$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa File: 3849f735-42e5-3876-8aee-af094c92edbc.roa (raw, json) Hash identifier: KFtAekgvsmD0nbTj/HJSdXdX7QBus0OtjpaYePkVQ8o= Subject key identifier: 35:6F:FA:BD:77:E5:BE:6C:07:11:0E:D7:24:64:F6:F5:82:20:B1:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEEAD2714C36E82B64EB2F5C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa Signing time: Thu 21 Aug 2025 17:32:02 +0000 ROA not before: Thu 21 Aug 2025 17:32:02 +0000 ROA not after: Wed 19 Nov 2025 18:32:02 +0000 asID: 31898 IP address blocks: 129.159.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ad:27:14:c3:6e:82:b6:4e:b2:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 17:32:02 2025 GMT Not After : Nov 19 18:32:02 2025 GMT Subject: CN=35a87f2f-3281-41b3-b9d8-84a7db452c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:af:cd:0e:cf:1f:aa:91:cb:d1:e1:14:3a: 2c:97:b4:b1:f3:6f:97:d8:ed:c0:18:c7:13:d7:87: 6a:db:de:4c:7b:3d:d6:97:0d:00:90:af:e7:8b:e0: 07:a8:b3:00:44:3f:3b:5b:e0:30:ff:0a:6f:7f:b4: af:ba:8b:4c:91:e3:7e:bf:bf:85:c0:d5:0a:bf:ba: 00:00:b6:45:01:6d:db:75:fa:53:5b:78:12:bf:79: 5b:38:a6:09:58:d5:0a:67:be:04:87:13:67:b6:50: f0:d7:ce:9e:98:36:00:92:94:ed:7a:d6:a8:2f:12: 24:69:6d:af:43:24:5a:81:53:69:4b:be:36:ce:40: a5:ad:dc:4b:fe:4e:39:28:cc:15:65:30:b6:e9:56: 3a:e1:f4:dd:dc:28:a6:f1:bb:a6:b0:f5:c9:34:81: dd:1e:54:c0:ea:13:fb:54:c4:9d:a6:0b:f3:a9:c8: b6:71:0e:f7:8d:c7:35:8e:48:ad:78:c3:81:8e:7a: 4a:26:64:44:1a:d5:01:f1:7d:28:1e:1a:79:2f:5c: 99:de:a3:94:ff:ab:c3:5a:77:f1:14:41:41:fd:8f: 5e:b5:85:77:8c:8f:21:d7:8c:5c:0e:44:ab:d7:6c: 76:89:f5:d7:95:ca:6f:8b:5a:4e:63:1b:8a:40:fb: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:FA:BD:77:E5:BE:6C:07:11:0E:D7:24:64:F6:F5:82:20:B1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3849f735-42e5-3876-8aee-af094c92edbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a5:b0:98:bc:72:e4:4c:8c:68:85:f5:bf:c6:c8:7d:fa:78: f8:8b:d1:1b:24:14:5e:55:00:db:17:72:2b:ad:b5:82:11:b4: 77:6f:0e:38:89:38:b0:52:fb:8e:b5:cf:ab:e2:5d:26:b2:40: 7c:30:6e:f7:ec:03:d4:71:70:5e:b7:05:b4:bf:2f:b1:a2:2b: b0:fc:b2:31:8a:c2:69:0b:a2:96:c1:42:68:c8:f7:3a:d3:df: 4e:db:01:d5:99:29:5e:05:05:98:00:24:84:0f:64:da:49:20: 92:52:69:04:e0:93:81:a9:ec:69:c3:bf:cc:1f:aa:3b:24:52: 78:50:87:7e:dc:c2:02:83:64:30:46:f0:3b:18:93:35:b3:71: 27:35:7a:94:09:39:5f:65:bb:11:39:0a:2e:4a:f4:1a:94:e8: 29:9f:11:45:59:03:24:e5:65:b0:24:82:86:7c:fe:53:70:06: b5:40:ef:47:0b:0a:f9:d4:8f:0e:86:a3:4d:49:44:40:d7:fd: a1:35:cb:b2:f2:8d:06:45:4a:84:b8:ec:0b:34:26:2c:c6:5c: 0d:eb:56:ea:f2:d9:8b:6a:6b:32:7c:73:eb:8d:65:03:10:14: 96:48:82:2b:a7:ad:14:3c:df:6e:4d:42:ff:5e:04:2c:02:b8: ac:7f:6f:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErurScUw26Ctk6y9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTE3MzIwMloXDTI1MTExOTE4MzIwMlowLzEtMCsGA1UEAxMk MzVhODdmMmYtMzI4MS00MWIzLWI5ZDgtODRhN2RiNDUyYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPuvzQ7PH6qRy9HhFDosl7Sx82+X2O3AGMcT 14dq295Mez3Wlw0AkK/ni+AHqLMARD87W+Aw/wpvf7SvuotMkeN+v7+FwNUKv7oA ALZFAW3bdfpTW3gSv3lbOKYJWNUKZ74EhxNntlDw186emDYAkpTtetaoLxIkaW2v QyRagVNpS742zkClrdxL/k45KMwVZTC26VY64fTd3Cim8bumsPXJNIHdHlTA6hP7 VMSdpgvzqci2cQ73jcc1jkiteMOBjnpKJmREGtUB8X0oHhp5L1yZ3qOU/6vDWnfx FEFB/Y9etYV3jI8h14xcDkSr12x2ifXXlcpvi1pOYxuKQPsNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVv+r135b5sBxEO1yRk9vWCILGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzg0OWY3MzUtNDJlNS0z ODc2LThhZWUtYWYwOTRjOTJlZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZ/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJelsJi8cuRMjGiF9b/GyH36ePiL0RskFF5VANsXciuttYIRtHdvDjiJ OLBS+461z6viXSayQHwwbvfsA9RxcF63BbS/L7GiK7D8sjGKwmkLopbBQmjI9zrT 307bAdWZKV4FBZgAJIQPZNpJIJJSaQTgk4Gp7GnDv8wfqjskUnhQh37cwgKDZDBG 8DsYkzWzcSc1epQJOV9luxE5Ci5K9BqU6CmfEUVZAyTlZbAkgoZ8/lNwBrVA70cL CvnUjw6Go01JREDX/aE1y7LyjQZFSoS47As0JizGXA3rVury2YtqazJ8c+uNZQMQ FJZIgiunrRQ8325NQv9eBCwCuKx/bys= -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:28 2025 by rpki-client