:3c: ae:31:02:a7:ed:f3:6c:33:c8:7c:d8:48:a7:62:f6:32:4d:d8: b0:82:80:8b:72:20:d2:1b:d1:c0:1e:68:ef:b8:4f:a3:7d:be: f6:e6:bf:69:8f:ef:48:5e:2f:29:b2:61:b0:4a:94:a5:6e:d5: 10:eb:a0:48:e1:e5:dc:09:11:78:f7:28:dc:ad:45:73:8b:57: ad:09:25:55:30:e1:76:60:fc:06:4a:e1:d4:e0:ea:dc:23:52: 6d:2b:a3:41:d1:33:60:5c:fd:88:05:a4:d5:83:2b:fb:59:bb: fc:aa:85:73:b2:44:2c:43:93:5f:c1:38:17:52:58:86:bc:8f: 1c:d5:e9:8d:3b:19:be:dc:23:55:5f:02:81:69:fb:e4:f5:9d: d7:14:a4:67:ca:fa:d7:00:28:ae:d5:77:1c:d2:2e:ac:c2:c2: 2c:b9:de:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYbGdWj55sR7bNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTgxOVoXDTI1MTEwNzIwMTgxOVowLzEtMCsGA1UEAxMk M2YxZTQ4YWItYTIyMy00ZTUyLTgzYTktZjczYWY4MTE3Yjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8kr4wsb5LfYzjGpCID7oHKcj2EI0p6qhOUx LSp+2l+ADQnjAW4nTR+eSeJn2n71Q54xdR4++Bh27qpjCpTs4sMrToIn2BQLPZt0 6R8DrKhWBjbxnDQXsXvuJiGcvCA/QA6Hc3W3H8/y+itVTUC6byXRuefqesXdPgP7 PSSp/EEmuy+XHc30S6SYx9EaVcR8k+8hbJkql7xPpmAfuqiKlr2GXER9sJ0MZVUc kB1dfmqxnfYMkUvxxTt+wA4MUOJKTwshM9TbK8v35JfxRecvlKwZvSnmQji4sChy jPljcH5Mu2mXSmXD9+tZIB3mN4PMKAok6/xBP/Gc+Hy06UIa7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqoYEugtG0+tsVMsvuFYl4QaTGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODE5NTVmNGItNzhjMC0z YTJkLTkwMTgtZjg5ZWVhNmIzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgdXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL8Xz0d5ttsuMmBRHFTt5OHN6lzryGbTGCg48mTA5GxbXJfsVctA7/B 4/B2rCdgkFKBawuWfKp7RQEyHwUeglgeSo0k25M+K0r6pgUYlMgFtrW5jHrIr2OA PK4xAqft82wzyHzYSKdi9jJN2LCCgItyINIb0cAeaO+4T6N9vvbmv2mP70heLymy YbBKlKVu1RDroEjh5dwJEXj3KNytRXOLV60JJVUw4XZg/AZK4dTg6twjUm0ro0HR M2Bc/YgFpNWDK/tZu/yqhXOyRCxDk1/BOBdSWIa8jxzV6Y07Gb7cI1VfAoFp++T1 ndcUpGfK+tcAKK7VdxzSLqzCwiy53gg= -----END CERTIFICATE-----Generated at Wed Aug 20 03:29:09 2025 by rpki-client