$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa File: d94e9b6a-5660-37c1-a645-c558a1b39c66.roa (raw, json) Hash identifier: G4ogIdnDNbYs7SD4ym0bO7MzvZuzyzkVcf2Cv1vP9p8= Subject key identifier: ED:25:72:F3:01:6B:E7:7F:84:1B:78:95:8E:70:07:AB:12:20:AA:88 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AE9A22AA99D8384BA49A02AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa Signing time: Tue 19 Aug 2025 22:10:51 +0000 ROA not before: Tue 19 Aug 2025 22:10:51 +0000 ROA not after: Mon 17 Nov 2025 23:10:51 +0000 asID: 31898 IP address blocks: 129.149.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:a2:2a:a9:9d:83:84:ba:49:a0:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 19 22:10:51 2025 GMT Not After : Nov 17 23:10:51 2025 GMT Subject: CN=82a3f758-a438-4f4b-9926-0f6099b45717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:1b:6e:f2:c7:6d:c5:95:19:63:85:ba:96: 71:d2:46:af:61:f0:e6:a5:49:12:e3:86:b3:5c:3b: f0:56:9d:16:49:fe:6b:60:4a:3c:bc:d5:ef:0e:8e: cb:cf:1d:19:e3:66:43:15:5b:24:25:7e:93:10:e5: 85:61:59:06:38:f1:fa:fc:62:65:e4:51:7e:92:90: bd:5e:29:89:31:66:b7:4f:e0:75:5d:a4:25:dc:bd: 39:85:65:52:d6:9d:a5:4c:bc:84:99:59:05:01:e8: e0:4c:1f:91:8a:89:65:42:81:13:f0:3d:a6:8f:12: 8a:d0:62:af:74:d8:5a:99:bc:f0:5e:a8:74:1b:62: 2f:0d:6e:fc:d9:54:45:76:34:41:4a:23:ab:81:05: f4:93:c4:1b:5d:f3:b6:89:35:63:ae:1a:d6:80:f2: c6:ed:21:1f:b5:04:05:02:9c:a3:c2:1e:d5:9b:60: bd:02:bb:59:25:59:25:8e:ac:17:6f:3f:0d:2b:c7: e9:0a:c4:58:00:99:e7:4c:07:20:d0:9c:65:ce:f0: 40:4f:aa:a7:81:4e:5b:48:43:a5:62:6c:30:5d:bd: 95:ac:75:7f:9a:06:86:0e:3f:8c:aa:d3:09:f8:48: 40:f2:22:cb:f0:9c:7c:5b:30:3d:a6:64:fd:e1:52: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:25:72:F3:01:6B:E7:7F:84:1B:78:95:8E:70:07:AB:12:20:AA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:3e:b2:a9:ad:ed:52:bd:5d:61:e9:bd:20:b6:95:3b:f7:98: b1:8f:e4:77:16:80:0e:52:fc:68:f8:32:6c:f3:87:a2:f8:b2: 7a:56:85:4b:9a:dc:71:ea:ea:42:1a:2b:0a:c2:b1:3d:2d:73: 32:bb:1f:ea:40:f8:22:d7:69:12:e8:12:e8:07:9e:3e:bb:09: fa:ff:ec:8e:4c:4a:9e:22:46:8b:c3:cf:38:30:7c:b4:27:53: 5e:fe:2a:60:ac:83:48:02:12:60:e8:14:24:26:cd:07:19:10: 8e:f6:1c:a9:d1:7a:35:32:17:cf:6c:5c:24:4a:ae:be:58:fb: 94:90:81:aa:0a:09:ae:86:8c:cd:32:3b:f9:4c:ea:83:b6:c3: d7:3d:8e:48:52:90:e2:d0:90:8f:dc:ad:96:e8:68:39:48:f5: 05:25:a9:5a:7d:8f:40:f2:0a:3f:0f:2c:a8:f7:6f:94:cf:b8: 97:f1:39:de:58:5e:54:3d:17:aa:6d:7e:11:52:dd:c8:6a:49: 68:f2:9b:d4:10:36:20:7e:ac:01:81:53:62:da:87:4c:d7:8b: 45:3d:96:fe:c5:8d:4e:2d:8c:7f:b4:3b:84:76:88:f7:44:23: 03:1b:60:24:b8:19:a4:b9:08:c8:8e:71:ea:b4:90:95:69:1a: c0:90:e8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpoiqpnYOEukmgKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxOTIyMTA1MVoXDTI1MTExNzIzMTA1MVowLzEtMCsGA1UEAxMk ODJhM2Y3NTgtYTQzOC00ZjRiLTk5MjYtMGY2MDk5YjQ1NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcobbvLHbcWVGWOFupZx0kavYfDmpUkS44az XDvwVp0WSf5rYEo8vNXvDo7Lzx0Z42ZDFVskJX6TEOWFYVkGOPH6/GJl5FF+kpC9 XimJMWa3T+B1XaQl3L05hWVS1p2lTLyEmVkFAejgTB+RiollQoET8D2mjxKK0GKv dNhambzwXqh0G2IvDW782VRFdjRBSiOrgQX0k8QbXfO2iTVjrhrWgPLG7SEftQQF Apyjwh7Vm2C9ArtZJVkljqwXbz8NK8fpCsRYAJnnTAcg0JxlzvBAT6qngU5bSEOl YmwwXb2VrHV/mgaGDj+MqtMJ+EhA8iLL8Jx8WzA9pmT94VJCTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0lcvMBa+d/hBt4lY5wB6sSIKqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDk0ZTliNmEtNTY2MC0z N2MxLWE2NDUtYzU1OGExYjM5YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8+sqmt7VK9XWHpvSC2lTv3mLGP5HcWgA5S/Gj4Mmzzh6L4snpWhUua 3HHq6kIaKwrCsT0tczK7H+pA+CLXaRLoEugHnj67Cfr/7I5MSp4iRovDzzgwfLQn U17+KmCsg0gCEmDoFCQmzQcZEI72HKnRejUyF89sXCRKrr5Y+5SQgaoKCa6GjM0y O/lM6oO2w9c9jkhSkOLQkI/crZboaDlI9QUlqVp9j0DyCj8PLKj3b5TPuJfxOd5Y XlQ9F6ptfhFS3chqSWjym9QQNiB+rAGBU2Lah0zXi0U9lv7FjU4tjH+0O4R2iPdE IwMbYCS4GaS5CMiOceq0kJVpGsCQ6Fk= -----END CERTIFICATE-----Generated at Wed Aug 20 03:42:47 2025 by rpki-client