$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa File: aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa (raw, json) Hash identifier: 638mNaw+wPwlVcE9wyjz7GQucs/R7itUnp3SDGv3IFk= Subject key identifier: 56:D8:7A:EC:72:D6:75:F7:49:D3:80:9C:41:A9:A6:74:1C:AA:F6:35 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDD9F18CE025470AE1C194C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa Signing time: Thu 21 Aug 2025 10:26:28 +0000 ROA not before: Thu 21 Aug 2025 10:26:28 +0000 ROA not after: Wed 19 Nov 2025 11:26:28 +0000 asID: 31898 IP address blocks: 129.148.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:d9:f1:8c:e0:25:47:0a:e1:c1:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:26:28 2025 GMT Not After : Nov 19 11:26:28 2025 GMT Subject: CN=1a5ebaa1-88e9-41b0-9b3d-dae6386cf206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:68:42:37:91:a0:f1:cc:11:48:be:e6:64: cf:2a:17:52:db:f6:e5:eb:1d:fc:9a:13:57:16:5d: 45:80:5a:8c:23:b9:72:93:eb:98:ef:0b:54:88:f8: 9b:08:9b:11:a9:e5:13:20:03:88:3d:3f:8c:da:62: 12:f9:aa:4a:9e:29:8b:bb:ac:4c:63:84:5b:43:65: 72:3d:9d:3c:34:fd:a6:7d:39:85:01:64:17:ce:e4: 0f:b7:38:38:31:00:5b:38:60:8b:5a:14:fa:61:89: de:c8:10:f2:36:33:d9:ca:a4:8e:64:17:93:a4:f4: fd:05:cf:d0:d6:15:50:5a:7c:86:d4:4b:e7:3a:04: 72:f3:8c:69:48:1b:93:2d:2d:58:d1:37:58:2d:75: 3d:fe:62:f8:e1:b9:f8:72:29:2a:cb:9b:c9:c8:3f: d1:38:e5:84:10:6c:2e:f5:5d:0a:56:d7:68:78:37: ae:01:5e:74:ef:9c:f5:c4:bd:c8:79:fc:1a:14:b4: 91:b8:95:97:59:07:3d:a8:8c:a2:a3:a5:c5:59:85: e4:11:2a:e9:48:62:c4:ac:0d:c7:fa:7c:e3:23:bb: 14:87:a6:ef:2a:9c:b2:a2:71:55:85:90:99:ad:cd: 01:77:2d:45:c9:5b:0f:5e:9d:cb:d8:0c:ba:85:8d: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:7A:EC:72:D6:75:F7:49:D3:80:9C:41:A9:A6:74:1C:AA:F6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/aa9a8b6c-b6ed-37ed-a492-69f6cc0d17dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:99:0c:78:48:81:d5:83:79:6b:f3:67:89:c5:8a:77:06:ff: 1a:f0:13:5e:9a:4c:5b:4c:e0:d2:78:a1:3e:0d:9a:0a:89:9e: ac:1a:a2:59:bb:65:62:4b:07:89:19:f0:e5:0a:c1:f4:75:eb: 66:3a:1c:00:2b:62:7b:ef:0f:7d:b2:c6:24:23:5d:f7:65:9f: 7b:6c:c4:95:93:41:d6:f9:f9:d9:ff:64:c9:d6:d4:89:20:ee: a2:fc:ce:59:6c:78:58:f0:2d:35:90:2f:64:eb:c0:ef:71:32: 00:4a:30:c1:53:7c:8f:52:6d:78:72:a4:10:fc:af:e3:15:4f: 72:c8:f9:9f:fd:c5:26:d9:66:e0:55:9a:99:4b:23:03:7d:2e: e0:6c:73:ac:ed:cb:65:20:35:ff:45:15:fb:37:5e:a7:0b:69: 5a:a0:0d:fc:d8:a1:35:62:56:a0:ad:34:6c:ad:d1:0b:99:9b: f1:0a:59:95:00:83:b2:6e:2a:24:9b:bc:24:d2:0e:19:12:8f: 5c:72:eb:7d:0f:f8:fc:f2:36:a9:72:f1:01:99:82:e6:11:e9: 69:e4:44:4b:2d:1f:d5:27:b8:cc:67:0f:ea:65:b6:95:6c:e5: 7d:35:1d:b1:14:28:ce:7f:c6:dc:cf:a0:d7:aa:09:20:03:18: 72:00:c0:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2fGM4CVHCuHBlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjYyOFoXDTI1MTExOTExMjYyOFowLzEtMCsGA1UEAxMk MWE1ZWJhYTEtODhlOS00MWIwLTliM2QtZGFlNjM4NmNmMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9loQjeRoPHMEUi+5mTPKhdS2/bl6x38mhNX Fl1FgFqMI7lyk+uY7wtUiPibCJsRqeUTIAOIPT+M2mIS+apKnimLu6xMY4RbQ2Vy PZ08NP2mfTmFAWQXzuQPtzg4MQBbOGCLWhT6YYneyBDyNjPZyqSOZBeTpPT9Bc/Q 1hVQWnyG1EvnOgRy84xpSBuTLS1Y0TdYLXU9/mL44bn4cikqy5vJyD/ROOWEEGwu 9V0KVtdoeDeuAV5075z1xL3IefwaFLSRuJWXWQc9qIyio6XFWYXkESrpSGLErA3H +nzjI7sUh6bvKpyyonFVhZCZrc0Bdy1FyVsPXp3L2Ay6hY0GlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbYeuxy1nX3SdOAnEGppnQcqvY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWE5YThiNmMtYjZlZC0z N2VkLWE0OTItNjlmNmNjMGQxN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCZDHhIgdWDeWvzZ4nFincG/xrwE16aTFtM4NJ4oT4NmgqJnqwaolm7 ZWJLB4kZ8OUKwfR162Y6HAArYnvvD32yxiQjXfdln3tsxJWTQdb5+dn/ZMnW1Ikg 7qL8zllseFjwLTWQL2TrwO9xMgBKMMFTfI9SbXhypBD8r+MVT3LI+Z/9xSbZZuBV mplLIwN9LuBsc6zty2UgNf9FFfs3XqcLaVqgDfzYoTViVqCtNGyt0QuZm/EKWZUA g7JuKiSbvCTSDhkSj1xy630P+PzyNqly8QGZguYR6WnkREstH9UnuMxnD+pltpVs 5X01HbEUKM5/xtzPoNeqCSADGHIAwEs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:43 2025 by rpki-client