$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa File: ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa (raw, json) Hash identifier: Tsry7YUDMV0FzFOm5rWNDLselas/SXAA+lM7XMYac7U= Subject key identifier: 3E:6B:C8:D1:68:E0:A9:8F:30:1B:02:10:B8:E0:0A:E4:AC:B5:C9:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEDDA1D9ABC3A19B05B1CAE60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa Signing time: Thu 21 Aug 2025 10:26:49 +0000 ROA not before: Thu 21 Aug 2025 10:26:49 +0000 ROA not after: Wed 19 Nov 2025 11:26:49 +0000 asID: 31898 IP address blocks: 129.159.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:da:1d:9a:bc:3a:19:b0:5b:1c:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 10:26:49 2025 GMT Not After : Nov 19 11:26:49 2025 GMT Subject: CN=916c2a35-44ad-4d6d-b659-6ffbd97f0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e0:9e:7b:36:24:09:78:01:d0:09:9d:69:9e: cf:bc:bf:2d:82:de:0a:74:2b:62:64:fa:76:ab:fd: 5c:47:d5:58:a9:95:cf:42:48:5e:f4:05:a5:82:a2: 7b:3a:71:7a:58:f5:e8:42:c6:bd:d4:e4:03:bb:0c: d1:5b:7b:cc:4a:2b:48:07:fa:25:28:d3:1e:61:8b: cb:ac:07:f2:ba:86:3b:70:07:16:d8:96:37:43:c7: 4e:00:b0:d5:60:82:8a:a5:cf:cf:f8:a8:13:5f:35: 72:91:4f:63:80:ff:cf:89:23:62:21:e1:b5:7c:47: b3:1d:b4:75:be:81:32:d1:cf:52:06:ed:e7:8d:22: 39:99:7f:c8:0e:c8:3d:ad:62:8d:2f:b4:5c:73:ca: 65:bf:3b:44:56:23:11:c4:0b:5d:46:49:8f:68:fe: 3e:20:04:6c:d7:6d:46:f7:e2:84:26:be:1e:50:16: f7:c6:3d:ef:15:e4:82:a6:df:6c:3a:68:1a:03:9f: dd:14:17:d6:06:19:a9:1e:2f:54:69:0e:5c:39:6a: ab:87:9e:7b:79:66:2a:49:e4:91:7c:09:21:63:cf: be:21:a1:7c:22:61:19:d0:58:0a:c2:b6:7c:41:8f: 1b:18:46:c2:6c:87:b7:03:86:48:4f:b3:a0:fc:7f: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:C8:D1:68:E0:A9:8F:30:1B:02:10:B8:E0:0A:E4:AC:B5:C9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba83f9b1-706b-34ad-8af6-c6fb4a522c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.159.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2a:ce:5a:a2:a2:af:96:07:c5:f5:6a:40:5a:f3:2c:ed:7c: 98:48:79:1a:30:c4:08:54:39:88:2e:b4:25:ea:ab:d9:0d:a5: 5a:8f:8c:a2:d5:21:5b:09:32:ff:d0:33:97:eb:5d:4b:2e:8e: 4c:1c:cc:44:9b:9a:b3:b0:47:9f:ef:b9:eb:77:35:6a:14:97: 43:ed:20:e7:c9:1c:12:e7:e8:7c:00:0e:10:03:fa:e0:f1:02: e8:ad:20:7a:12:5a:b3:36:74:47:ee:46:f3:33:87:48:e4:7d: 3b:d8:aa:d2:f1:a5:1f:6e:0a:05:76:d9:8e:f9:a5:9d:11:53: ca:2c:66:d2:51:c1:9f:a5:9d:76:11:04:b4:51:31:f6:49:e4: 09:7b:dd:36:38:e9:8e:ea:b8:88:94:74:46:00:f6:bc:50:91: 95:ad:1a:7f:e0:81:db:a9:3a:b4:e9:4d:01:09:8f:38:ef:58: 31:6b:34:fd:e7:1f:f3:05:78:6b:49:d1:fa:40:12:08:e6:56: 1a:e1:34:5b:1a:34:66:63:8b:e9:b3:8d:c5:a6:37:ac:80:5e: 1d:19:13:a0:b8:c6:90:a2:dd:3b:0d:2a:33:1a:39:5e:8f:7f: 13:0b:d1:5e:48:9b:12:03:29:34:87:ac:c9:4b:41:b2:51:b0: 93:a3:b9:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2h2avDoZsFscrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEwMjY0OVoXDTI1MTExOTExMjY0OVowLzEtMCsGA1UEAxMk OTE2YzJhMzUtNDRhZC00ZDZkLWI2NTktNmZmYmQ5N2YwMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguCeezYkCXgB0AmdaZ7PvL8tgt4KdCtiZPp2 q/1cR9VYqZXPQkhe9AWlgqJ7OnF6WPXoQsa91OQDuwzRW3vMSitIB/olKNMeYYvL rAfyuoY7cAcW2JY3Q8dOALDVYIKKpc/P+KgTXzVykU9jgP/PiSNiIeG1fEezHbR1 voEy0c9SBu3njSI5mX/IDsg9rWKNL7Rcc8plvztEViMRxAtdRkmPaP4+IARs121G 9+KEJr4eUBb3xj3vFeSCpt9sOmgaA5/dFBfWBhmpHi9UaQ5cOWqrh557eWYqSeSR fAkhY8++IaF8ImEZ0FgKwrZ8QY8bGEbCbIe3A4ZIT7Og/H8PKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5ryNFo4KmPMBsCELjgCuSstckpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE4M2Y5YjEtNzA2Yi0z NGFkLThhZjYtYzZmYjRhNTIyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQqzlqioq+WB8X1akBa8yztfJhIeRowxAhUOYgutCXqq9kNpVqPjKLV IVsJMv/QM5frXUsujkwczESbmrOwR5/vuet3NWoUl0PtIOfJHBLn6HwADhAD+uDx AuitIHoSWrM2dEfuRvMzh0jkfTvYqtLxpR9uCgV22Y75pZ0RU8osZtJRwZ+lnXYR BLRRMfZJ5Al73TY46Y7quIiUdEYA9rxQkZWtGn/ggdupOrTpTQEJjzjvWDFrNP3n H/MFeGtJ0fpAEgjmVhrhNFsaNGZji+mzjcWmN6yAXh0ZE6C4xpCi3TsNKjMaOV6P fxML0V5ImxIDKTSHrMlLQbJRsJOjuZI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:42 2025 by rpki-client