$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa File: 0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa (raw, json) Hash identifier: JbjSDMxu1jnGnK8p1F05qtV68Oa3SJE6AfiTka4jNyY= Subject key identifier: DB:2F:51:01:29:8A:D3:C5:24:6D:EE:A1:61:5C:C5:9C:7A:05:14:A5 Certificate issuer: /CN=a7fb5a33-e5d6-4994-a771-5194ace5e014 Certificate serial: 010D0C9F4328584AF3BBDAC31BA178D2AAC31680 Authority key identifier: 51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa Signing time: Sat 23 Aug 2025 13:00:41 +0000 ROA not before: Sat 23 Aug 2025 13:00:41 +0000 ROA not after: Fri 21 Nov 2025 14:00:41 +0000 asID: 2698 IP address blocks: 129.186.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:bb:da:c3:1b:a1:78:d2:aa:c3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fb5a33-e5d6-4994-a771-5194ace5e014 Validity Not Before: Aug 23 13:00:41 2025 GMT Not After : Nov 21 14:00:41 2025 GMT Subject: CN=b645ac36-f1b7-4315-a91e-cbd093939e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:0b:d2:36:7b:62:76:ce:72:89:5b:90:d2: cb:f9:5c:78:ee:04:ce:5d:bb:34:ee:3e:d8:f1:c4: 85:fa:52:21:c5:28:aa:57:52:a7:92:d5:52:1d:3f: 3f:f1:2b:6f:f7:15:81:03:a3:fb:c1:60:c9:08:4a: 45:5b:77:81:0a:81:95:7a:c5:f4:75:ce:63:8c:1b: a2:d6:09:17:e6:13:b7:70:03:3b:f4:db:c6:00:28: a4:c1:da:3c:33:1f:b2:f0:2b:b4:9d:43:98:9b:77: d1:1d:84:18:42:e7:25:53:55:63:24:7f:72:7c:38: 70:0c:df:8a:5d:7d:c2:07:c8:d3:9a:d0:fb:f8:f7: 58:e0:25:83:db:e8:14:42:a9:2b:ac:60:d4:de:bb: f9:49:a8:fc:44:48:fc:4d:f5:04:db:9e:92:b0:b8: c5:96:52:fc:cc:7b:89:9b:64:ab:2e:aa:de:7b:a2: 66:d8:87:a0:51:a1:23:06:17:0b:ec:33:07:54:b0: ff:de:60:dc:50:c2:4e:76:59:c1:e5:d1:37:95:4c: 48:50:bb:86:ab:6a:4c:0c:23:e4:6d:fb:97:c8:cc: 42:9e:b0:79:28:3b:ee:78:b0:ed:1f:28:64:18:30: 67:ff:95:23:4a:7e:92:54:fc:85:1f:b2:c9:1c:f3: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2F:51:01:29:8A:D3:C5:24:6D:EE:A1:61:5C:C5:9C:7A:05:14:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/0daa6fd3-ef9d-3b74-9adf-f3dadecc9fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014/a7fb5a33-e5d6-4994-a771-5194ace5e014.crl X509v3 Authority Key Identifier: keyid:51:5C:3D:B9:65:61:78:8D:67:8F:02:47:95:A5:44:0D:0C:3A:81:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7fb5a33-e5d6-4994-a771-5194ace5e014.cer sbgp-ipAddrBlock: critical IPv4: 129.186.