$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa File: 6a84b6c1-b312-3e15-9d9a-52e917746f80.roa (raw, json) Hash identifier: O67cmICtRuXJmYDzOk/u8EbgTz5oogN9BLXTY+sLVWg= Subject key identifier: 2A:DA:FE:20:2C:05:BD:69:BF:0E:02:90:DC:20:8B:D0:D9:9B:F2:5F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013473E08C65C9D6D075900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa Signing time: Fri 22 Aug 2025 05:33:37 +0000 ROA not before: Fri 22 Aug 2025 05:33:37 +0000 ROA not after: Thu 20 Nov 2025 06:33:37 +0000 asID: 31898 IP address blocks: 129.146.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:47:3e:08:c6:5c:9d:6d:07:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:33:37 2025 GMT Not After : Nov 20 06:33:37 2025 GMT Subject: CN=76c8d460-9354-4efa-ba0b-b7a0714533e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:25:68:3e:68:28:c1:b1:73:e6:ef:69:1e: 8a:f4:d6:d1:6f:36:c2:1a:76:ac:3a:7a:d9:47:e7: 5e:32:ce:b5:cb:48:b4:aa:62:3e:e9:65:9d:12:5d: 5a:a4:18:b7:51:eb:cb:12:e8:3f:9f:bc:9b:65:13: 14:7c:70:05:3c:8c:ee:f4:ca:df:0b:be:ad:d3:3a: 15:88:81:bf:ab:75:2a:2d:eb:c7:45:51:5d:7b:51: 16:fb:af:f7:7a:4f:82:63:81:41:39:c8:83:b7:82: ea:5d:57:ac:44:47:cc:e0:fc:27:7d:6e:c5:60:39: e8:6b:1f:9a:92:bc:87:14:4e:01:a1:9a:74:d1:bb: ee:0a:5f:a9:10:d7:46:64:32:ab:5e:7e:ef:d4:56: b3:16:24:ed:ab:e6:9d:78:f8:77:93:f9:99:45:5b: 09:86:e1:d7:1a:29:31:0e:e5:15:91:6f:d2:d0:1b: c6:22:14:43:67:5c:64:f5:ae:de:1b:12:b2:c7:f4: e1:62:c5:9e:87:1c:76:0c:0a:71:47:49:cc:2f:a8: 5b:f8:24:71:fa:e9:26:ae:62:2f:a0:80:a4:25:d1: 70:63:2f:3d:c6:ba:36:44:93:5b:f1:25:cf:b0:e1: 8f:ad:e4:34:e5:a8:74:26:45:85:2c:6f:45:c3:53: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:FE:20:2C:05:BD:69:BF:0E:02:90:DC:20:8B:D0:D9:9B:F2:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a84b6c1-b312-3e15-9d9a-52e917746f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7d:f7:75:c0:40:45:5f:dc:4a:b6:8a:bd:02:e9:5c:46:8c: 54:e9:07:1f:ec:cb:c7:f9:73:e0:dc:7d:eb:66:3e:b4:be:8a: c9:61:76:ae:17:28:4a:34:e3:ad:37:a2:b9:fa:72:d7:4e:00: 33:34:0d:d1:ca:88:1d:80:93:9f:a6:e2:4c:6d:8c:52:3a:59: a2:3f:f7:c9:d2:b5:fd:86:ef:a1:b3:fe:c4:79:cf:4e:b2:a2: 81:cb:0b:dd:64:ba:d4:e9:4d:23:4c:f6:76:fa:98:e5:9b:0a: f4:45:86:75:c4:3f:12:3c:0b:d9:27:6f:72:e0:ea:c3:f9:3c: 4d:73:e9:d5:8c:8e:73:f4:e3:42:be:bc:de:6e:63:b7:d3:e3: 41:c4:1e:ec:8c:04:fd:e2:ae:00:94:a2:50:36:e8:2f:8f:e3: e3:40:13:ab:30:d5:ce:1b:e4:2f:da:a9:44:52:7b:99:2a:43: a8:82:26:24:83:a3:84:72:07:1f:22:c2:72:49:dd:c3:c3:87: 0d:29:75:73:5b:5f:7c:91:d3:8f:7b:12:b8:b8:67:28:58:98: 7f:5e:db:f4:21:82:aa:9e:c5:c1:6e:65:9c:2f:97:18:a1:8f: 9a:11:17:f0:9d:ac:da:d4:01:35:b7:c4:9a:13:81:ef:1d:db: f0:03:03:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE0c+CMZcnW0HWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzMzN1oXDTI1MTEyMDA2MzMzN1owLzEtMCsGA1UEAxMk NzZjOGQ0NjAtOTM1NC00ZWZhLWJhMGItYjdhMDcxNDUzM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl28laD5oKMGxc+bvaR6K9NbRbzbCGnasOnrZ R+deMs61y0i0qmI+6WWdEl1apBi3UevLEug/n7ybZRMUfHAFPIzu9MrfC76t0zoV iIG/q3UqLevHRVFde1EW+6/3ek+CY4FBOciDt4LqXVesREfM4PwnfW7FYDnoax+a kryHFE4BoZp00bvuCl+pENdGZDKrXn7v1FazFiTtq+adePh3k/mZRVsJhuHXGikx DuUVkW/S0BvGIhRDZ1xk9a7eGxKyx/ThYsWehxx2DApxR0nML6hb+CRx+ukmrmIv oICkJdFwYy89xro2RJNb8SXPsOGPreQ05ah0JkWFLG9Fw1MWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCra/iAsBb1pvw4CkNwgi9DZm/JfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmE4NGI2YzEtYjMxMi0z ZTE1LTlkOWEtNTJlOTE3NzQ2ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd993XAQEVf3Eq2ir0C6VxGjFTpBx/sy8f5c+DcfetmPrS+islhdq4X KEo04603orn6ctdOADM0DdHKiB2Ak5+m4kxtjFI6WaI/98nStf2G76Gz/sR5z06y ooHLC91kutTpTSNM9nb6mOWbCvRFhnXEPxI8C9knb3Lg6sP5PE1z6dWMjnP040K+ vN5uY7fT40HEHuyMBP3irgCUolA26C+P4+NAE6sw1c4b5C/aqURSe5kqQ6iCJiSD o4RyBx8iwnJJ3cPDhw0pdXNbX3yR0497Eri4ZyhYmH9e2/QhgqqexcFuZZwvlxih j5oRF/CdrNrUATW3xJoTge8d2/ADA2Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:15 2025 by rpki-client