$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa File: 1ff31159-10d7-3002-bb66-88de9c0b2368.roa (raw, json) Hash identifier: Dy6SIoa8xI35GKDkQpW7i7PZjzRn/EewTgLKw8/KtS4= Subject key identifier: 4C:11:5C:4D:4D:18:15:25:F1:0D:B4:0D:EE:AE:BD:17:45:80:8B:D7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013DCA67CEFC046C4740080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa Signing time: Fri 22 Aug 2025 05:34:47 +0000 ROA not before: Fri 22 Aug 2025 05:34:47 +0000 ROA not after: Thu 20 Nov 2025 06:34:47 +0000 asID: 31898 IP address blocks: 129.152.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:dc:a6:7c:ef:c0:46:c4:74:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:34:47 2025 GMT Not After : Nov 20 06:34:47 2025 GMT Subject: CN=2f0173b1-a33d-4086-a49a-2cd7e3e2c2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:4b:60:35:a3:05:e6:73:40:1d:1c:55:6d: db:ba:01:31:70:9e:26:6c:c2:1c:6c:6d:75:67:06: bd:3d:09:a9:84:8f:f3:ad:13:79:a8:60:c1:0c:96: 6f:24:20:5a:d6:ac:0a:e2:1a:65:87:be:b7:b4:fd: cb:f7:01:20:b1:e6:b8:e6:3a:ec:dc:37:50:8f:7d: 10:9f:59:ea:4c:c9:e8:83:76:08:5e:c9:66:4e:4a: 90:29:5e:24:79:91:30:c7:73:49:82:a2:01:60:a0: f5:a9:8a:1f:fd:51:64:86:c1:e6:db:41:8e:46:89: 6f:e0:8a:fa:06:48:1e:1a:c6:d2:21:cd:a5:d7:85: de:ed:44:40:34:88:d6:4c:b2:a0:a8:f6:e7:fa:d9: e3:d0:1d:1a:d3:50:93:71:4b:a3:1b:12:1b:c8:80: e3:5f:c3:5e:3a:a7:21:28:8d:6e:5d:38:73:18:aa: f7:dd:02:9f:dc:85:ba:1b:54:ff:87:d7:34:26:48: 9d:24:10:7e:ac:7f:5f:b5:61:90:16:e7:86:6f:89: 58:f7:63:44:93:ea:a3:c0:c9:98:87:5f:57:ce:c4: d2:e0:17:56:e1:d6:f7:3d:54:de:8b:9b:3c:32:14: 92:96:a7:1f:fe:a1:1b:10:9d:10:56:19:ad:cc:e7: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:11:5C:4D:4D:18:15:25:F1:0D:B4:0D:EE:AE:BD:17:45:80:8B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ff31159-10d7-3002-bb66-88de9c0b2368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ae:7c:f0:24:34:ba:33:34:7c:78:2d:2b:b8:7e:af:ce:e7: a1:dd:87:6d:88:40:5a:53:08:6a:fc:c3:81:4b:bd:1c:5a:f4: 68:57:71:38:f9:af:f6:a1:6c:45:bc:68:2a:0b:fb:70:e3:54: 98:a6:2a:04:bd:65:1b:e1:ce:d5:04:1b:96:6c:97:00:ea:46: 46:56:12:bc:2c:54:c3:4e:e6:c8:71:16:bd:1b:c6:d6:82:a7: 47:9b:48:44:c9:4d:3e:54:45:95:3e:b0:b5:3f:07:1c:15:52: c3:5d:37:0f:c5:7d:66:1a:8c:61:e1:1a:08:07:35:f5:54:e6: 63:e4:68:7d:66:00:7f:96:a5:48:22:e7:30:4c:bb:47:f6:e8: ae:c7:05:db:f7:c0:ef:73:6a:6c:9c:b9:65:58:42:24:98:1a: 89:0e:1d:0f:59:80:93:12:e3:7f:25:19:58:e9:a8:f1:82:51: b5:ea:a3:e9:89:75:59:0d:25:09:da:63:82:0e:d2:d3:cd:6f: 0d:cd:ea:9a:8b:18:c2:7d:42:23:e6:f4:ef:94:00:00:7f:86: 01:8e:e0:23:c5:10:1c:4b:24:d1:25:34:3d:5c:94:f6:c8:b5: 13:68:5d:dd:25:72:54:cc:98:4b:dd:85:de:24:a4:81:af:c2: 05:c2:89:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE9ymfO/ARsR0AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzQ0N1oXDTI1MTEyMDA2MzQ0N1owLzEtMCsGA1UEAxMk MmYwMTczYjEtYTMzZC00MDg2LWE0OWEtMmNkN2UzZTJjMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyNLYDWjBeZzQB0cVW3bugExcJ4mbMIcbG11 Zwa9PQmphI/zrRN5qGDBDJZvJCBa1qwK4hplh763tP3L9wEgsea45jrs3DdQj30Q n1nqTMnog3YIXslmTkqQKV4keZEwx3NJgqIBYKD1qYof/VFkhsHm20GORolv4Ir6 BkgeGsbSIc2l14Xe7URANIjWTLKgqPbn+tnj0B0a01CTcUujGxIbyIDjX8NeOqch KI1uXThzGKr33QKf3IW6G1T/h9c0JkidJBB+rH9ftWGQFueGb4lY92NEk+qjwMmY h19XzsTS4BdW4db3PVTei5s8MhSSlqcf/qEbEJ0QVhmtzOf4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwRXE1NGBUl8Q20De6uvRdFgIvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWZmMzExNTktMTBkNy0z MDAyLWJiNjYtODhkZTljMGIyMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGufPAkNLozNHx4LSu4fq/O56Hdh22IQFpTCGr8w4FLvRxa9GhXcTj5 r/ahbEW8aCoL+3DjVJimKgS9ZRvhztUEG5ZslwDqRkZWErwsVMNO5shxFr0bxtaC p0ebSETJTT5URZU+sLU/BxwVUsNdNw/FfWYajGHhGggHNfVU5mPkaH1mAH+WpUgi 5zBMu0f26K7HBdv3wO9zamycuWVYQiSYGokOHQ9ZgJMS438lGVjpqPGCUbXqo+mJ dVkNJQnaY4IO0tPNbw3N6pqLGMJ9QiPm9O+UAAB/hgGO4CPFEBxLJNElND1clPbI tRNoXd0lclTMmEvdhd4kpIGvwgXCieU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:08 2025 by rpki-client