$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa File: 72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa (raw, json) Hash identifier: eFAO21g+9TKNmiQXhNbTXeAZeO3po4dyqG2jPclPDSY= Subject key identifier: 2E:44:71:26:8C:0B:A0:31:6E:9B:65:AE:B0:A9:7D:8E:C2:BC:0A:47 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF012921E7C40D064F51AA580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa Signing time: Fri 22 Aug 2025 05:32:11 +0000 ROA not before: Fri 22 Aug 2025 05:32:11 +0000 ROA not after: Thu 20 Nov 2025 06:32:11 +0000 asID: 31898 IP address blocks: 129.146.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:92:1e:7c:40:d0:64:f5:1a:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:32:11 2025 GMT Not After : Nov 20 06:32:11 2025 GMT Subject: CN=4d7a64ce-ac31-4ae6-8fc8-0e0fcb89b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:03:1a:03:4f:14:cb:88:e3:3e:0a:d8:e0: d1:49:3f:e4:c6:2b:95:a3:04:e6:3a:05:db:2d:43: bc:cc:06:c8:05:6e:cb:09:d9:dc:78:b3:7c:eb:f3: ec:92:c5:50:7c:49:dd:9f:f4:ad:d5:b4:42:a5:be: 62:89:73:89:a1:c5:45:31:53:d6:d2:fc:87:82:fb: 5f:6f:3a:01:0e:da:6a:13:19:40:73:4b:90:05:9e: 34:8e:73:4a:64:cb:74:29:d0:86:8d:88:c6:a4:98: 9c:23:7f:43:25:41:dc:51:03:19:05:40:2f:94:de: c7:f1:23:a3:14:c6:92:63:a1:df:5a:c0:e4:a6:77: a3:5b:8d:06:07:ea:e0:5d:25:41:77:e0:ff:19:f9: a8:be:31:44:df:77:19:b9:7f:9c:90:36:ef:fb:74: 5f:70:c9:91:ea:3b:de:78:1c:e7:16:bb:9f:89:c2: 58:8b:9b:be:4b:4a:d7:f9:3c:5f:51:36:d0:6b:b0: 3e:fa:1c:69:94:97:85:9c:4e:ed:e0:25:40:3a:76: b3:e0:1d:1f:1c:c3:79:94:44:9f:3a:e5:58:da:c2: 15:80:d3:7c:86:0b:10:22:e4:f6:0b:7c:a8:1d:9d: ab:70:dc:de:f5:cc:53:fb:2f:5b:40:12:7b:9c:2f: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:71:26:8C:0B:A0:31:6E:9B:65:AE:B0:A9:7D:8E:C2:BC:0A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ea:95:a2:a9:90:20:2d:3a:bb:23:25:e1:fc:5d:7a:84:49: a3:1f:8a:34:dc:0b:cc:fe:ee:2c:76:b3:d6:d8:49:6f:78:63: be:85:ba:b5:fe:c2:75:78:7c:ff:91:4b:16:3f:93:67:f2:cb: 13:d8:3f:db:26:b3:91:56:6d:9d:fc:b2:83:60:c9:78:a5:1b: 53:f5:28:c4:e4:b8:32:e2:a0:63:2c:58:dc:f8:d8:5e:71:18: fc:73:fa:54:f6:7f:6b:73:dd:ca:c4:1e:2e:bd:7b:9c:f7:fd: 8b:59:3a:42:51:f6:a7:16:76:f2:bd:26:74:cc:91:18:32:85: 10:60:0d:f6:8f:1e:7c:25:3c:65:c0:4e:cc:54:07:3f:92:d1: fa:5e:23:a8:ee:d2:f8:11:42:02:f7:69:39:0f:92:c9:64:96: 40:e6:db:ca:57:cd:50:93:c1:80:fa:10:86:88:69:d6:6e:44: 1e:c9:cc:2d:f7:d3:25:94:9d:14:27:60:17:c9:91:74:44:49: 69:1c:2f:73:7c:5e:7d:db:69:fc:0f:c9:be:83:78:e5:82:b8: 91:15:d4:b5:96:10:ae:b2:22:76:5d:2d:af:ad:dd:f6:72:b7: c3:c4:75:f2:71:0b:0a:81:9c:3b:10:4d:b2:b7:3c:94:04:7a: c6:bf:4f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEpIefEDQZPUapYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzIxMVoXDTI1MTEyMDA2MzIxMVowLzEtMCsGA1UEAxMk NGQ3YTY0Y2UtYWMzMS00YWU2LThmYzgtMGUwZmNiODliOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivcDGgNPFMuI4z4K2ODRST/kxiuVowTmOgXb LUO8zAbIBW7LCdnceLN86/PsksVQfEndn/St1bRCpb5iiXOJocVFMVPW0vyHgvtf bzoBDtpqExlAc0uQBZ40jnNKZMt0KdCGjYjGpJicI39DJUHcUQMZBUAvlN7H8SOj FMaSY6HfWsDkpnejW40GB+rgXSVBd+D/GfmovjFE33cZuX+ckDbv+3RfcMmR6jve eBznFruficJYi5u+S0rX+TxfUTbQa7A++hxplJeFnE7t4CVAOnaz4B0fHMN5lESf OuVY2sIVgNN8hgsQIuT2C3yoHZ2rcNze9cxT+y9bQBJ7nC932QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5EcSaMC6AxbptlrrCpfY7CvApHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzJhN2YyZTEtZGQyZS0z MjA3LTgyMDctMmQ3Y2U0YTIxN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHqlaKpkCAtOrsjJeH8XXqESaMfijTcC8z+7ix2s9bYSW94Y76FurX+ wnV4fP+RSxY/k2fyyxPYP9sms5FWbZ38soNgyXilG1P1KMTkuDLioGMsWNz42F5x GPxz+lT2f2tz3crEHi69e5z3/YtZOkJR9qcWdvK9JnTMkRgyhRBgDfaPHnwlPGXA TsxUBz+S0fpeI6ju0vgRQgL3aTkPkslklkDm28pXzVCTwYD6EIaIadZuRB7JzC33 0yWUnRQnYBfJkXRESWkcL3N8Xn3bafwPyb6DeOWCuJEV1LWWEK6yInZdLa+t3fZy t8PEdfJxCwqBnDsQTbK3PJQEesa/T2w= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:50 2025 by rpki-client