$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa File: 9650cd9b-0494-3747-95bd-45298bbbc6ca.roa (raw, json) Hash identifier: Tt/0Qg7g4GVvfAU33pJLLpCU8PjeXtb1PXoPnc5ZDdk= Subject key identifier: D2:5C:C7:DC:FE:E0:FA:01:4C:58:7B:FA:BD:1C:57:09:A4:E5:02:C3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE436AF1AC701A65834A4680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa Signing time: Fri 15 Aug 2025 20:26:03 +0000 ROA not before: Fri 15 Aug 2025 20:26:03 +0000 ROA not after: Thu 13 Nov 2025 21:26:03 +0000 asID: 31898 IP address blocks: 129.149.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:43:6a:f1:ac:70:1a:65:83:4a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 20:26:03 2025 GMT Not After : Nov 13 21:26:03 2025 GMT Subject: CN=0fa7eaae-6c8f-4c1b-a355-90c221a3b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0a:fd:13:2f:13:03:ce:59:ac:0b:b4:74:ac: 27:bb:b1:26:34:6d:e5:e5:9c:b4:57:4c:a6:73:8c: 43:3f:c2:c8:04:74:f0:9b:0a:3d:45:d8:3d:ba:1b: 42:0d:a5:67:39:59:d7:7c:8c:e6:66:a8:96:07:8a: 5f:04:b7:76:c4:d3:28:a7:fc:ea:aa:cc:6c:da:82: 69:43:4c:51:e3:57:be:8c:0f:c9:c6:b4:3d:47:9e: d7:4a:06:e8:b7:4a:d3:0c:4f:4e:01:21:72:08:0e: 72:ed:a3:57:04:c1:b7:cb:90:de:ab:76:ec:21:f0: 58:eb:3c:e1:df:b0:5e:d2:5c:5d:0f:ed:5d:4d:a8: e2:1d:1f:6b:0a:13:b1:c0:9e:7b:52:95:77:1d:fc: 4c:3a:a0:52:17:a4:13:65:a1:40:e6:50:ff:84:c1: ff:a7:7a:5c:47:d1:b6:6e:7e:e2:3a:85:2f:0a:5e: 96:28:1c:58:70:b6:0b:42:d6:15:fd:2f:05:4d:01: 00:7f:6c:ce:ba:02:d2:68:df:e9:50:0a:27:1a:b2: 5b:e3:2a:55:75:59:3c:bd:43:47:05:23:c3:28:43: 4b:e5:7b:91:c7:81:12:23:a4:f7:e7:42:59:eb:59: 84:fd:85:78:15:28:ca:ee:d7:8f:d9:47:2f:09:8a: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:C7:DC:FE:E0:FA:01:4C:58:7B:FA:BD:1C:57:09:A4:E5:02:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9650cd9b-0494-3747-95bd-45298bbbc6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0a:c4:06:aa:54:62:c8:cc:53:f0:7b:85:1c:1b:07:8b:2d: 40:f4:e5:d9:bf:59:27:83:ed:28:a4:a3:2a:73:59:02:60:2b: 94:13:a5:64:13:34:44:55:a6:b4:5f:e6:7d:b9:e9:35:7f:3a: 50:9f:5e:2b:52:e7:5a:11:30:bc:f2:40:22:d1:d2:62:0f:9f: 1e:52:f3:3b:02:ba:91:d4:e4:78:b0:10:eb:fd:12:b0:09:24: ab:26:fa:98:80:db:cc:78:9a:e1:c8:4f:96:52:00:6a:b6:58: ec:24:54:23:52:10:be:6c:21:7e:99:2c:86:db:1c:e3:6d:15: 68:f6:31:f7:9f:d9:9d:af:27:2a:0d:13:62:e9:f8:c8:70:6d: 15:44:7d:7b:a6:8a:52:18:07:ee:a5:e9:00:3f:8d:bd:d9:99: 56:5b:79:20:c6:a1:71:f1:3e:fb:f4:c5:6e:35:71:6b:f2:29: dd:72:94:09:37:86:1d:84:48:7f:3c:0e:69:08:9b:ef:4a:96: 6c:68:f3:7d:90:1f:3e:16:66:e5:0a:c3:90:c9:bd:e5:e5:ec: b6:aa:c8:43:25:f2:7e:93:44:2b:01:ef:57:53:3a:38:fd:fd: e7:e5:4f:fe:96:ff:43:dd:4d:b9:00:7d:11:1f:b5:c8:0b:e0: 9f:be:ee:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreQ2rxrHAaZYNKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIwMjYwM1oXDTI1MTExMzIxMjYwM1owLzEtMCsGA1UEAxMk MGZhN2VhYWUtNmM4Zi00YzFiLWEzNTUtOTBjMjIxYTNiNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwr9Ey8TA85ZrAu0dKwnu7EmNG3l5Zy0V0ym c4xDP8LIBHTwmwo9Rdg9uhtCDaVnOVnXfIzmZqiWB4pfBLd2xNMop/zqqsxs2oJp Q0xR41e+jA/JxrQ9R57XSgbot0rTDE9OASFyCA5y7aNXBMG3y5Deq3bsIfBY6zzh 37Be0lxdD+1dTajiHR9rChOxwJ57UpV3HfxMOqBSF6QTZaFA5lD/hMH/p3pcR9G2 bn7iOoUvCl6WKBxYcLYLQtYV/S8FTQEAf2zOugLSaN/pUAonGrJb4ypVdVk8vUNH BSPDKENL5XuRx4ESI6T350JZ61mE/YV4FSjK7teP2UcvCYo7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJcx9z+4PoBTFh7+r0cVwmk5QLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTY1MGNkOWItMDQ5NC0z NzQ3LTk1YmQtNDUyOThiYmJjNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEKxAaqVGLIzFPwe4UcGweLLUD05dm/WSeD7SikoypzWQJgK5QTpWQT NERVprRf5n256TV/OlCfXitS51oRMLzyQCLR0mIPnx5S8zsCupHU5HiwEOv9ErAJ JKsm+piA28x4muHIT5ZSAGq2WOwkVCNSEL5sIX6ZLIbbHONtFWj2Mfef2Z2vJyoN E2Lp+MhwbRVEfXumilIYB+6l6QA/jb3ZmVZbeSDGoXHxPvv0xW41cWvyKd1ylAk3 hh2ESH88DmkIm+9Klmxo832QHz4WZuUKw5DJveXl7LaqyEMl8n6TRCsB71dTOjj9 /eflT/6W/0PdTbkAfREftcgL4J++7ow= -----END CERTIFICATE-----Generated at Wed Aug 20 03:38:00 2025 by rpki-client