$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/976ba19c-aee4-39d4-91fd-e5d4bfb6d08d.roa File: 976ba19c-aee4-39d4-91fd-e5d4bfb6d08d.roa (raw, json) Hash identifier: Y8YPzv1Rl/oJnX0qVyfmUhgBFg+hiLf3X18IWKeUo0M= Subject key identifier: D2:CA:C4:3F:53:B9:89:C6:07:D2:B7:F5:B8:8B:99:54:1A:0E:A1:3C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE5955EF9A54F85A4B7B45A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/976ba19c-aee4-39d4-91fd-e5d4bfb6d08d.roa Signing time: Fri 15 Aug 2025 21:10:13 +0000 ROA not before: Fri 15 Aug 2025 21:10:13 +0000 ROA not after: Thu 13 Nov 2025 22:10:13 +0000 asID: 31898 IP address blocks: 129.159.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:55:ef:9a:54:f8:5a:4b:7b:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:13 2025 GMT Not After : Nov 13 22:10:13 2025 GMT Subject: CN=0c801dc1-8da8-4cc1-b707-06154ccc0e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7a:23:aa:26:fc:2d:69:02:3c:99:a7:2a:0a: 55:23:29:63:74:3a:4e:ce:c8:ad:c2:21:85:a6:ae: 5a:94:b7:2d:35:98:2a:d4:f2:d5:cd:6f:52:4d:7c: f4:f8:c1:a7:5e:c7:0e:d9:b6:5b:8b:b1:46:6a:85: 54:46:01:b4:79:27:9f:78:ed:4b:17:3b:9e:4c:aa: 8f:b4:6a:a6:cd:f9:2d:11:b0:8c:fb:59:e2:da:28: a5:0f:ed:37:3e:2b:53:3f:71:4e:c0:91:ed:fc:0b: 02:4e:85:3d:20:9e:e5:4d:66:5b:32:07:23:70:9c: 24:7a:0b:dc:f3:5e:58:4c:f6:13:4d:db:43:55:f9: 00:89:94:82:f0:8f:98:db:72:7c:f0:22:05:5b:53: f3:5a:8c:19:72:9a:a0:c6:59:4e:57:7d:2e:7b:12: c8:ea:c6:6c:de:7a:dd:dd:4b:5b:ea:59:00:bd:52: b1:e4:70:4a:1c:76:6c:9e:b9:b7:d5:62:5f:68:2d: a4:5e:be:6c:64:1a:bb:36:86:47:69:0e:90:07:d7: ee:be:2a:80:3d:13:8f:55:15:ad:cf:88:96:55:0e: 20:8c:85:7b:44:8e:47:a3:71:02:04:39:b6:ef:ab: fc:04:54:6c:a6:70:11:18:a8:fc:55:b9:54:81:fa: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:C4:3F:53:B9:89:C6:07:D2:B7:F5:B8:8B:99:54:1A:0E:A1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/976ba19c-aee4-39d4-91fd-e5d4bfb6d08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:03:1e:d1:82:69:be:7a:b0:1d:70:47:88:ed:0c:40:03:b6: 10:bd:f3:fc:33:54:49:64:bf:d7:0d:e6:88:c4:82:62:6d:95: 81:50:60:33:57:1d:0f:4f:e8:8f:96:1e:0f:75:bb:c3:26:6c: 8f:ee:f5:77:cd:52:84:a6:42:55:a4:00:9d:98:6f:08:ae:f3: 18:77:bd:e4:79:fa:d6:f6:70:b6:b0:52:5a:ae:3c:ff:e1:32: 6b:62:79:58:7a:5c:d3:98:28:23:59:a7:bd:d6:41:af:00:f1: f8:91:62:d6:29:06:52:70:75:a4:06:b9:97:e8:6a:4c:81:64: c9:bf:69:fe:f3:61:60:f2:45:26:da:a0:6e:41:d9:d6:0b:92: 5f:15:97:a9:d2:f1:e2:57:c7:49:47:c5:e2:cc:50:04:7b:3d: cc:96:51:bb:7d:13:ba:c3:49:37:d1:4c:aa:c9:2c:ab:f9:96: f8:4c:ae:14:4e:c9:41:d1:d0:94:1f:81:42:1e:51:c2:2e:9d: 89:99:11:b0:72:cf:d3:ef:1a:b5:37:63:e8:f3:f0:b4:18:fb: 3b:28:0b:7e:bf:f5:52:bf:c6:3e:86:2e:89:49:78:59:27:29: 4d:4b:34:ea:ea:68:df:97:ea:ed:81:7a:a0:04:66:ad:56:22: 32:88:b7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWVXvmlT4Wkt7RaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAxM1oXDTI1MTExMzIyMTAxM1owLzEtMCsGA1UEAxMk MGM4MDFkYzEtOGRhOC00Y2MxLWI3MDctMDYxNTRjY2MwZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXojqib8LWkCPJmnKgpVIyljdDpOzsitwiGF pq5alLctNZgq1PLVzW9STXz0+MGnXscO2bZbi7FGaoVURgG0eSefeO1LFzueTKqP tGqmzfktEbCM+1ni2iilD+03PitTP3FOwJHt/AsCToU9IJ7lTWZbMgcjcJwkegvc 815YTPYTTdtDVfkAiZSC8I+Y23J88CIFW1PzWowZcpqgxllOV30uexLI6sZs3nrd 3Utb6lkAvVKx5HBKHHZsnrm31WJfaC2kXr5sZBq7NoZHaQ6QB9fuviqAPROPVRWt z4iWVQ4gjIV7RI5Ho3ECBDm276v8BFRspnARGKj8VblUgfoTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLKxD9TuYnGB9K39biLmVQaDqE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc2YmExOWMtYWVlNC0z OWQ0LTkxZmQtZTVkNGJmYjZkMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZ8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgDHtGCab56sB1wR4jtDEADthC98/wzVElkv9cN5ojEgmJtlYFQYDNX HQ9P6I+WHg91u8MmbI/u9XfNUoSmQlWkAJ2Ybwiu8xh3veR5+tb2cLawUlquPP/h MmtieVh6XNOYKCNZp73WQa8A8fiRYtYpBlJwdaQGuZfoakyBZMm/af7zYWDyRSba oG5B2dYLkl8Vl6nS8eJXx0lHxeLMUAR7PcyWUbt9E7rDSTfRTKrJLKv5lvhMrhRO yUHR0JQfgUIeUcIunYmZEbByz9PvGrU3Y+jz8LQY+zsoC36/9VK/xj6GLolJeFkn KU1LNOrqaN+X6u2BeqAEZq1WIjKIt50= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:55 2025 by rpki-client