$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b08185b1-87a3-3645-9c69-145669f67921.roa File: b08185b1-87a3-3645-9c69-145669f67921.roa (raw, json) Hash identifier: 91dbNlW/ezNdG3/H92YXrQmcvrIGUA39GRFEJO+Yt0k= Subject key identifier: 2B:61:63:0A:B0:9A:7B:1E:57:07:2E:B3:B4:E5:E8:C8:75:8D:28:3B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACD61367DFF9F53709459B700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b08185b1-87a3-3645-9c69-145669f67921.roa Signing time: Sat 09 Aug 2025 19:17:21 +0000 ROA not before: Sat 09 Aug 2025 19:17:21 +0000 ROA not after: Fri 07 Nov 2025 20:17:21 +0000 asID: 31898 IP address blocks: 129.213.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:61:36:7d:ff:9f:53:70:94:59:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 9 19:17:21 2025 GMT Not After : Nov 7 20:17:21 2025 GMT Subject: CN=34ea0e90-157d-4d01-852e-b0dca7dedc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:55:ef:74:92:ab:d1:6a:5a:f2:7c:93:ba: cc:d7:91:cb:83:aa:50:94:d7:0c:97:5d:e4:92:7e: 81:75:df:e8:df:ea:a8:80:ee:cb:61:06:d8:44:09: 39:b3:55:3c:21:32:54:f4:41:17:91:78:a9:1c:73: 54:e6:0d:6c:e1:f8:5c:9e:8a:1c:a3:56:1d:20:19: 8a:6f:96:9b:c1:5b:82:e8:bc:e6:dd:e7:c1:88:a1: d2:68:ae:bf:44:6d:b3:3b:20:06:16:e6:f7:1c:e3: 3b:cf:e9:c0:6f:66:40:0e:67:7a:ff:f1:d7:b4:2d: 4d:b6:fe:76:72:0c:fa:6e:f9:f6:37:07:f7:0a:19: 07:1b:47:93:69:2a:58:b7:d2:53:fd:5e:25:2e:b4: d0:70:e4:ad:a5:0f:f6:b2:89:d1:5b:89:2d:7d:29: 65:58:04:c9:b6:ba:a3:2c:0d:2d:07:48:9c:16:6d: df:2c:13:ed:08:c9:60:62:d0:ec:aa:dc:4e:07:35: 29:6f:57:81:ef:1f:c3:b6:bf:00:24:4d:ba:02:1c: da:7e:8b:c5:e1:f8:94:6e:85:a8:79:53:eb:d4:c2: f0:f3:5b:7d:6d:76:cb:3d:72:37:bd:eb:ca:39:ce: c4:fb:2d:ba:fa:b1:a6:0a:36:71:71:9b:69:43:ca: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:63:0A:B0:9A:7B:1E:57:07:2E:B3:B4:E5:E8:C8:75:8D:28:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b08185b1-87a3-3645-9c69-145669f67921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:79:1e:fd:55:7c:07:5c:21:23:61:4f:ac:b7:4f:70:4e:59: 07:9c:48:5f:d9:b8:d3:53:46:8d:e2:a7:e2:8e:04:2a:6c:9f: 26:55:00:f5:1a:f8:1b:f7:cb:c6:58:d5:90:c4:0c:e4:68:1b: c4:44:54:c1:3d:f2:90:08:06:09:d6:89:40:06:d7:de:c9:26: 78:d8:41:51:64:ae:da:f6:37:9a:c4:44:05:22:0d:5c:ce:ab: 04:e5:34:6d:bb:b3:55:cf:f4:6c:75:83:74:ab:7b:63:d8:52: be:c9:17:79:fa:53:49:17:93:16:88:ed:54:d0:b6:0e:27:9c: e9:aa:35:0b:1d:5c:75:ae:f0:69:92:9a:f5:b7:25:ff:11:9b: 10:19:73:66:e8:e0:79:12:71:86:91:33:bd:c9:5c:af:a8:88: 13:0e:aa:c4:00:c7:53:d0:11:d6:05:05:24:db:3d:d7:d8:b1: 2e:e4:28:c6:91:ff:b0:6d:47:e0:07:c8:c4:72:c0:17:e8:2b: af:e2:d1:80:6c:b1:ca:e8:4f:57:36:41:b7:93:1f:c7:7c:6a: 23:1a:92:84:0b:5b:6f:03:11:81:73:c4:4e:bc:7d:b5:f7:51: b8:37:b5:bc:06:4f:aa:03:20:1d:5a:6c:39:cf:ac:da:f4:d1: 99:a0:4d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErNYTZ9/59TcJRZtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwOTE5MTcyMVoXDTI1MTEwNzIwMTcyMVowLzEtMCsGA1UEAxMk MzRlYTBlOTAtMTU3ZC00ZDAxLTg1MmUtYjBkY2E3ZGVkYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5lV73SSq9FqWvJ8k7rM15HLg6pQlNcMl13k kn6Bdd/o3+qogO7LYQbYRAk5s1U8ITJU9EEXkXipHHNU5g1s4fhcnooco1YdIBmK b5abwVuC6Lzm3efBiKHSaK6/RG2zOyAGFub3HOM7z+nAb2ZADmd6//HXtC1Ntv52 cgz6bvn2Nwf3ChkHG0eTaSpYt9JT/V4lLrTQcOStpQ/2sonRW4ktfSllWATJtrqj LA0tB0icFm3fLBPtCMlgYtDsqtxOBzUpb1eB7x/Dtr8AJE26AhzafovF4fiUboWo eVPr1MLw81t9bXbLPXI3vevKOc7E+y26+rGmCjZxcZtpQ8rL8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCthYwqwmnseVwcus7Tl6Mh1jSg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjA4MTg1YjEtODdhMy0z NjQ1LTljNjktMTQ1NjY5ZjY3OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI15Hv1VfAdcISNhT6y3T3BOWQecSF/ZuNNTRo3ip+KOBCpsnyZVAPUa +Bv3y8ZY1ZDEDORoG8REVME98pAIBgnWiUAG197JJnjYQVFkrtr2N5rERAUiDVzO qwTlNG27s1XP9Gx1g3Sre2PYUr7JF3n6U0kXkxaI7VTQtg4nnOmqNQsdXHWu8GmS mvW3Jf8RmxAZc2bo4HkScYaRM73JXK+oiBMOqsQAx1PQEdYFBSTbPdfYsS7kKMaR /7BtR+AHyMRywBfoK6/i0YBsscroT1c2QbeTH8d8aiMakoQLW28DEYFzxE68fbX3 Ubg3tbwGT6oDIB1abDnPrNr00ZmgTec= -----END CERTIFICATE-----Generated at Wed Aug 20 03:33:45 2025 by rpki-client