$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa File: f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa (raw, json) Hash identifier: i/Sd/JRveCJbxaFdtJKVLuP5jm5kV0GaRgoMJe0QhxI= Subject key identifier: 2B:25:65:1B:59:97:76:95:AD:7B:D7:3B:A0:8A:1C:7D:5B:94:55:7A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ACA765BD16F0316F34570A900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa Signing time: Fri 08 Aug 2025 18:12:32 +0000 ROA not before: Fri 08 Aug 2025 18:12:32 +0000 ROA not after: Thu 06 Nov 2025 19:12:32 +0000 asID: 31898 IP address blocks: 129.146.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:76:5b:d1:6f:03:16:f3:45:70:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 8 18:12:32 2025 GMT Not After : Nov 6 19:12:32 2025 GMT Subject: CN=5ba915ff-5f21-4b9f-af55-927d40650697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:f4:63:dc:0f:da:85:5c:ae:11:15:6b:98: 99:10:70:4a:3d:69:67:4b:aa:79:bf:20:69:a8:d3: cd:a7:6d:4e:30:23:d6:79:a2:1f:1a:a2:06:33:34: 94:3d:ab:03:4e:e2:8d:7c:2f:b4:ed:07:32:3e:c9: f5:06:53:fc:bb:30:c8:c2:25:45:48:ad:a4:0f:7d: 55:b5:10:98:b0:81:ca:f9:70:64:8d:b3:08:2b:79: 07:23:e7:c8:a9:ea:ab:e0:7b:aa:7d:c2:9a:ab:fe: 58:22:f0:fb:8a:40:a1:97:ba:46:25:37:4c:ed:18: b2:03:29:7b:cd:96:c2:84:77:2d:cb:e5:d0:cc:59: 7a:8a:02:94:e8:ac:5f:62:b0:78:b2:d4:5b:70:1c: f1:d7:34:36:63:30:44:2a:8a:e7:5e:ea:db:76:20: c3:8c:89:88:39:e6:cd:9d:11:c1:85:aa:52:29:76: 4c:5a:51:29:3e:81:28:ba:da:bd:3c:00:72:d3:11: 00:ac:9f:1b:6f:f1:c7:d7:ac:e6:9d:30:39:f8:28: 21:18:5c:5c:38:ef:41:c0:bf:ed:14:9e:dd:37:12: 03:ee:29:ee:84:09:39:ac:f1:b2:79:0c:33:6a:e4: 20:43:c5:6c:03:13:38:d0:7e:80:c4:a0:58:2a:3b: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:25:65:1B:59:97:76:95:AD:7B:D7:3B:A0:8A:1C:7D:5B:94:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f695cec2-2571-3660-bc42-99e3e6fd1e4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:31:63:f7:ea:76:72:41:32:d2:18:e5:31:c7:42:c3:98:9e: 91:c3:d5:a8:1d:3c:58:85:ba:04:de:ef:59:b5:7f:09:b5:d6: d6:29:09:db:f0:be:0c:6a:17:5b:1b:54:06:9f:41:ab:c8:68: dc:5a:7a:91:7e:9f:4f:89:89:dc:86:d9:a8:f7:e6:16:bc:d4: 16:3d:ff:40:61:b0:ac:57:9e:c7:0e:0b:d3:f3:5b:d8:fe:26: 8c:57:96:93:7c:27:94:46:9d:43:5f:81:b7:e9:5c:59:85:7c: de:bc:2d:d0:fe:b7:8d:76:b2:98:ba:aa:f0:90:54:90:f5:92: e2:d0:19:72:87:1e:85:dc:26:ea:86:63:96:d6:3e:cb:bb:9f: e4:ba:ef:f1:6d:57:f2:21:a9:f5:07:44:a2:3e:cb:30:d0:3a: 70:79:d8:bb:8e:3c:fa:39:02:40:b5:00:80:38:7e:f2:57:fc: 2b:ba:ce:9b:b7:e7:76:fa:3a:7d:96:c5:7e:70:bb:16:78:03: cc:22:49:bf:2c:d9:f0:28:cf:af:3c:38:3e:af:55:00:e1:39: 57:d3:1f:bf:97:5f:ee:63:a3:f3:82:02:d8:37:43:08:99:d0: ef:49:cc:44:73:4e:e8:2c:a1:83:d8:37:b3:d8:16:ae:ec:83: cd:ed:f0:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErKdlvRbwMW80VwqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgwODE4MTIzMloXDTI1MTEwNjE5MTIzMlowLzEtMCsGA1UEAxMk NWJhOTE1ZmYtNWYyMS00YjlmLWFmNTUtOTI3ZDQwNjUwNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oz0Y9wP2oVcrhEVa5iZEHBKPWlnS6p5vyBp qNPNp21OMCPWeaIfGqIGMzSUPasDTuKNfC+07QcyPsn1BlP8uzDIwiVFSK2kD31V tRCYsIHK+XBkjbMIK3kHI+fIqeqr4HuqfcKaq/5YIvD7ikChl7pGJTdM7RiyAyl7 zZbChHcty+XQzFl6igKU6KxfYrB4stRbcBzx1zQ2YzBEKornXurbdiDDjImIOebN nRHBhapSKXZMWlEpPoEoutq9PABy0xEArJ8bb/HH16zmnTA5+CghGFxcOO9BwL/t FJ7dNxID7inuhAk5rPGyeQwzauQgQ8VsAxM40H6AxKBYKjuoKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCslZRtZl3aVrXvXO6CKHH1blFV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjY5NWNlYzItMjU3MS0z NjYwLWJjNDItOTllM2U2ZmQxZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoxY/fqdnJBMtIY5THHQsOYnpHD1agdPFiFugTe71m1fwm11tYpCdvw vgxqF1sbVAafQavIaNxaepF+n0+JidyG2aj35ha81BY9/0BhsKxXnscOC9PzW9j+ JoxXlpN8J5RGnUNfgbfpXFmFfN68LdD+t412spi6qvCQVJD1kuLQGXKHHoXcJuqG Y5bWPsu7n+S67/FtV/IhqfUHRKI+yzDQOnB52LuOPPo5AkC1AIA4fvJX/Cu6zpu3 53b6On2WxX5wuxZ4A8wiSb8s2fAoz688OD6vVQDhOVfTH7+XX+5jo/OCAtg3QwiZ 0O9JzERzTugsoYPYN7PYFq7sg83t8J0= -----END CERTIFICATE-----Generated at Wed Aug 20 03:23:20 2025 by rpki-client