$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa File: 421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa (raw, json) Hash identifier: gL1Cs36wDSsrZN4vhyINf/LAPuEQnZibhcQvy1+R3ys= Subject key identifier: CE:45:44:4F:58:99:B5:1A:6A:3F:62:AB:AF:4D:90:BE:AD:AE:B6:8E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEF556A8A94D93CFD66E6A740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa Signing time: Thu 21 Aug 2025 23:11:04 +0000 ROA not before: Thu 21 Aug 2025 23:11:04 +0000 ROA not after: Thu 20 Nov 2025 00:11:04 +0000 asID: 31898 IP address blocks: 129.156.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:55:6a:8a:94:d9:3c:fd:66:e6:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 23:11:04 2025 GMT Not After : Nov 20 00:11:04 2025 GMT Subject: CN=7819ec28-02e4-4a10-a8c5-a3dd76f66351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:ce:fb:1d:e1:3e:4e:0b:4b:ec:df:8d:40: 57:19:cc:76:3a:63:2f:6b:2a:80:0f:77:bc:3d:77: 6a:7b:53:8f:d0:24:cb:0d:b3:0a:4d:1a:e8:71:a3: 4b:89:7a:4d:dc:63:82:5c:a3:bc:7f:7e:b0:10:38: 36:82:38:82:7a:b9:9c:a7:8c:88:b3:fb:30:42:40: 17:48:09:d9:3d:d9:9c:50:8d:b8:d9:3f:49:93:6b: 0b:f1:32:f5:59:ac:67:da:97:db:5f:71:3f:d7:c3: bd:1e:37:9d:42:3f:5f:36:d4:40:84:55:91:12:d2: ea:95:67:95:3a:24:e3:62:63:1d:a1:9a:18:03:a3: 27:b1:6c:b7:7a:f0:a9:10:e6:6c:7d:f2:62:fe:83: df:85:b7:e3:6a:ab:57:a8:c2:6f:74:e3:ca:84:e0: 4b:44:c7:73:92:3c:e3:ee:00:f6:42:19:ba:c5:5e: c3:59:b2:43:74:b8:70:89:78:86:45:fa:79:9d:ba: c4:92:03:f1:b8:75:25:e9:7e:52:2a:61:ab:43:16: e1:08:dc:d9:4d:9a:7b:e7:0e:80:7b:ae:bb:1d:fe: 6e:31:95:e9:8c:d8:0c:9f:54:e7:6c:3b:15:dd:43: 9b:aa:d1:7e:11:1e:2f:81:3f:e3:aa:e0:01:54:5d: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:44:4F:58:99:B5:1A:6A:3F:62:AB:AF:4D:90:BE:AD:AE:B6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.156.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:2a:d4:8e:a9:0e:c7:ec:d2:02:1e:a5:5e:0c:97:5d:c0: b6:28:c0:40:68:a6:8f:37:ed:1e:fc:78:f1:6a:7f:de:5e:34: f7:15:d6:44:7b:f3:41:f0:f2:c0:e3:67:0b:eb:4d:2d:53:b5: ec:30:48:61:64:b9:2c:2c:0b:4d:15:6d:ff:db:d5:46:6f:0c: 2a:98:13:08:fd:49:13:90:f0:2f:9d:0e:83:ae:43:07:a6:3b: 27:cd:72:c4:27:b8:89:fd:7f:48:70:6b:30:5f:e8:0e:90:33: 71:c4:37:14:c3:38:31:59:1a:f4:bd:7c:35:4d:07:9a:f0:e1: ef:2f:92:96:65:b8:24:6e:c4:7b:99:29:08:1d:1f:1c:ed:f4: ca:fc:b7:e8:a1:7a:50:be:f0:a7:be:a9:d6:be:ca:ed:0b:d8: 0b:f1:97:1f:0a:cc:93:c4:1f:e5:67:5d:fe:3f:fa:5a:ad:31: 27:8e:6a:d4:20:66:e9:e7:09:20:80:98:bd:ae:5b:ca:37:e5: 23:ff:03:c3:94:2e:a1:42:33:bf:e1:2d:ad:ac:9d:be:57:cd: bc:92:42:bf:32:25:83:03:b1:8e:60:25:27:41:f7:78:88:c6: 0a:c5:54:82:52:bd:a8:1a:0a:ce:87:3d:13:9e:f2:e4:6e:93: 8e:7d:1e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvVWqKlNk8/Wbmp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTIzMTEwNFoXDTI1MTEyMDAwMTEwNFowLzEtMCsGA1UEAxMk NzgxOWVjMjgtMDJlNC00YTEwLWE4YzUtYTNkZDc2ZjY2MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj93O+x3hPk4LS+zfjUBXGcx2OmMvayqAD3e8 PXdqe1OP0CTLDbMKTRrocaNLiXpN3GOCXKO8f36wEDg2gjiCermcp4yIs/swQkAX SAnZPdmcUI242T9Jk2sL8TL1Waxn2pfbX3E/18O9HjedQj9fNtRAhFWREtLqlWeV OiTjYmMdoZoYA6MnsWy3evCpEOZsffJi/oPfhbfjaqtXqMJvdOPKhOBLRMdzkjzj 7gD2Qhm6xV7DWbJDdLhwiXiGRfp5nbrEkgPxuHUl6X5SKmGrQxbhCNzZTZp75w6A e667Hf5uMZXpjNgMn1TnbDsV3UObqtF+ER4vgT/jquABVF2jqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5FRE9YmbUaaj9iq69NkL6trraOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDIxY2MzYzAtZjI4Zi0z NWJiLWE5ZWMtOTk1NmQ0ZTc3MjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZKtSOqQ7H7NICHqVeDJddwLYowEBopo837R78ePFqf95eNPcV1kR7 80Hw8sDjZwvrTS1TtewwSGFkuSwsC00Vbf/b1UZvDCqYEwj9SROQ8C+dDoOuQwem OyfNcsQnuIn9f0hwazBf6A6QM3HENxTDODFZGvS9fDVNB5rw4e8vkpZluCRuxHuZ KQgdHxzt9Mr8t+ihelC+8Ke+qda+yu0L2Avxlx8KzJPEH+VnXf4/+lqtMSeOatQg ZunnCSCAmL2uW8o35SP/A8OULqFCM7/hLa2snb5XzbySQr8yJYMDsY5gJSdB93iI xgrFVIJSvagaCs6HPROe8uRuk459HhQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:39 2025 by rpki-client