$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa File: 8af720b5-edb1-3a64-a631-fb6c358235e3.roa (raw, json) Hash identifier: LKd4UH5Ky3PdZnViXC5dcrSJgAHZlG5ubSYGUcwtzho= Subject key identifier: 11:ED:79:16:3A:5F:FF:A9:E9:8D:AE:00:A4:B8:9E:78:26:0B:8F:38 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF013EDD7D49590A00135B200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa Signing time: Fri 22 Aug 2025 05:34:55 +0000 ROA not before: Fri 22 Aug 2025 05:34:55 +0000 ROA not after: Thu 20 Nov 2025 06:34:55 +0000 asID: 31898 IP address blocks: 129.153.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:13:ed:d7:d4:95:90:a0:01:35:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:34:55 2025 GMT Not After : Nov 20 06:34:55 2025 GMT Subject: CN=dba5bad6-3b2e-4fd6-9ac3-53648acbdb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:89:a9:f4:5d:b8:5d:5f:52:f7:f4:cc:8d: f3:50:2a:67:7e:b7:59:42:91:03:77:a6:cf:d0:21: d5:46:a5:a6:fc:94:2c:1b:6b:bc:d3:0e:d2:ab:10: 20:25:f1:1c:a6:13:be:18:17:87:70:a4:cb:aa:45: c8:dc:af:09:17:89:ab:bd:4f:44:06:6d:22:57:97: 5e:3e:d0:97:00:43:69:d3:93:34:63:31:2d:7c:22: 85:52:6c:5b:66:8d:a8:7c:3b:79:0f:d1:1a:0d:15: 23:42:73:35:53:1f:dd:76:4f:74:dc:8b:35:10:66: 56:7d:1b:84:4d:d6:03:d3:56:cb:e5:b4:a4:62:ed: f6:2c:5f:85:03:05:0f:3d:51:ea:0c:b6:7d:bb:63: 6a:b1:25:f2:73:33:f8:44:99:08:09:ed:bd:e1:2f: b1:4f:6f:e9:49:e1:dd:0a:1d:1e:4a:34:2a:c4:25: db:33:26:09:55:02:7c:d3:7f:36:f2:63:dd:9d:10: 0a:e1:f0:a5:66:2e:04:96:15:db:af:b6:30:ff:6c: d7:6f:ed:c9:83:23:f3:b2:68:45:a2:07:5c:c8:1c: b9:4e:ed:9c:0d:46:72:69:0c:03:56:94:aa:3b:97: 17:43:00:a5:9e:1c:e9:e9:8f:5e:71:a7:a2:49:ba: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:ED:79:16:3A:5F:FF:A9:E9:8D:AE:00:A4:B8:9E:78:26:0B:8F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af720b5-edb1-3a64-a631-fb6c358235e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0e:c6:86:4e:f2:e1:1d:3e:9e:b1:33:97:af:05:f0:3b:ae: 13:e9:ec:62:6e:2e:cf:64:27:a3:fa:07:2f:75:e7:97:e4:98: 69:21:9c:43:6e:5e:b7:5a:a6:5a:c1:74:c2:cc:89:01:c3:f1: 7a:fd:d5:8c:03:06:f5:92:17:21:7c:2e:be:ae:16:26:ac:10: 8a:66:bd:a4:63:84:ac:d9:fa:47:8c:54:59:e2:7f:18:91:00: 4c:0c:29:c8:61:8c:5f:86:89:c0:3d:a0:17:a8:9e:64:fa:16: 96:b4:c1:50:fe:73:56:b3:da:72:71:71:b4:6a:9f:cb:e5:b3: 45:32:10:c0:ce:21:26:77:1b:94:97:e2:ae:55:91:83:df:04: e2:fe:7b:c8:f4:dd:ec:fc:e5:f0:0f:50:91:bc:9a:84:e7:94: 93:03:e7:10:21:bc:a7:3e:e7:39:db:13:ef:4f:40:81:b3:dc: f7:5e:3d:e7:f9:a8:3f:48:fe:d4:60:87:f2:13:96:49:ef:92: 58:5e:a3:de:fc:f3:17:34:30:a2:82:63:3a:28:a9:87:53:30: 9d:a2:c4:46:a1:4c:a2:98:99:1e:36:20:62:38:ed:d7:60:a7: 74:7b:a5:6f:40:0e:b9:cc:5b:13:5a:2a:77:81:56:d4:61:35: 1f:32:95:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwE+3X1JWQoAE1sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzQ1NVoXDTI1MTEyMDA2MzQ1NVowLzEtMCsGA1UEAxMk ZGJhNWJhZDYtM2IyZS00ZmQ2LTlhYzMtNTM2NDhhY2JkYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3OJqfRduF1fUvf0zI3zUCpnfrdZQpEDd6bP 0CHVRqWm/JQsG2u80w7SqxAgJfEcphO+GBeHcKTLqkXI3K8JF4mrvU9EBm0iV5de PtCXAENp05M0YzEtfCKFUmxbZo2ofDt5D9EaDRUjQnM1Ux/ddk903Is1EGZWfRuE TdYD01bL5bSkYu32LF+FAwUPPVHqDLZ9u2NqsSXyczP4RJkICe294S+xT2/pSeHd Ch0eSjQqxCXbMyYJVQJ803828mPdnRAK4fClZi4ElhXbr7Yw/2zXb+3JgyPzsmhF ogdcyBy5Tu2cDUZyaQwDVpSqO5cXQwClnhzp6Y9ecaeiSbp3qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHteRY6X/+p6Y2uAKS4nngmC484MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGFmNzIwYjUtZWRiMS0z YTY0LWE2MzEtZmI2YzM1ODIzNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgZlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwOxoZO8uEdPp6xM5evBfA7rhPp7GJuLs9kJ6P6By9155fkmGkhnENu XrdaplrBdMLMiQHD8Xr91YwDBvWSFyF8Lr6uFiasEIpmvaRjhKzZ+keMVFnifxiR AEwMKchhjF+GicA9oBeonmT6Fpa0wVD+c1az2nJxcbRqn8vls0UyEMDOISZ3G5SX 4q5VkYPfBOL+e8j03ez85fAPUJG8moTnlJMD5xAhvKc+5znbE+9PQIGz3PdePef5 qD9I/tRgh/ITlknvklheo9788xc0MKKCYzooqYdTMJ2ixEahTKKYmR42IGI47ddg p3R7pW9ADrnMWxNaKneBVtRhNR8ylfc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:23 2025 by rpki-client