$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa File: 7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa (raw, json) Hash identifier: L/yHAe8UEu+aIg6uQr63OlVLfuSmeSF4B1SJWMPAiGE= Subject key identifier: C5:69:F3:54:FC:73:FA:B9:38:85:1C:93:8D:97:83:6D:15:9D:66:A3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF012D75B087167E7C6FF2A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa Signing time: Fri 22 Aug 2025 05:32:44 +0000 ROA not before: Fri 22 Aug 2025 05:32:44 +0000 ROA not after: Thu 20 Nov 2025 06:32:44 +0000 asID: 31898 IP address blocks: 129.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:d7:5b:08:71:67:e7:c6:ff:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:32:44 2025 GMT Not After : Nov 20 06:32:44 2025 GMT Subject: CN=ecf3703d-3a7e-4f1c-8c88-a93507c5c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:1e:db:ca:01:69:5f:5e:b7:c4:99:21:33: cd:b1:0e:15:ef:1f:0b:0d:17:0e:68:23:c4:9f:05: f3:0c:c9:21:aa:81:13:23:15:80:bc:01:2a:e9:5c: 1f:a0:f1:35:50:7e:61:4b:0b:55:c5:d7:26:89:a4: c6:a6:9e:35:8c:8b:1f:f9:bd:ed:b8:b0:5a:f5:96: d0:a7:38:f9:c3:42:8d:18:4e:f2:8d:62:0d:79:83: 62:d9:ee:8f:0c:a8:d3:d7:58:85:39:3a:ba:09:d8: 73:03:5d:a3:51:e6:4f:a3:32:93:01:ac:96:e9:8b: 08:ea:14:ed:de:4c:07:5f:8d:58:bc:1c:6f:44:82: b2:bd:5f:35:ba:f3:ab:32:d8:93:a6:bb:35:c5:89: 23:39:c2:6f:87:3a:f1:28:8e:33:a0:6f:b0:bf:cf: 16:82:bd:00:3f:11:56:87:f4:bc:eb:3c:60:50:1a: db:46:e5:25:38:99:a1:ee:43:b6:c2:b1:74:be:40: 25:21:f5:d7:0e:4b:da:a7:4c:ab:a2:8a:28:cf:48: 82:7f:60:98:81:fb:2f:2e:c4:52:d2:4d:9f:42:ec: cd:1b:0d:cd:d6:42:3e:5c:7c:87:17:92:8a:86:8b: 44:4d:10:4d:65:1a:2f:88:85:0e:6a:e4:12:10:c1: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:69:F3:54:FC:73:FA:B9:38:85:1C:93:8D:97:83:6D:15:9D:66:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ac:96:83:00:8d:6c:0f:c6:f0:95:6b:0e:0f:5a:4a:ee:cb: 13:bb:90:22:08:14:d5:df:58:12:c4:68:de:14:56:5f:3a:80: 6a:8a:49:9b:f6:30:76:68:e7:0b:9d:2c:cf:42:af:d8:dc:2c: 19:6d:5c:08:e3:d1:92:32:2c:92:bf:c2:5e:df:4b:b8:d2:b6: 4c:d8:d3:db:3d:b2:2c:1a:1f:b7:6a:5f:88:cd:3c:d1:81:6f: be:89:79:b6:ff:f9:d1:83:c3:12:85:a3:46:84:89:11:32:d2: 06:6c:d2:87:c6:73:ae:49:9b:ea:8a:05:d5:d9:09:d2:5e:a6: b3:10:7d:6c:f2:7c:f8:9a:2b:17:29:fe:13:f1:1c:2e:80:a6: ef:22:8a:fe:84:c0:9b:60:4c:7c:1b:84:cd:08:04:36:b9:b8: 03:07:11:b7:0c:2f:71:a3:28:1c:e8:9e:22:21:d8:34:3d:54: 04:ed:0c:84:b1:9a:1d:62:b9:88:66:3f:15:56:43:29:ad:aa: 62:48:50:a6:54:c6:bb:3d:1b:f7:41:ad:5d:1e:e1:f7:b3:70: d5:0e:cb:97:d5:91:94:c3:69:30:08:bf:b4:bf:10:99:e9:af: 18:8c:f2:d9:70:ad:41:69:cf:2a:12:2f:04:b8:35:5f:b1:28: 70:25:c1:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEtdbCHFn58b/KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzI0NFoXDTI1MTEyMDA2MzI0NFowLzEtMCsGA1UEAxMk ZWNmMzcwM2QtM2E3ZS00ZjFjLThjODgtYTkzNTA3YzVjMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMIe28oBaV9et8SZITPNsQ4V7x8LDRcOaCPE nwXzDMkhqoETIxWAvAEq6VwfoPE1UH5hSwtVxdcmiaTGpp41jIsf+b3tuLBa9ZbQ pzj5w0KNGE7yjWINeYNi2e6PDKjT11iFOTq6CdhzA12jUeZPozKTAayW6YsI6hTt 3kwHX41YvBxvRIKyvV81uvOrMtiTprs1xYkjOcJvhzrxKI4zoG+wv88Wgr0APxFW h/S86zxgUBrbRuUlOJmh7kO2wrF0vkAlIfXXDkvap0yrooooz0iCf2CYgfsvLsRS 0k2fQuzNGw3N1kI+XHyHF5KKhotETRBNZRoviIUOauQSEMFSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVp81T8c/q5OIUck42Xg20VnWajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzY3MWMyNGItZDhiYy0z MDY3LTlmNTgtNmI5ZjhkOGJkZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGsloMAjWwPxvCVaw4PWkruyxO7kCIIFNXfWBLEaN4UVl86gGqKSZv2 MHZo5wudLM9Cr9jcLBltXAjj0ZIyLJK/wl7fS7jStkzY09s9siwaH7dqX4jNPNGB b76Jebb/+dGDwxKFo0aEiREy0gZs0ofGc65Jm+qKBdXZCdJeprMQfWzyfPiaKxcp /hPxHC6Apu8iiv6EwJtgTHwbhM0IBDa5uAMHEbcML3GjKBzoniIh2DQ9VATtDISx mh1iuYhmPxVWQymtqmJIUKZUxrs9G/dBrV0e4fezcNUOy5fVkZTDaTAIv7S/EJnp rxiM8tlwrUFpzyoSLwS4NV+xKHAlwUI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:08 2025 by rpki-client