$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa File: 24b20201-385a-38c8-90b4-64fc391327a2.roa (raw, json) Hash identifier: HNn5vVClyKHor/uxMzqBufEJBwYh3mDjoE+23Jc3Ppk= Subject key identifier: 3E:D6:C7:70:38:F3:B4:78:86:FF:46:F3:61:CC:0B:30:C4:00:80:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013E54A485B8A763C0CA580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa Signing time: Fri 22 Aug 2025 05:34:51 +0000 ROA not before: Fri 22 Aug 2025 05:34:51 +0000 ROA not after: Thu 20 Nov 2025 06:34:51 +0000 asID: 31898 IP address blocks: 129.153.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:e5:4a:48:5b:8a:76:3c:0c:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:34:51 2025 GMT Not After : Nov 20 06:34:51 2025 GMT Subject: CN=389254cf-49b8-4884-b2bb-b106271be6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:fb:cb:b6:47:cd:99:bd:46:bf:d7:53:e1: c1:bf:5f:03:ca:6a:c8:75:9b:b9:a9:ed:d7:2a:f9: 6a:de:3a:bb:e7:a0:cc:10:19:23:ad:f3:c2:11:66: 4a:40:22:92:f4:1b:9f:47:f3:ef:91:fc:a5:ae:3e: 1a:3c:b2:93:3b:05:ee:63:c3:cc:1f:58:4e:cd:72: 5c:4d:f5:b2:cb:58:63:7a:93:cb:f5:b3:18:51:dd: bb:04:24:88:ae:61:52:79:c4:e1:cb:44:d8:07:6e: 4f:72:10:f3:d9:8e:fb:9f:f8:19:61:8f:07:7f:d0: bb:50:90:2e:ec:87:f7:08:8f:cb:2e:5e:a5:23:4e: da:4c:cd:aa:3d:0f:7a:8c:09:55:98:ed:52:73:0a: 23:27:45:a1:ea:30:bb:02:d8:64:06:90:f4:50:42: e6:93:ae:74:86:e7:66:47:b9:1f:30:ab:aa:10:01: 11:ee:1f:2e:33:4b:19:52:cd:a3:51:0a:16:7b:aa: 7c:76:01:96:33:0c:2a:ad:d5:b6:57:7a:76:94:66: 7f:f7:7f:91:2a:f1:bb:2f:64:e5:b4:ba:11:d4:b9: 5f:8a:7d:c6:fd:c3:5e:4c:34:84:f4:36:e6:fd:d6: 27:d3:06:9c:31:22:b5:40:5b:af:f9:f3:2b:d1:1c: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:C7:70:38:F3:B4:78:86:FF:46:F3:61:CC:0B:30:C4:00:80:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:24:79:eb:a3:5c:05:42:78:38:ee:60:f9:37:9e:19:3a:9d: db:44:66:e2:7f:1c:c1:e7:e8:64:14:23:e3:99:fe:c9:b2:7e: 21:15:18:49:7a:97:71:3a:bb:cc:9e:2c:ab:00:ed:3b:9c:06: 94:8f:66:e5:40:17:15:09:d8:ad:6a:04:ef:5a:b8:4b:4f:b7: 9f:37:97:20:6e:55:3b:fc:0e:a4:b4:80:d5:69:ab:3d:db:bd: f8:7f:7c:41:16:41:0b:14:a9:0d:35:3e:4a:03:5b:fe:fe:8f: e9:ee:59:f1:b9:a9:70:45:28:82:26:ff:1c:0f:fe:ce:8f:27: b2:c6:67:97:fe:e1:07:5d:ee:0c:9a:6d:56:8f:e8:87:45:f4: 76:5a:ee:e9:4b:3a:1e:30:18:da:18:2a:f7:6c:00:c6:78:90: 90:6d:14:87:8e:fb:4d:74:d4:66:33:4f:d9:e0:89:7f:73:54: f8:d7:73:e1:fc:d7:a2:c0:64:36:90:c7:41:cf:ad:ea:97:95: 09:eb:91:fd:2d:dc:be:75:02:ac:89:b4:16:7f:50:c8:06:75: 43:b1:53:2a:72:77:45:d0:56:ec:2b:55:21:10:1b:ce:da:cc: d7:f6:d9:85:82:cb:87:15:48:56:4a:b5:00:68:4d:11:34:04: cf:fe:3d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE+VKSFuKdjwMpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzQ1MVoXDTI1MTEyMDA2MzQ1MVowLzEtMCsGA1UEAxMk Mzg5MjU0Y2YtNDliOC00ODg0LWIyYmItYjEwNjI3MWJlNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsj7y7ZHzZm9Rr/XU+HBv18DymrIdZu5qe3X Kvlq3jq756DMEBkjrfPCEWZKQCKS9BufR/Pvkfylrj4aPLKTOwXuY8PMH1hOzXJc TfWyy1hjepPL9bMYUd27BCSIrmFSecThy0TYB25PchDz2Y77n/gZYY8Hf9C7UJAu 7If3CI/LLl6lI07aTM2qPQ96jAlVmO1ScwojJ0Wh6jC7AthkBpD0UELmk650hudm R7kfMKuqEAER7h8uM0sZUs2jUQoWe6p8dgGWMwwqrdW2V3p2lGZ/93+RKvG7L2Tl tLoR1Llfin3G/cNeTDSE9Dbm/dYn0wacMSK1QFuv+fMr0RyOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7Wx3A487R4hv9G82HMCzDEAIBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRiMjAyMDEtMzg1YS0z OGM4LTkwYjQtNjRmYzM5MTMyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0keeujXAVCeDjuYPk3nhk6ndtEZuJ/HMHn6GQUI+OZ/smyfiEVGEl6 l3E6u8yeLKsA7TucBpSPZuVAFxUJ2K1qBO9auEtPt583lyBuVTv8DqS0gNVpqz3b vfh/fEEWQQsUqQ01PkoDW/7+j+nuWfG5qXBFKIIm/xwP/s6PJ7LGZ5f+4Qdd7gya bVaP6IdF9HZa7ulLOh4wGNoYKvdsAMZ4kJBtFIeO+0101GYzT9ngiX9zVPjXc+H8 16LAZDaQx0HPreqXlQnrkf0t3L51AqyJtBZ/UMgGdUOxUypyd0XQVuwrVSEQG87a zNf22YWCy4cVSFZKtQBoTRE0BM/+PUM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:36 2025 by rpki-client