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:07:06:54:42:b5:63:cb:38:9f:a4:85:62:66:7c:55:61:00: bd:88:ab:42:36:f8:a0:cd:30:21:a1:07:3d:0f:48:d0:3a:5d: 00:1d:a3:14:81:9c:78:af:95:8e:a0:6b:79:08:51:bb:00:c6: 52:61:71:32:4e:7d:ff:e3:10:8a:8c:97:ff:f3:37:66:0a:3f: 17:82:0c:bb:a8:89:34:c3:fd:9e:44:b7:28:3a:c2:b3:69:25: 7a:f9:e6:45:e1:c1:ce:b7:6b:3d:66:26:1a:c0:34:81:9f:0a: c0:bc:8c:2d:37:a8:89:07:8a:d2:a8:6e:55:1e:41:ae:18:de: e5:31:e8:10:cb:1b:b5:20:bf:c1:60:0f:0c:dc:90:4a:83:59: f1:b2:96:15:44:d4:2b:14:1b:34:14:2c:1c:f5:68:7b:78:64: 86:74:d4:43:6c:86:70:06:5e:51:4e:7c:73:ae:3c:88:d2:30: a4:49:26:80:78:4e:03:28:43:88:da:73:28:26:61:2e:3b:30: 16:1f:16:1e:4e:9e:88:52:b1:da:5b:56:1c:42:4a:70:a9:39: e8:be:37:6c:bc:3f:c3:f9:53:12:1b:77:84:8b:fc:2e:ec:be: 80:a6:17:a7:08:27:14:e9:1d:9f:53:aa:49:2c:7b:1d:fd:8a: cd:30:bc:61 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErzu9rDG6F40qrDFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdmYjVhMzMtZTVkNi00OTk0LWE3NzEtNTE5NGFjZTVl MDE0MB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk YjY0NWFjMzYtZjFiNy00MzE1LWE5MWUtY2JkMDkzOTM5ZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT4L0jZ7YnbOcolbkNLL+Vx47gTOXbs07j7Y 8cSF+lIhxSiqV1KnktVSHT8/8Stv9xWBA6P7wWDJCEpFW3eBCoGVesX0dc5jjBui 1gkX5hO3cAM79NvGACikwdo8Mx+y8Cu0nUOYm3fRHYQYQuclU1VjJH9yfDhwDN+K XX3CB8jTmtD7+PdY4CWD2+gUQqkrrGDU3rv5Saj8REj8TfUE256SsLjFllL8zHuJ m2SrLqree6Jm2IegUaEjBhcL7DMHVLD/3mDcUMJOdlnB5dE3lUxIULuGq2pMDCPk bfuXyMxCnrB5KDvueLDtHyhkGDBn/5UjSn6SVPyFH7LJHPPKnwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNsvUQEpitPFJG3uoWFcxZx6BRSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2Zi NWEzMy1lNWQ2LTQ5OTQtYTc3MS01MTk0YWNlNWUwMTQvMGRhYTZmZDMtZWY5ZC0z Yjc0LTlhZGYtZjNkYWRlY2M5ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTdmYjVhMzMtZTVkNi00OTk0LWE3 NzEtNTE5NGFjZTVlMDE0L2E3ZmI1YTMzLWU1ZDYtNDk5NC1hNzcxLTUxOTRhY2U1 ZTAxNC5jcmwwHwYDVR0jBBgwFoAUUVw9uWVheI1njwJHlaVEDQw6gd0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hN2ZiNWEzMy1lNWQ2LTQ5OTQtYTc3MS01MTk0 YWNlNWUwMTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgbowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYwcGVEK1Y8s4n6SFYmZ8VWEAvYirQjb4oM0wIaEHPQ9I0DpdAB2jFIGc eK+VjqBreQhRuwDGUmFxMk59/+MQioyX//M3Zgo/F4IMu6iJNMP9nkS3KDrCs2kl evnmReHBzrdrPWYmGsA0gZ8KwLyMLTeoiQeK0qhuVR5Brhje5THoEMsbtSC/wWAP DNyQSoNZ8bKWFUTUKxQbNBQsHPVoe3hkhnTUQ2yGcAZeUU58c648iNIwpEkmgHhO AyhDiNpzKCZhLjswFh8WHk6eiFKx2ltWHEJKcKk56L43bLw/w/lTEht3hIv8Luy+ gKYXpwgnFOkdn1OqSSx7Hf2KzTC8YQ== -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:37 2025 by rpki-client