$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa File: c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa (raw, json) Hash identifier: KrLuFE2eMCnoW83CkJaNHW2lKZ0NSRNtm8ay4Gq1+IM= Subject key identifier: 40:DE:5C:65:15:FB:12:93:18:57:E0:50:6B:93:49:DD:77:89:76:20 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9A22D7EF02133E703ABFE60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa Signing time: Tue 19 Aug 2025 22:10:53 +0000 ROA not before: Tue 19 Aug 2025 22:10:53 +0000 ROA not after: Mon 17 Nov 2025 23:10:53 +0000 asID: 31898 IP address blocks: 129.151.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:a2:2d:7e:f0:21:33:e7:03:ab:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 22:10:53 2025 GMT Not After : Nov 17 23:10:53 2025 GMT Subject: CN=070aac79-397f-4b74-b7bf-336d9f74c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:dc:26:8f:0e:3d:1e:7d:3b:7c:a9:75:4f: c5:3a:da:73:4c:fc:d4:39:37:81:9d:29:ce:4b:fb: 32:cc:11:ec:e7:3f:2c:bc:71:1a:29:85:16:e3:f2: 5b:21:ef:d6:ea:75:40:ac:f6:42:33:70:5e:25:63: 19:49:f7:93:36:de:08:d4:04:32:dc:2e:81:df:ba: c2:0e:90:42:f9:c6:ef:99:3c:14:bb:13:a3:c7:ab: d4:4a:d7:04:35:b1:78:c0:0b:2c:c1:4c:85:19:d8: 88:bd:9f:6f:d9:61:49:18:82:1d:7a:07:1b:ae:dc: 2a:fe:fd:13:f4:f9:10:fa:6f:b5:f8:80:31:80:d0: 48:45:01:b9:aa:04:14:09:ca:68:4a:67:cb:8a:5b: e1:1f:9e:94:af:e3:6f:67:84:9e:33:43:2f:da:e3: 70:36:4d:83:07:4e:8e:d5:13:14:87:26:bd:5c:17: fa:4d:fc:5f:e0:0b:9c:d5:3f:e3:86:8a:f7:62:c8: 65:69:7a:b8:89:38:fb:e4:9f:eb:5a:53:ec:a1:08: 8e:26:94:a6:da:a2:88:7d:09:10:6b:02:d0:b3:6b: 4b:07:46:f0:c2:67:a3:9d:cf:6e:33:7d:64:23:36: 3e:4d:67:21:dc:87:31:73:e4:d7:13:69:d7:3a:b1: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DE:5C:65:15:FB:12:93:18:57:E0:50:6B:93:49:DD:77:89:76:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c6cc5fc8-2797-3f3e-a828-20d4d3a9fb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.151.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:40:f6:2c:3a:4c:82:39:a4:0a:cb:e2:75:8f:fb:de:ab:3e: d7:44:c1:48:82:77:bb:a0:18:e0:ef:30:b8:3e:91:c4:a4:57: ab:fe:f3:45:7c:d1:55:3d:c0:c4:84:85:c3:af:e9:41:32:1c: 1b:53:09:56:50:0a:f5:28:59:ac:33:a4:32:57:57:17:c8:fc: f9:7e:8b:7f:5f:9a:ab:9d:b3:09:2d:87:6c:db:a7:2b:3c:1b: e8:8c:e8:1b:25:d0:97:74:8f:ed:93:9a:d3:b3:84:a1:3a:56: 52:13:45:89:cc:00:54:74:5d:05:44:cd:57:06:98:b0:20:b7: a4:c7:42:68:45:cb:38:f8:80:db:fd:ed:c2:30:ab:8a:07:3b: ff:c7:cc:0c:49:6f:61:bf:78:cb:d8:29:bf:c0:a4:5f:14:d1: d8:d9:dc:85:85:e1:64:dc:06:fc:70:e6:23:89:a9:2b:3e:dd: 64:3e:5a:7f:b3:07:27:20:e3:a4:9d:3e:ff:ae:72:e1:e0:31: 10:0f:bc:87:32:a8:71:9b:fd:8f:c6:55:a1:8e:c4:78:b4:a0: b1:08:e0:94:71:d3:cd:74:b8:cb:46:02:d2:58:f5:59:d9:31: fb:d6:7a:3b:0c:ac:84:1a:dd:13:6f:e2:b6:a8:55:be:97:87: 99:fe:fe:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpoi1+8CEz5wOr/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIyMTA1M1oXDTI1MTExNzIzMTA1M1owLzEtMCsGA1UEAxMk MDcwYWFjNzktMzk3Zi00Yjc0LWI3YmYtMzM2ZDlmNzRjMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiTcJo8OPR59O3ypdU/FOtpzTPzUOTeBnSnO S/syzBHs5z8svHEaKYUW4/JbIe/W6nVArPZCM3BeJWMZSfeTNt4I1AQy3C6B37rC DpBC+cbvmTwUuxOjx6vUStcENbF4wAsswUyFGdiIvZ9v2WFJGIIdegcbrtwq/v0T 9PkQ+m+1+IAxgNBIRQG5qgQUCcpoSmfLilvhH56Ur+NvZ4SeM0Mv2uNwNk2DB06O 1RMUhya9XBf6Tfxf4Auc1T/jhor3YshlaXq4iTj75J/rWlPsoQiOJpSm2qKIfQkQ awLQs2tLB0bwwmejnc9uM31kIzY+TWch3Icxc+TXE2nXOrF7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDeXGUV+xKTGFfgUGuTSd13iXYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzZjYzVmYzgtMjc5Ny0z ZjNlLWE4MjgtMjBkNGQzYTlmYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxA9iw6TII5pArL4nWP+96rPtdEwUiCd7ugGODvMLg+kcSkV6v+80V8 0VU9wMSEhcOv6UEyHBtTCVZQCvUoWawzpDJXVxfI/Pl+i39fmqudswkth2zbpys8 G+iM6Bsl0Jd0j+2TmtOzhKE6VlITRYnMAFR0XQVEzVcGmLAgt6THQmhFyzj4gNv9 7cIwq4oHO//HzAxJb2G/eMvYKb/ApF8U0djZ3IWF4WTcBvxw5iOJqSs+3WQ+Wn+z Bycg46SdPv+ucuHgMRAPvIcyqHGb/Y/GVaGOxHi0oLEI4JRx0810uMtGAtJY9VnZ MfvWejsMrIQa3RNv4raoVb6Xh5n+/qc= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:21 2025 by rpki-client