$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa File: fac8b28c-b365-3f6b-8265-5625f4e423dc.roa (raw, json) Hash identifier: dsk2p0KQq0S1h73o1yDQkhCfaCq+ozbvmVnrT1ta3ew= Subject key identifier: 1A:9E:02:05:DB:CC:07:EF:3C:9D:01:91:EC:72:DF:38:CF:A7:0A:67 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADE594F40BBFA5AE2E2D6AAC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa Signing time: Fri 15 Aug 2025 21:10:10 +0000 ROA not before: Fri 15 Aug 2025 21:10:10 +0000 ROA not after: Thu 13 Nov 2025 22:10:10 +0000 asID: 31898 IP address blocks: 129.148.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:59:4f:40:bb:fa:5a:e2:e2:d6:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 21:10:10 2025 GMT Not After : Nov 13 22:10:10 2025 GMT Subject: CN=0d110c08-0d22-418b-8e78-af7dc5ed4293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:03:f4:9d:55:09:88:73:90:5d:c1:4d:c8: 24:f7:6c:c2:79:cf:65:b9:8e:6a:c8:6e:3d:d8:0f: 0b:40:29:fb:a8:6e:89:03:a4:6b:dc:99:ce:e5:34: cd:10:2a:de:f1:9c:14:85:51:68:70:05:2f:1c:61: 5b:f0:3d:59:1d:f9:f3:b7:c4:a8:29:59:da:32:98: f2:58:2d:d1:90:3c:b6:20:c7:26:6c:12:8a:aa:a2: eb:6a:6c:92:51:6c:5b:0f:50:e4:c6:67:83:e1:94: 0b:d0:df:e3:69:37:ae:9e:be:dd:a7:4f:ef:0f:a3: da:c4:18:1c:e5:ca:7f:8c:03:a5:8b:02:9c:83:8d: 90:75:a0:b6:19:c0:e2:54:c5:0c:7c:bc:ec:53:2f: 2b:48:c3:5a:3f:e1:24:51:b1:57:1a:ae:4d:e1:24: ba:1c:5a:6d:da:40:67:61:f4:54:09:3c:19:4b:5f: 5f:9b:d8:82:88:cb:e3:b0:f6:3f:6b:47:44:31:f5: 0b:06:1a:ef:dd:4c:7d:65:d2:fd:ba:d8:9d:19:df: 01:44:43:ed:50:e8:2f:d1:61:f7:7b:e2:b5:69:c9: 2b:7b:b7:3d:51:c2:2a:7c:d4:02:ca:d1:18:c0:f8: 39:41:3b:e4:1c:33:c1:e2:6d:ef:0b:80:1f:90:67: de:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9E:02:05:DB:CC:07:EF:3C:9D:01:91:EC:72:DF:38:CF:A7:0A:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fac8b28c-b365-3f6b-8265-5625f4e423dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:44:d5:85:92:55:65:e5:f5:1c:9f:a1:58:96:aa:68:37:ee: d7:eb:d3:1c:e5:f2:da:1f:43:53:ed:5f:c3:a4:9d:02:c0:df: b9:3c:22:fd:31:c0:1d:b5:bf:e5:d7:23:68:e4:52:90:5d:4a: 55:16:0d:b1:00:68:2f:6f:4d:c6:5c:78:2f:af:55:95:4f:6b: 6d:e5:fd:3c:5f:cd:a5:35:41:3d:6b:7b:fb:e4:4b:f1:2d:f3: 7c:58:fa:99:86:fc:76:a6:1a:72:f2:6e:c8:d7:9e:ed:68:96: 7f:a7:d8:79:1c:06:4f:70:19:ff:eb:1a:37:07:9a:c1:7b:e6: 86:76:af:c5:b5:8e:82:9e:f9:21:e3:ef:e1:b6:5d:e5:b6:43: 01:07:b0:87:55:49:9e:f4:9e:a2:f4:cd:5a:bd:62:f0:ac:d7: a2:d1:0c:97:3b:b6:75:68:c2:e4:d1:55:5f:31:0a:62:da:6c: 5e:32:22:05:89:92:04:a6:8b:78:27:1c:19:31:72:a6:78:5e: 76:eb:09:f9:86:18:3e:86:66:f1:d5:8a:8e:c8:a8:46:87:e5: c5:b5:da:d4:8b:7c:6a:89:20:98:c1:76:4b:ad:fc:16:47:d0: a4:3b:ac:99:d2:a1:17:f8:a8:8a:a4:13:37:18:4b:d9:3e:20: 73:78:55:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEreWU9Au/pa4uLWqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTIxMTAxMFoXDTI1MTExMzIyMTAxMFowLzEtMCsGA1UEAxMk MGQxMTBjMDgtMGQyMi00MThiLThlNzgtYWY3ZGM1ZWQ0MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jAD9J1VCYhzkF3BTcgk92zCec9luY5qyG49 2A8LQCn7qG6JA6Rr3JnO5TTNECre8ZwUhVFocAUvHGFb8D1ZHfnzt8SoKVnaMpjy WC3RkDy2IMcmbBKKqqLramySUWxbD1DkxmeD4ZQL0N/jaTeunr7dp0/vD6PaxBgc 5cp/jAOliwKcg42QdaC2GcDiVMUMfLzsUy8rSMNaP+EkUbFXGq5N4SS6HFpt2kBn YfRUCTwZS19fm9iCiMvjsPY/a0dEMfULBhrv3Ux9ZdL9utidGd8BREPtUOgv0WH3 e+K1ackre7c9UcIqfNQCytEYwPg5QTvkHDPB4m3vC4AfkGfe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqeAgXbzAfvPJ0Bkexy3zjPpwpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFjOGIyOGMtYjM2NS0z ZjZiLTgyNjUtNTYyNWY0ZTQyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdE1YWSVWXl9RyfoViWqmg37tfr0xzl8tofQ1PtX8OknQLA37k8Iv0x wB21v+XXI2jkUpBdSlUWDbEAaC9vTcZceC+vVZVPa23l/TxfzaU1QT1re/vkS/Et 83xY+pmG/HamGnLybsjXnu1oln+n2HkcBk9wGf/rGjcHmsF75oZ2r8W1joKe+SHj 7+G2XeW2QwEHsIdVSZ70nqL0zVq9YvCs16LRDJc7tnVowuTRVV8xCmLabF4yIgWJ kgSmi3gnHBkxcqZ4XnbrCfmGGD6GZvHVio7IqEaH5cW12tSLfGqJIJjBdkut/BZH 0KQ7rJnSoRf4qIqkEzcYS9k+IHN4VVs= -----END CERTIFICATE-----Generated at Wed Aug 20 03:27:14 2025 by rpki-client