$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa File: ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa (raw, json) Hash identifier: 4hO6RdqRLcKeNkJAmve5SjHLEpB40CHAdHEyRLizrBs= Subject key identifier: 11:D5:DE:B5:A5:73:98:0C:28:34:43:C1:1C:63:86:C0:C2:FF:33:F6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE91C61D0138EC918A92E2140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa Signing time: Tue 19 Aug 2025 17:41:18 +0000 ROA not before: Tue 19 Aug 2025 17:41:18 +0000 ROA not after: Mon 17 Nov 2025 18:41:18 +0000 asID: 31898 IP address blocks: 129.91.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:1c:61:d0:13:8e:c9:18:a9:2e:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 17:41:18 2025 GMT Not After : Nov 17 18:41:18 2025 GMT Subject: CN=c2a8a988-6061-4dfe-8b9b-a9d2450695df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:61:e6:ff:4c:03:8b:3a:ed:4c:07:01:97: 1a:8e:a4:cd:d0:de:7a:dc:d5:8e:44:cb:41:54:7d: 00:a5:ab:a1:f9:3f:e2:c0:e4:4f:e4:83:cf:c8:f9: 11:9e:1b:03:a7:2a:a9:58:0b:2a:d7:f5:52:0b:e2: 03:79:6c:d5:03:f4:7c:da:b9:53:ce:52:05:21:d3: 1b:05:5c:c0:95:b2:73:ca:80:07:26:cd:4b:cc:ba: d2:88:18:2a:00:8f:52:d1:2b:76:05:b3:b4:93:e6: 51:dd:88:00:4f:46:73:3e:08:71:cc:a4:6c:06:ab: ba:c1:61:ff:e7:3d:bc:88:62:58:a4:53:bd:d5:6a: ac:18:fe:96:8c:a2:e2:b1:af:22:fe:c3:5c:e9:92: a5:fd:9a:3d:bb:c1:cc:90:ee:5c:98:8a:3f:0c:85: 58:0c:43:eb:ae:6e:9b:60:02:5d:93:60:44:6a:7c: ad:3e:85:bc:08:2e:0d:05:83:b3:cc:31:5f:c0:54: dc:9e:11:36:4a:98:5a:01:ea:4e:b0:e4:50:d9:7d: 1c:bd:8b:c0:4a:30:d0:3e:58:52:62:c8:59:6e:00: 44:3e:1a:55:ac:7f:0a:08:52:8a:d9:1e:3d:f4:50: 77:27:65:65:ac:2d:ab:89:7c:bc:9d:69:49:00:1d: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:DE:B5:A5:73:98:0C:28:34:43:C1:1C:63:86:C0:C2:FF:33:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.91.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:37:bf:23:21:2d:05:8e:aa:ef:b5:54:63:3b:21:e3:ed:9e: dd:07:14:90:8a:48:9e:94:75:9f:d3:6f:91:fa:7c:f0:92:80: 8e:27:a2:98:aa:fa:b7:15:8d:d9:da:3f:d2:6a:60:40:6b:ed: 5b:a9:77:8f:ca:5c:12:04:48:6f:e9:71:e6:32:c3:47:ae:bd: d9:1b:82:4c:87:c9:43:c5:d3:c7:02:c7:4a:49:11:5e:f3:52: 86:c4:0d:70:f5:88:55:b5:35:31:91:41:b7:ad:a9:57:09:9b: b9:e7:90:7e:ad:93:39:54:0f:66:62:94:89:23:5d:23:0b:6f: 47:54:3c:cc:7d:48:ec:5c:df:4c:c4:fb:65:1f:6b:c6:58:51: 80:a7:0a:a0:0c:8a:d1:e1:e0:6f:6c:3a:61:4f:b5:0f:00:db: 4c:aa:21:11:6e:79:2d:6e:23:a5:e4:85:ba:ba:03:2f:6f:4b: f6:d0:2d:ad:73:bf:ac:9b:cf:f5:50:8f:2b:6c:9b:13:45:3c: a0:5e:ed:b8:d6:f5:d8:c0:ba:b1:92:30:23:90:1f:6a:9d:46: 4d:68:0f:23:a8:91:ac:3c:64:de:61:9e:7f:25:34:cb:25:c0: b9:e2:90:da:77:1e:90:a9:e2:15:bb:dd:ab:c1:00:dd:c9:7e: a6:f2:45:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpHGHQE47JGKkuIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTE3NDExOFoXDTI1MTExNzE4NDExOFowLzEtMCsGA1UEAxMk YzJhOGE5ODgtNjA2MS00ZGZlLThiOWItYTlkMjQ1MDY5NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ph5v9MA4s67UwHAZcajqTN0N563NWORMtB VH0Apauh+T/iwORP5IPPyPkRnhsDpyqpWAsq1/VSC+IDeWzVA/R82rlTzlIFIdMb BVzAlbJzyoAHJs1LzLrSiBgqAI9S0St2BbO0k+ZR3YgAT0ZzPghxzKRsBqu6wWH/ 5z28iGJYpFO91WqsGP6WjKLisa8i/sNc6ZKl/Zo9u8HMkO5cmIo/DIVYDEPrrm6b YAJdk2BEanytPoW8CC4NBYOzzDFfwFTcnhE2SphaAepOsORQ2X0cvYvASjDQPlhS YshZbgBEPhpVrH8KCFKK2R499FB3J2VlrC2riXy8nWlJAB26OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHV3rWlc5gMKDRDwRxjhsDC/zP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWUyNTJjNzktZGIwMi0z NWE2LWE3ZWQtZjBmNzRhMjVkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgVsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU3vyMhLQWOqu+1VGM7IePtnt0HFJCKSJ6UdZ/Tb5H6fPCSgI4nopiq +rcVjdnaP9JqYEBr7Vupd4/KXBIESG/pceYyw0euvdkbgkyHyUPF08cCx0pJEV7z UobEDXD1iFW1NTGRQbetqVcJm7nnkH6tkzlUD2ZilIkjXSMLb0dUPMx9SOxc30zE +2Ufa8ZYUYCnCqAMitHh4G9sOmFPtQ8A20yqIRFueS1uI6Xkhbq6Ay9vS/bQLa1z v6ybz/VQjytsmxNFPKBe7bjW9djAurGSMCOQH2qdRk1oDyOokaw8ZN5hnn8lNMsl wLnikNp3HpCp4hW73avBAN3JfqbyRU0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:20:59 2025 by rpki-client