$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa File: 28d4aa01-578d-325a-b843-3e00f23bb714.roa (raw, json) Hash identifier: t5c8DXhnznZ8ADy1Lesfdk/gffMNDODaMWzt0krx4gU= Subject key identifier: 2E:2F:F6:76:A9:BD:BB:AB:9C:9B:33:C4:3B:0E:06:99:84:F7:C3:06 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF012E0113842D7275C592140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa Signing time: Fri 22 Aug 2025 05:32:48 +0000 ROA not before: Fri 22 Aug 2025 05:32:48 +0000 ROA not after: Thu 20 Nov 2025 06:32:48 +0000 asID: 31898 IP address blocks: 129.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:e0:11:38:42:d7:27:5c:59:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:32:48 2025 GMT Not After : Nov 20 06:32:48 2025 GMT Subject: CN=540934f8-e41c-46a7-a7dc-9b83432aa5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:d7:9a:ca:1f:2a:34:79:ae:04:10:fe:b8: a6:9a:e2:40:fd:43:70:b2:59:7d:ec:7b:18:36:01: 31:43:2a:be:85:ce:29:10:7f:4e:75:cb:d3:2a:3c: ad:d6:40:75:d1:8c:da:2a:8c:f7:0e:47:61:a1:fd: 4e:d0:21:5c:d3:8a:1e:89:b9:bc:60:e3:77:5e:e8: 85:72:91:e3:dc:91:17:40:c5:91:85:1a:8c:45:9f: f6:ce:06:64:6c:04:d8:e0:62:5e:d0:d2:4b:6c:aa: 45:f8:4c:5c:cb:8e:d1:85:b9:b6:8e:3b:0c:dc:1f: 2e:b3:10:47:f6:92:4e:19:8e:3f:4e:c5:7b:4b:58: 03:d0:9c:8b:93:11:7a:7d:d5:7f:84:68:17:db:0e: f0:64:ef:89:01:0f:41:3e:00:70:cb:2e:b3:38:46: 61:33:c9:e6:1c:87:97:6f:46:79:75:41:6d:70:29: b8:23:a6:d2:e6:14:13:c5:ca:b1:ef:86:b0:28:72: f2:dc:6d:d8:6b:7c:99:50:c1:9b:3a:85:0f:38:e6: 72:55:68:74:bd:a4:f0:8f:14:fb:fb:3d:c2:72:be: 12:c2:69:39:cf:9f:9d:97:5a:76:4c:98:c0:ca:43: 00:9d:57:2c:06:37:ff:f7:8e:0d:78:12:60:21:b8: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2F:F6:76:A9:BD:BB:AB:9C:9B:33:C4:3B:0E:06:99:84:F7:C3:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:24:e9:df:a0:f8:a5:16:a2:4c:12:d5:99:e4:05:3b:a7:b8: 49:b4:38:0b:51:8c:1b:04:07:ae:b4:86:43:58:fa:27:4b:b4: a2:d6:74:6e:91:e1:db:10:86:df:c1:fe:ff:2f:51:1b:43:8b: 98:d4:7e:ef:f7:53:83:71:75:13:24:e7:be:9f:5d:c3:fb:15: 91:94:54:e7:c2:2d:b2:bc:da:b9:43:fa:53:f9:aa:48:0c:aa: b8:7f:23:42:b6:b4:79:ae:f8:30:16:4d:0c:e5:b1:01:20:e2: d8:7e:4e:17:f7:dc:8e:84:54:60:a6:4f:b3:56:74:cb:04:2b: c8:e7:78:45:d5:8e:3c:08:84:ec:3d:bb:ca:65:b4:f2:9f:61: ba:46:2d:f5:af:35:18:40:27:76:1b:e9:f5:15:bf:12:ac:d8: fe:6b:38:54:ba:78:81:55:7d:78:c0:70:8c:bd:ab:8d:72:b5: 1b:61:3b:8e:fd:1e:de:7c:98:e1:2a:23:30:37:07:71:aa:9b: a8:f5:22:27:49:1b:b2:b6:40:69:8e:13:e8:bd:e9:24:7a:57: 48:4a:53:4e:5c:ff:42:57:e0:5f:f0:1f:d0:cc:6a:11:91:a6: c4:98:a7:5f:e0:ad:db:4c:18:e5:94:30:61:17:22:ef:22:21: f7:54:18:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEuAROELXJ1xZIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzI0OFoXDTI1MTEyMDA2MzI0OFowLzEtMCsGA1UEAxMk NTQwOTM0ZjgtZTQxYy00NmE3LWE3ZGMtOWI4MzQzMmFhNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljDXmsofKjR5rgQQ/rimmuJA/UNwsll97HsY NgExQyq+hc4pEH9OdcvTKjyt1kB10YzaKoz3Dkdhof1O0CFc04oeibm8YON3XuiF cpHj3JEXQMWRhRqMRZ/2zgZkbATY4GJe0NJLbKpF+Excy47Rhbm2jjsM3B8usxBH 9pJOGY4/TsV7S1gD0JyLkxF6fdV/hGgX2w7wZO+JAQ9BPgBwyy6zOEZhM8nmHIeX b0Z5dUFtcCm4I6bS5hQTxcqx74awKHLy3G3Ya3yZUMGbOoUPOOZyVWh0vaTwjxT7 +z3Ccr4Swmk5z5+dl1p2TJjAykMAnVcsBjf/944NeBJgIbhDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4v9napvburnJszxDsOBpmE98MGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjhkNGFhMDEtNTc4ZC0z MjVhLWI4NDMtM2UwMGYyM2JiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8k6d+g+KUWokwS1ZnkBTunuEm0OAtRjBsEB660hkNY+idLtKLWdG6R 4dsQht/B/v8vURtDi5jUfu/3U4NxdRMk576fXcP7FZGUVOfCLbK82rlD+lP5qkgM qrh/I0K2tHmu+DAWTQzlsQEg4th+Thf33I6EVGCmT7NWdMsEK8jneEXVjjwIhOw9 u8pltPKfYbpGLfWvNRhAJ3Yb6fUVvxKs2P5rOFS6eIFVfXjAcIy9q41ytRthO479 Ht58mOEqIzA3B3Gqm6j1IidJG7K2QGmOE+i96SR6V0hKU05c/0JX4F/wH9DMahGR psSYp1/grdtMGOWUMGEXIu8iIfdUGLI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:21 2025 by rpki-client