$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4aafdf12-388e-3cd1-b62f-06f0065ba1e4.roa File: 4aafdf12-388e-3cd1-b62f-06f0065ba1e4.roa (raw, json) Hash identifier: yLGuBJbDBMek/OKW9+Gy/FYgFnrzxmtF6f86YVnPG2A= Subject key identifier: F6:C6:4E:53:6B:BC:E9:4E:D2:A2:76:2D:5C:48:DE:57:41:61:3A:65 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEBFAE143F776567509A06240 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4aafdf12-388e-3cd1-b62f-06f0065ba1e4.roa Signing time: Wed 20 Aug 2025 18:21:13 +0000 ROA not before: Wed 20 Aug 2025 18:21:13 +0000 ROA not after: Tue 18 Nov 2025 19:21:13 +0000 asID: 31898 IP address blocks: 129.149.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:fa:e1:43:f7:76:56:75:09:a0:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 20 18:21:13 2025 GMT Not After : Nov 18 19:21:13 2025 GMT Subject: CN=2253f1ed-f448-43c0-a7ae-c660136019b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:29:47:b2:7a:89:e3:00:f1:54:ec:95:bd: 78:41:40:e4:6f:55:5d:c3:94:42:d2:2e:e9:af:d9: fa:2a:b2:e0:13:5c:a7:52:51:7d:1e:b9:35:cb:82: 77:9e:89:62:b9:24:b5:3c:c3:10:b2:5d:93:63:34: 1a:84:9f:b8:2f:da:f6:93:1e:16:d7:77:96:33:af: b9:e9:42:04:fa:29:4c:26:3d:17:0a:3a:2d:c6:17: 2d:cb:f3:cd:e7:7c:10:53:38:5b:2b:78:63:4e:6a: 62:a6:d3:2c:65:cf:2b:e8:43:c5:33:54:4e:4a:dc: 39:ab:ff:86:78:5c:e8:73:a1:cb:e6:55:f4:61:4d: 63:a8:30:9d:1c:de:74:86:2d:53:38:91:83:29:53: b4:1e:62:6f:c2:2f:54:1f:02:f3:38:9c:d1:49:8d: ca:69:30:e4:7e:d8:91:a1:1a:be:d4:d8:c9:11:8d: 30:05:e6:a7:fa:3a:39:df:f4:de:79:b7:f5:28:e5: bb:82:4e:01:6d:47:5f:75:8b:f7:64:fc:67:b2:2d: b3:0e:a3:76:f7:fe:aa:6f:cf:2b:01:59:b2:3b:86: 65:6a:12:4d:55:ae:e4:bd:3e:2c:09:38:a2:65:4b: 54:c7:e2:52:0f:4d:36:6b:76:3e:6d:21:9f:3c:ff: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:4E:53:6B:BC:E9:4E:D2:A2:76:2D:5C:48:DE:57:41:61:3A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4aafdf12-388e-3cd1-b62f-06f0065ba1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:14:80:b8:b6:88:ed:03:31:36:fe:4b:39:a9:40:98:b1: ae:47:8a:18:7e:3a:14:73:ad:bb:36:f1:40:1c:22:ac:f6:c9: 59:f9:76:d1:d4:a4:c2:8f:c4:e2:db:95:d8:d0:6b:22:74:52: cf:3c:4b:74:68:ce:e8:b2:61:3d:2f:33:dc:26:3a:81:50:bc: bf:fb:3f:f9:73:66:75:d5:3d:72:48:8a:c4:e9:57:57:a3:d7: a8:95:be:dc:78:6b:45:3a:49:3f:d2:1a:66:77:68:44:f3:05: 85:50:bc:8b:dd:b3:95:6b:10:79:5e:1d:65:84:92:54:32:53: b9:92:1c:f2:a9:7f:11:dc:aa:05:0c:8f:eb:33:5d:1e:ab:3e: 87:7c:73:28:c7:5d:8c:8a:65:a0:2a:40:a3:6b:76:c2:00:62: 1c:da:68:bb:98:92:86:88:5c:ec:6d:71:49:b1:89:45:d7:64: 08:0e:5c:07:b8:5b:11:a0:63:73:04:53:d3:11:7a:f6:3f:ef: 4c:b7:bb:05:75:38:80:ab:79:ec:06:f5:38:f5:f7:61:65:b1: b3:14:75:61:46:75:69:90:fe:96:93:ef:7b:4f:98:c5:a3:c8: 24:15:81:fd:05:90:a8:82:01:d2:d0:d1:03:78:3a:20:8f:53: 64:b8:90:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErr+uFD93ZWdQmgYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMDE4MjExM1oXDTI1MTExODE5MjExM1owLzEtMCsGA1UEAxMk MjI1M2YxZWQtZjQ0OC00M2MwLWE3YWUtYzY2MDEzNjAxOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbopR7J6ieMA8VTslb14QUDkb1Vdw5RC0i7p r9n6KrLgE1ynUlF9Hrk1y4J3noliuSS1PMMQsl2TYzQahJ+4L9r2kx4W13eWM6+5 6UIE+ilMJj0XCjotxhcty/PN53wQUzhbK3hjTmpiptMsZc8r6EPFM1ROStw5q/+G eFzoc6HL5lX0YU1jqDCdHN50hi1TOJGDKVO0HmJvwi9UHwLzOJzRSY3KaTDkftiR oRq+1NjJEY0wBean+jo53/Teebf1KOW7gk4BbUdfdYv3ZPxnsi2zDqN29/6qb88r AVmyO4ZlahJNVa7kvT4sCTiiZUtUx+JSD002a3Y+bSGfPP+A5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbGTlNrvOlO0qJ2LVxI3ldBYTplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGFhZmRmMTItMzg4ZS0z Y2QxLWI2MmYtMDZmMDA2NWJhMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeGFIC4tojtAzE2/ks5qUCYsa5Hihh+OhRzrbs28UAcIqz2yVn5dtHU pMKPxOLbldjQayJ0Us88S3RozuiyYT0vM9wmOoFQvL/7P/lzZnXVPXJIisTpV1ej 16iVvtx4a0U6ST/SGmZ3aETzBYVQvIvds5VrEHleHWWEklQyU7mSHPKpfxHcqgUM j+szXR6rPod8cyjHXYyKZaAqQKNrdsIAYhzaaLuYkoaIXOxtcUmxiUXXZAgOXAe4 WxGgY3MEU9MRevY/70y3uwV1OICreewG9Tj192FlsbMUdWFGdWmQ/paT73tPmMWj yCQVgf0FkKiCAdLQ0QN4OiCPU2S4kKY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:21 2025 by rpki-client