$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa File: 3cf1d315-b875-391f-bde7-230f7e720d39.roa (raw, json) Hash identifier: BNxOGFCkctzr4n1KNEeT4zUArWmEMdslfSa3B+ovG/k= Subject key identifier: 75:EC:F9:51:13:60:B9:27:C8:FB:37:33:65:8A:E9:26:3E:B9:8B:01 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF012E8D1B669FDA73813E300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa Signing time: Fri 22 Aug 2025 05:32:52 +0000 ROA not before: Fri 22 Aug 2025 05:32:52 +0000 ROA not after: Thu 20 Nov 2025 06:32:52 +0000 asID: 31898 IP address blocks: 129.146.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:e8:d1:b6:69:fd:a7:38:13:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:32:52 2025 GMT Not After : Nov 20 06:32:52 2025 GMT Subject: CN=86c725fe-b6dd-46b0-b0bc-a5f08b466144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:1a:eb:a6:31:66:a6:20:10:25:ba:ed:70: 5e:76:7b:85:0b:1d:d8:11:ea:8c:23:6b:2c:42:d0: fa:09:77:db:a7:bb:5b:1c:c8:bc:45:53:02:c1:a7: e0:e0:57:d7:37:d4:83:37:59:69:95:57:28:e1:2f: 6d:a3:e5:41:56:fa:83:d1:f5:1d:d5:96:39:b6:9f: ef:d2:6b:d0:35:07:b6:9f:be:99:27:de:cd:0c:5e: 0b:c6:df:1b:a4:13:c4:d1:0c:33:52:58:9e:06:7e: ba:a7:0e:20:c7:b5:35:68:5c:aa:8e:12:84:58:1b: cf:86:68:af:da:75:b8:45:85:c9:6b:45:eb:b8:3d: 78:b3:6d:ee:3f:4d:ff:bc:ab:50:5c:5e:73:fd:9c: 5a:06:c1:d3:c3:0e:98:e8:b4:1a:d7:cd:73:48:22: 41:b6:eb:d3:fb:b5:8f:d2:80:6c:73:a1:f6:f9:6c: 53:23:9e:0b:b7:9e:c1:9d:d0:ad:65:2c:d4:18:05: 66:e1:85:71:54:65:46:14:da:5a:15:6a:0d:99:7a: 0e:4a:3f:2e:fc:d5:91:bd:13:aa:1f:37:3b:e8:89: b0:6a:07:0f:19:a3:f5:a0:d0:ef:06:16:4c:ce:26: a5:3a:d0:d9:37:84:66:c3:57:24:45:9e:c9:23:e8: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EC:F9:51:13:60:B9:27:C8:FB:37:33:65:8A:E9:26:3E:B9:8B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3cf1d315-b875-391f-bde7-230f7e720d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:93:9e:78:95:89:c8:ab:3b:02:c0:f9:ad:1b:61:14:82:89: 75:88:51:3e:56:8c:20:13:31:a9:cf:5e:51:2a:2f:af:15:cc: b9:32:2f:60:d3:0c:a5:c8:08:48:73:02:88:0f:a1:09:3f:63: 37:74:67:c3:0b:ee:07:1d:26:b4:f7:3d:04:06:41:0c:d3:52: 47:7c:74:27:b5:b3:29:4f:22:cb:13:9a:04:f1:7c:c0:e6:a9: 50:ca:2d:23:6c:06:b2:26:44:30:dc:59:02:cf:ef:49:f2:62: 6c:e7:80:bb:45:06:ef:4e:b8:41:55:b8:8f:cb:59:5b:0c:c9: b4:ee:d2:d1:28:e1:1f:cf:76:60:92:ac:4b:3b:da:dd:7e:fa: 18:75:c3:d8:9e:e0:dc:c9:68:de:fd:d2:eb:8e:01:c4:4d:5d: 6a:58:18:6a:6e:c9:bc:bc:f2:ed:2c:91:9c:58:9e:3b:e8:9a: 26:42:e5:ba:30:68:46:a2:cd:7f:73:f9:ed:dc:ee:6d:91:cc: 7f:3f:39:da:a2:08:66:6d:d2:b2:47:fa:16:92:7e:9a:0c:36: 8f:f5:95:59:65:ac:7f:71:6c:25:68:ca:ad:a7:99:fd:6b:b3: 8f:ef:56:cd:e0:4a:07:2f:23:26:b7:73:ae:42:76:0a:86:6e: c3:df:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEujRtmn9pzgT4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzI1MloXDTI1MTEyMDA2MzI1MlowLzEtMCsGA1UEAxMk ODZjNzI1ZmUtYjZkZC00NmIwLWIwYmMtYTVmMDhiNDY2MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKsa66YxZqYgECW67XBednuFCx3YEeqMI2ss QtD6CXfbp7tbHMi8RVMCwafg4FfXN9SDN1lplVco4S9to+VBVvqD0fUd1ZY5tp/v 0mvQNQe2n76ZJ97NDF4Lxt8bpBPE0QwzUlieBn66pw4gx7U1aFyqjhKEWBvPhmiv 2nW4RYXJa0XruD14s23uP03/vKtQXF5z/ZxaBsHTww6Y6LQa181zSCJBtuvT+7WP 0oBsc6H2+WxTI54Lt57BndCtZSzUGAVm4YVxVGVGFNpaFWoNmXoOSj8u/NWRvROq Hzc76ImwagcPGaP1oNDvBhZMzialOtDZN4Rmw1ckRZ7JI+h8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXs+VETYLknyPs3M2WK6SY+uYsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2NmMWQzMTUtYjg3NS0z OTFmLWJkZTctMjMwZjdlNzIwZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6TnniVicirOwLA+a0bYRSCiXWIUT5WjCATManPXlEqL68VzLkyL2DT DKXICEhzAogPoQk/Yzd0Z8ML7gcdJrT3PQQGQQzTUkd8dCe1sylPIssTmgTxfMDm qVDKLSNsBrImRDDcWQLP70nyYmzngLtFBu9OuEFVuI/LWVsMybTu0tEo4R/PdmCS rEs72t1++hh1w9ie4NzJaN790uuOAcRNXWpYGGpuyby88u0skZxYnjvomiZC5bow aEaizX9z+e3c7m2RzH8/OdqiCGZt0rJH+haSfpoMNo/1lVllrH9xbCVoyq2nmf1r s4/vVs3gSgcvIya3c65CdgqGbsPfOrw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:58:15 2025 by rpki-client